Devious Creations is a privacy-first hardware and software company for the kink and BDSM community, built in the EU — Poznań, Poland. The platform is a companion app and a growing family of measurement-driven devices, starting with an impact-measuring instrument. The app stands on its own; it gets better with hardware attached.
This category has a documented record of carelessness with the most personal data there is. Breaches have exposed the intimate details of hundreds of thousands of people — and there is still no trusted, privacy-first name in the space. That gap is the reason this company exists.
This whole thing started the way most of my ideas do: a random thought that refused to go away. What if BDSM had real data? A world built on sensation and trust, running entirely on feel — and no one had brought instrumentation to it. Quantifiable, measurable, yours to read. That felt like a gap worth building into.
That thought became a product. The product demanded an app. And once I had the app, I saw no reason to stop there. The plan is a deeply interconnected ecosystem of hardware and software, for anyone curious about this world, whether you're taking your first careful step into it or have lived here for years.
My background is hardware. Circuits, sensors, physical things that have to survive being used. That part I know. Software was the missing half, and honestly, it stayed missing for years. Then AI got good enough to change the math. It lets me build the app side myself instead of waiting for a team I don't have. I'm not going to pretend otherwise: the hardware is mine, the code is a collaboration, and I'd rather tell you that here than have you find out some other way.
Along the way I made one decision I haven't second-guessed for a second: I will not own your data. I'm tired of the cloud-first model where your most intimate information lives on someone else's servers by default. Everything here is stored locally — on your device, under your control. The cloud touches your data only if you choose it, and then only to sync. Partner sync shares exactly what's relevant to that relationship, nothing more. Nothing is sold. Nothing goes to advertisers.
So what did I set out to achieve? Measurement that's real, not theatre. Safety and consent as defaults, not afterthoughts. Encryption built in the open, so you can check it instead of taking my word for it — the E2EE core is going up on GitHub, and when it's public you're invited to pick it apart. And honesty about how all of this gets made, including the fact that I build with AI, openly.
The short version: I built the thing I actually wanted to exist.