The facts
The Guardian reports that ZyMix, a new messaging and payments app marketed to UK students, has a contract with Tencent Cloud Europe, a German-based Tencent subsidiary. Tencent Holdings is on the US Department of Defense list of Chinese military companies, a listing that describes the company as indirectly affiliated with China’s People’s Liberation Army. Tencent has stated that its inclusion on the list is a mistake and has no effect on its business. ZyMix’s initial privacy policy stated that Tencent in Frankfurt stored user-generated content and messages. After The Guardian inquired about the policy, it was rewritten and the reference to Tencent was removed. The company now states that Tencent Cloud Europe provides auxiliary services and performance testing, not user-data storage. ZyMix claims it is still in beta and complies with UK regulations. The app is offering students £200 to £400 per month to serve as campus ambassadors. The US Department of Defense's section 1260H list prohibits contracts with entities on the list, though wider sanctions are not automatic. ZyMix has also advertised for Mandarin-speaking staff, and a separate company appeared to be recruiting on WeChat for ZyMix, stating that the product, R&D, design, and testing team is in Greater China.
Our take
Let's get this straight: the geniuses behind ZyMix looked at the entire global cloud market and decided, 'You know who we should trust with British students' private messages and payment data? The company the US Department of Defense officially lists as being in bed with the Chinese military.' Not just any shady outfit, but one with a Pentagon-branded 'Hello, I Am Indirectly Affiliated With The PLA' nametag. What a stunningly shit-for-brains business calculation. These clowns picked a backbone the US military is forbidden from using. That’s their infrastructure play. It’s like building a daycare on a condemned asbestos mine and calling it 'ventilation-friendly.'
Their original privacy policy, the one they thought no one would read, explicitly said Tencent in Frankfurt stored user-generated content and messages. Then The Guardian asked a simple question, and these panicked grifters performed the only competent action in their company’s history: a full-speed, asshole-puckering retreat to the delete key. Poof! Reference gone. Now, magically, Tencent only provides 'auxiliary services and performance testing.' Performance testing of what, you dishonest pricks? The latency on a data pipeline that runs from a UK student’s phone to a corporate structure flagged as a potential national security concern? That’s not a service, it’s a fucking liability with a server rack.
To spread this masterpiece, they’re bribing students with £200-400 a month to be 'campus ambassadors.' The job is essentially: 'Here’s some cash, now go convince your mates to feed their social and financial data into our legally-adjacent, military-tangential data vortex.' And while they’re at it, they’re hiring Mandarin-speaking staff and a separate WeChat recruitment post spills the beans that the entire product team is in Greater China. But it’s fine! They’re 'in beta' and 'comply with UK regulations.' They comply the way a screen door complies on a submarine. This isn’t a tech startup; it’s a data-siphon operation with a glossy app and a student discount, run by cowardly, lying dickheads who think a Pentagon blacklist is just a spicy footnote. They should be tarred, feathered, and launched into the sun.
