Krita is a free, open-source digital painting application built on the KDE and Qt frameworks and licensed under the GNU GPLv3, developed mostly by an international team of volunteers. Its own Privacy Statement says the software 'does not access, collect, use, share or transmit any personal information or user data whatsoever,' and states plainly that since the project has no access to user data it cannot sell it. The krita.org website runs a self-hosted Matomo/Piwik analytics instance (stats.kde.org) with cookie tracking explicitly disabled in its own tracking script. Krita is fiscally sponsored by a named, registered nonprofit -- the Stichting Krita Foundation, based in Deventer, the Netherlands -- and development happens in the open on KDE's GitLab with tens of thousands of public commits. Official release downloads ship GPG signatures for integrity verification. The main warts, disclosed by the project itself: an optional newsfeed feature and the G'Mic plugin both make outbound network connections when enabled, and the app can be configured to embed author metadata in exported images (off by default).