Your target audience might not care, but I don't think that's strong enough.

- Companies display a willingness to force agreement to new policies in order to continue using the service, even for paid customers, and often on questionable or void legal footing.

- The fact that it's a paid service right now might not be a strong enough signal. Even large device manufacturers (e.g. HTC) have retroactively patched ads into paid-in-full, physical products. What's to say that you won't have to pivot to make Histre succeed?

- What happens if you are bought out or otherwise personally leave the product? Even if success doesn't affect how you act on your commitments, what's to keep others from malicious actions?

- Adding to the above (re-iterating an ancestor comment), if you're successful enough to need employees you won't have a hand in every decision. How then is privacy still protected?

Privacy aside, if Histre goes under what options do customers have for, e.g., exporting their data?

Thanks, good points, I'll think about them.

Re exporting data: I'm working on that. There will be org-mode export first. Then json.

I would say a legal poison pill, something that builds a framework that the company is dissolved if the core tenants are violated, or that all digital assets are forfeited to a no-profit privacy group.

I know very little about this kind of stuff, but is there anything that would prevent a controlling party from striking the poison pill provisions from the bylaws?

Usually poison pills are to trip up parties without controlling interest, so I'm curious what kind of legal framework would making something like that unchangeable.