ZyMix, a newly launched messaging and payment application being promoted to British university students, relies on infrastructure owned by Tencent Holdings, a Chinese conglomerate that was added to the US Department of Defense’s list of Chinese military companies in January 2026. The DoD designation indicates that Tencent is indirectly affiliated with the People’s Liberation Army, though Tencent disputes the classification and states it is not a military company or supplier.
The connection between ZyMix and Tencent emerged through the application’s privacy policy at the time of its launch last week. The document initially disclosed that Tencent (Frankfurt), a German-based subsidiary, stored user-generated content and messages. Following an inquiry from a news outlet, ZyMix revised its privacy policy to remove explicit mention of Tencent, instead stating that personal data is stored primarily in the UK and EU, with some service providers located elsewhere including the United States. The company subsequently clarified that Tencent Cloud Europe is used solely for performance testing rather than primary data storage.
Security experts have expressed concerns about the revised disclosure practices. A former UK surveillance commissioner stated he was skeptical of claims invoking commercial confidentiality to avoid transparency questions, and noted that amending policies after media inquiry is not reassuring. A UK-China transparency organization questioned whether ZyMix exercised adequate due diligence before launching the product.
ZyMix is conducting an aggressive recruitment campaign targeting university campuses, offering monetary compensation to student brand ambassadors and advertising multiple staff positions. Some recruitment materials appear to describe development and testing teams based in Greater China across multiple cities, though company representatives assert the organization has no subsidiaries or branch offices in China and is British-based. The company maintains it is developing the app in full compliance with UK data protection and financial regulations.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI