As long as it's closed source, I have only your assurance that you don't have keys.

I doubt you or your cofounders set out to deceive users or spy on them, but there are many, many government-related reasons to lie to your users about privacy. The government can be very persuasive that way.