ZyMix Removed Tencent References From Privacy Policy
The messaging platform altered its documentation after questions arose regarding its reliance on Tencent infrastructure.
Updated on Oct. 13, 2026 in Cybersecurity
Live Poll
Do you trust applications that store your personal data with foreign-linked infrastructure providers?
Messaging and payment app ZyMix has updated its privacy policy to remove mentions of Tencent, a Chinese conglomerate currently on a U.S. Department of Defense blacklist. The platform states it uses Tencent Cloud Europe BV only for auxiliary services and performance testing.
Why it matters
The change follows scrutiny over the use of infrastructure providers linked to firms identified by the U.S. military as having ties to the People's Liberation Army. It highlights the growing tension between cross-border software operations and national security disclosure requirements.
ZyMix claims user data is now stored within the United Kingdom and the European Union. The app continues to utilize Tencent Cloud Europe BV for auxiliary services and performance testing, though it stopped disclosing this relationship in its public-facing privacy terms.
The players
ZyMix
A messaging and payment application platform that launched in the United Kingdom in October 2026 and utilizes student campus brand ambassadors.
Tencent Holdings
A Chinese conglomerate based in Shenzhen that provides cloud infrastructure services and was added to the U.S. Department of Defense section 1260H list in January 2026.
United States Department of Defense
The federal agency responsible for maintaining the section 1260H list of companies allegedly affiliated with the Chinese People's Liberation Army.
The details
ZyMix operates as a messaging and payment application targeting students, utilizing external infrastructure providers to handle backend data storage. Tencent Cloud Europe BV—the European subsidiary of the Shenzhen-based conglomerate Tencent Holdings—serves as one of these auxiliary providers. By updating its policy, the firm shifted its stated storage location to the United Kingdom and the European Union while maintaining its testing agreements with Tencent.
Timeline
January 2026: The United States Department of Defense added Tencent Holdings to its section 1260H military-linked blacklist.
October 2026: ZyMix launched its messaging and payment application in the United Kingdom.
The Tech Race
This move marks a departure from standard transparency practices regarding cloud infrastructure dependencies in light of the U.S. Department of Defense's section 1260H list. It illustrates how international platforms are navigating the competitive risks associated with using Chinese-owned infrastructure providers.
For students using the application in the United Kingdom, the primary change is a shift in the stated jurisdiction of personal data storage to the U.K. and EU. Users relying on the app for payments or messaging should monitor future privacy disclosures for changes to these infrastructure agreements.
The takeaway
The move underscores the sensitivity of platform infrastructure choices when providers appear on national security watchlists. Users should continue to watch for future revisions to the company's privacy documentation regarding the specific geographic location of its server operations.
Further reading
For broader analysis on how emerging platforms manage data sovereignty and infrastructure risks, visit Cybersecurity.
Source note: This article includes information reported by The Guardian.
Live Poll
Do you trust applications that store your personal data with foreign-linked infrastructure providers?
