Legal

Privacy Policy.

What we collect and how we use it. We aim to collect as little as possible - and to describe what actually happens rather than what sounds impressive.

Last updated: .

Who we are

Enki is provided by Enki Labs UK Ltd, a company registered in England and Wales, company number 17365113, registered office 58 Southover, Wells, England, BA5 1UH. We are the data controller for the personal data described here. Contact: [email protected].

What we collect

  • What you tell Enki - stored, isolated to your own companion, so it can remember and grow with you. A companion inevitably receives whatever you choose to share, which may include sensitive things; we do not ask for them, and we do not use them for anything other than being your Enki.
  • Your date of birth - captured once, to confirm you are 18 or over.
  • Your email, if you create an account - we store only a one-way hash of it, never the address itself. The plaintext is used to send your sign-in link and then discarded. What we hold is a hash→account map, not a mailing list.
  • Billing email, if you subscribe - held only while your free trial runs, so we can send you the reminder before you are charged, then deleted.
  • Minimal technical data - a signed session cookie to keep you logged in, and basic rate-limiting.

We do not ask for your real name, and we do not sell your data.

Why we are allowed to hold it

For the companion itself, and for payments: because it is necessary to provide the service you asked for (contract). For safety filtering, abuse prevention and security: because we have a legitimate interest in protecting users and the service. For optional product updates: your consent, which you can withdraw.

Who processes it for us

  • Cloudflare (Workers AI) - generates Enki's replies. Your messages are sent there for processing. They are not used by us to train public models.
  • Cloudflare (R2) - stores your companion's memory, encrypted.
  • Render - hosts the application.
  • Stripe - takes payment if you subscribe. Your card details go directly to Stripe and never touch our servers.
  • Resend - sends your sign-in links and trial emails.

These are US-headquartered companies, so some processing happens outside the UK. This hosted setup is not the fully on-device "sovereign" mode - we're transparent about that.

How long we keep it

Your companion's memory is kept until you delete it or your account. The billing email is kept only for the length of a free trial. Safety and security records are kept without the original message content.

Storage, export & deletion

Your companion's memory is stored in an isolated, per-user space. You can export or delete everything at any time from within the app.

How deletion actually works, because we would rather be precise than sound impressive: when you confirm a deletion we schedule it rather than running it instantly, and you can cancel it from inside the app during that window (about 48 hours). That delay is there to protect you - it is what makes a deletion someone else triggered on your device recoverable. Once the window passes the erasure runs, and it is permanent and irreversible, across both your companion and our cloud backup.

Your rights (UK GDPR)

You have rights to access, correct, export and erase your data, to object to some processing, and to withdraw consent where we rely on it. Because we deliberately minimise what we hold and give you in-app export and delete, most of these you can exercise yourself instantly. For anything else, contact us.

If you are unhappy with how we handle your data you can complain to the UK regulator, the Information Commissioner's Office - ico.org.uk - though we would appreciate the chance to put it right first.

Contact

[email protected] · See also our Terms of Use.