MyDataKey is a nonprofit data ownership tool that helps you discover, manage, and control your personal data. Using the PDAOS (Personal Data Asset Origination System), you can see who has your data, opt out of data brokers, and generate proof-of-ownership certificates for your personal information.

The core platform is free. MyDataKey is operated by Own Your Data Inc., a nonprofit organization. Our mission is empowering individuals to exercise their data privacy rights. The iOS app is free to download and uses 100% local storage — we never collect or store your personal data on our servers.

How does data opt-out work?

MyDataKey connects you to over 20 data broker opt-out portals and walks you through the removal process for each one. We provide direct links, pre-filled forms where possible, and tracking so you can monitor which brokers have processed your removal request.

What is a data certificate?

A data certificate is a verifiable document that proves you have taken steps to manage and protect your personal data. It includes a timestamp, the actions you have completed, and a unique verification code. Think of it like a deed for your house — but for your personal information.

Demo ONLY % - MyDataKey - Personal Data Ownership

MyDataKey -- Personal Data Ownership

Flow

Click steps to preview screens. This is a front-end demo.

Demo

Entry

Value + calm reassurance

Public

Ownership

Create ownership record

Req

Account

Secure your record

Auth

Verify

Conservative verification

Explain

Intake

2--4 identifiers

Input

Running

Attribution run

Queue

Verified

Ownership confirmed

State

Dashboard

Assets + exports

App

Export

PDF + JSON

Docs

Learn

How ownership works

Info

Posture

Allow / Deny / License

Opt

Receipt

Safe harbor proof

Opt

Guardrail: No accusations, no valuations, no automated enforcement. The MVP establishes an ownership record, verifies attribution conservatively, and lets the user choose what happens next. Clearinghouse screens (11--12) show the optional settlement layer: posture + compliance receipts.

Entry

Establish ownership of your personal data.

Ownership: Pending Verification: -- Posture: --

Establish ownership of your personal data

Your personal data belongs to you. MyDataKey helps you create a formal ownership record and verify it across the digital ecosystem -- calmly, conservatively, and without confrontation.

What this provides

Ownership documentation

Registry-grade posture

What this avoids

Enforcement & resale

User-initiated only

Why it matters

Future options

Provenance + continuity

Create your ownership record

This creates a permanent record asserting that your personal data belongs to you and that ownership has not been transferred. This does not remove data, contact companies, or take action unless you choose to later.

Ownership assertion (required)

I assert ongoing ownership of my personal data and authorize verification for ownership purposes only.

Behind the scenes (MVP): a provisional record is created with a Root Asset ID + timestamped assertion.

Secure your ownership record

This account secures your ownership record. MyDataKey does not sell personal data and does not initiate enforcement actions.

Verify your ownership

To verify ownership, we confirm where personal data attributable to you appears across the digital ecosystem. We use conservative, evidence-based methods and only what's necessary to establish attribution.

What this is not: surveillance, data resale, or enforcement.
What it is: ownership verification and documentation.

Add verification details

Add identifiers you've used online. We recommend 2--4. These are used only to verify ownership and are not shared or sold.

MVP attribution concept: user-provided anchors + conservative corroboration. The record matures only when multiple independent signals converge above threshold.

Verifying ownership

We're verifying attribution across multiple sources. This may take some time. You'll be notified when verification is complete.

Attribution run

Normalize → corroborate → score → snapshot → instantiate

In progress

Progress

Initializing…

Important: No companies are contacted at this stage.

Your ownership has been verified

We've verified that personal data attributable to you exists across one or more environments. Your ownership record is now active.

Ownership: Confirmed Verification: High

Your ownership record

Assets are shown as categories and scopes, not raw data.

Ownership status

Confirmed

Active record

Data assets

Scoped categories

Verification strength

High

Threshold met

Public profile data

Scope: identity-linked public bios and profile references (time-bounded).

Contextual AssetAttribution: VerifiedUse: Informational

Advertising profile data

Scope: ad-preference signals and inferred attributes (evidence-backed).

Contextual AssetAttribution: VerifiedUse: User-controlled

Platform interaction data

Scope: interaction categories attributable to the user (non-raw).

Contextual AssetAttribution: VerifiedUse: Exportable

Export your ownership record

This export documents ownership, verification method, and asset scope. It can be retained for records or shared privately with advisors.

Production: generate signed PDFs + structured JSON server-side (no raw personal data).

Preview (structured export excerpt)

How data ownership works

MyDataKey focuses on documenting ownership and preserving future options. It does not promise outcomes, initiate enforcement, or sell data.

Simple model:
1) You establish an ownership record.
2) We verify attribution conservatively.
3) We record scoped assets with provenance.
4) You choose what to do next (export, hold, later notice, later licensing).
Optional: Set a posture in the Clearinghouse to create infrastructure for a Universal Opt-Out signal.

What this is

Ownership documentation for individuals.

Registry-gradeUser-controlledConservative

What this is not

Not a data broker, not a lawsuit engine, not automated enforcement.

No resaleNo threatsNo promises

Set your rights posture (optional)

This represents the Clearinghouse layer: a machine-readable posture signal platforms can query before sensitive processing. It creates infrastructure for a Universal Opt-Out that can't be ignored without increasing risk exposure.

Posture modes

Choose how your originated assets may be used. (Demo: no companies are contacted.)

AllowPermitted use. Receipt can still prove a platform checked.

RestrictAllow only limited contexts (e.g., account ops, not AI training).

DenyUniversal Opt-Out signal. If ignored after notice, risk profile increases.

LicenseUse is permitted under license terms (rate / scope / duration).

AttributeUse is allowed if attribution is provided (where applicable).

What gets written

A posture record tied to your Root Asset ID, plus a signed "query/receipt" format for platforms (demo).

Important: In production, posture is returned as minimal machine-readable (ALLOW/DENY/LICENSE) plus a signed receipt proving the platform checked.

License terms (only if licensing)

Optional. In production this would be structured and signed.

Why this matters: Once a posture exists and platforms can query it, "we didn't know" becomes a weaker defense.

Compliance receipt (demo)

Proof a platform queried posture and acted accordingly -- useful for auditors and regulators.

Receipt summary

Root Asset ID: --

Posture: --

Timestamp: --

Receipt ID: --

Signed (demo) Non-identifying Audit-ready

Structured receipt (excerpt)

In production this is issued server-side with cryptographic signatures.

Compliance loop: Query posture → act accordingly → store receipt.

//new//