Clarity

65% of people click “Accept all” without ever seeing what happens next.

Introduction

The privacy and cybersecurity industry is accelerating, but user awareness is not. Currently, 65% of users click “accept all” on privacy policies, triggering an invisible system of data extraction. Clarity is a solution that makes the invisible data lifecycle visible so consent becomes informed, not automatic. It is an app that quietly watches over your data in the background, telling you exactly who is collecting it.

Details
  • RoleUX research, systems mapping, future scenarios
  • Year2025
  • Duration10 weeks
  • TeamTeam of 3
  • ToolsFigma, FigJam, Google Forms, Excel
  • DomainData Privacy & Cybersecurity
Scope
  • CognitiveOverloadBlindAcceptanceDataExtractionComplexPolicies

    Before designing interventions, we isolated the micro-mechanics of user behavior. By mapping 45 causal and feedback loops, we identified that low awareness inevitably leads to blind consent, fueling a continuous cycle of opaque data practices.

    Causal & Feedback Loops

  • TransparencyBusinessDataliteracyCognitiveloadCyber-securityAwarenessfatigueMonetizationRegulatoryRevenueriskRisk assessmentInvisibleimpactPrivacy compliancecostsPrivacyfailuresUser TrustsecuritytrainingLow IndustryKnowledgePolicy ImplementationGapFear of legalpenaltiesMediaoutrageOver-disclosure inpoliciesNewregulationsComplexPoliciesSlow governmentacceptanceRepetitive securitymessagingReducedAwarenessLayered criticalinformationUnconsentedprocessingBlindacceptanceParadox ofchoiceObsoleteTechNew techAI agentsReducedExpenditureExploitation ofconsumer dataRegular DatabreachesVulnerable toRiskCyberattackDark PatternAI-drivenphishingattacksTrainingAvoidancePost-crisistrainingHuman misusenarrativeConsentburnoutHuman skillsPlatformabandonment++++++-+-+++++--++/--+/-++++++---+/-+++--+++++/-++/-+++

    Zooming out, we synthesized these loops into a unified Deep Structure map. This revealed the overlapping currents between Business Incentives, Regulatory Gaps, and Cognitive Load, proving the issue is systemic, not merely a poor interface problem.

  • TransparencyBusinessDataliteracyCognitiveloadCyber-securityAwarenessfatigueMonetizationRegulatoryRevenueriskRisk assessmentInvisibleimpactPrivacyfailuresUser TrustsecuritytrainingLow IndustryKnowledgePolicy ImplementationGapFear of legalpenaltiesMediaoutrageOver-disclosure inpoliciesNewregulationsSlow governmentacceptanceRepetitive securitymessagingLayered criticalinformationUnconsentedprocessingBlindacceptanceParadox ofchoiceObsoleteTechAI agentsReducedExpenditureExploitation ofconsumer dataRegular DatabreachesVulnerable toRiskCyberattackDark PatternAI-drivenphishingattacksTrainingAvoidancePost-crisistrainingHuman misusenarrativeConsentburnoutPlatformabandonment++++++-+-+++++--++/--+/-++++++---+/-+++--+++++/-++/-+++Lower privacycompliance costsComplexPoliciesNew techReducedAwarenessHuman skillsGapBreaking pointLeverage point

    Diagnosis (Breaking & Leverage Points)

    By stress-testing the architecture, we located the system’s fractures. Instead of fighting ‘Data Extraction’ directly, we targeted ‘Reduced Awareness’ as our primary leverage point, shifting our strategy from blocking data to illuminating it.

  • 2024$270B data brokers2030IoT everywhere2035AI decisions2040Stakes

    Grounded in systemic diagnosis and future foresight, we defined our intervention. The goal was no longer about redesigning a better ‘Accept’ button, but providing Post-Consent Visibility: showing users exactly what happens after the click.

  • 05Defining the Intervention

Process

10 weeks in all
  1. 01

    Research & surveys

    2 weeks

    A survey on Google Forms and secondary research into how people treat privacy policies.

  2. 02

    Systems mapping

    3 weeks

    45 causal and feedback loops, pulled together into one Deep Structure map.

  3. 03

    Diagnosis

    2 weeks

    Finding the breaking and leverage points, and choosing reduced awareness as the one to target.

  4. 04

    Foresight & intervention

    3 weeks

    2040 scenarios, and Clarity defined as post-consent visibility.

Impact

Presented to a jury for the Data Driven Design course, with every design decision traced back to data.

  • 45 causal and feedback loops mapped before any screen was designed.
  • The research moved the brief from blocking data to making it visible.

What I learned

  1. 01

    The problem was the system, not the button.

    Redesigning “Accept all” would have changed nothing; the loops behind it had to be mapped first.

  2. 02

    Data makes an argument harder to dismiss.

    Backing each decision with survey numbers changed how the jury listened.

  3. 03

    Mapping before making saves time.

    Weeks spent on the loops meant the final idea needed fewer rounds of redesign.