What we collect and how we use it. We aim to collect as little as possible - and to describe what actually happens rather than what sounds impressive.
Last updated: 23 October 2026.
Enki is provided by Enki Labs UK Ltd, a company registered in England and Wales, company number 17365113, registered office 58 Southover, Wells, England, BA5 1UH. We are the data controller for the personal data described here. Contact: hello@enkilabs.co.uk.
We do not ask for your real name, and we do not sell your data.
For the companion itself, and for payments: because it is necessary to provide the service you asked for (contract). For safety filtering, abuse prevention and security: because we have a legitimate interest in protecting users and the service. For optional product updates: your consent, which you can withdraw.
These are US-headquartered companies, so some processing happens outside the UK. This hosted setup is not the fully on-device "sovereign" mode - we're transparent about that.
Your companion's memory is kept until you delete it or your account. The billing email is kept only for the length of a free trial. Safety and security records are kept without the original message content.
Problem reports are kept so we can investigate and fix what you reported. We have not yet set a fixed time limit for them; when we do, it will appear here. Deleting your account also deletes every report you have sent. To delete a report without deleting your account, email hello@enkilabs.co.uk.
When a message breaks Enki's child-safety rules, we keep a safety record. Most of these records do not identify you: they hold the date, the type of event and a one-way fingerprint of the message, not the message itself. For the most serious events - a first-person admission or request involving the sexual abuse of a child - the record is linked to your account so that a person at Enki Labs can review it. Safety records never contain the words of your conversation. We keep them to protect children and to prevent and detect crime.
Deleting your account deletes your Enki and your conversations. It does not delete a safety record: we keep it as a safeguarding exception to erasure. If your account was blocked, the block is also kept, so it cannot be lifted by deleting and re-joining with the same email address. If a safety record linked to your account is still waiting for review, we hold your deletion request until a person at Enki Labs has reviewed it; we aim to do that within one month of your request.
Your companion's memory is stored in an isolated, per-user space. You can export or delete everything at any time from within the app.
How deletion actually works, because we would rather be precise than sound impressive: when you confirm a deletion we schedule it rather than running it instantly, and you can cancel it from inside the app during that window (about 48 hours). That delay is there to protect you - it is what makes a deletion someone else triggered on your device recoverable. Once the window passes the erasure runs, and it is permanent and irreversible, across both your companion and our cloud backup.
You have rights to access, correct, export and erase your data, to object to some processing, and to withdraw consent where we rely on it. Because we deliberately minimise what we hold and give you in-app export and delete, most of these you can exercise yourself instantly. For anything else, contact us.
If you ask what we hold about you, we will tell you whether we hold a safety record, its date, its type and whether it has been reviewed. We may withhold a safety record where telling you would be likely to prejudice the prevention or detection of crime - for example when an investigation is open (Data Protection Act 2018, Schedule 2, Part 1, paragraph 2). When we do, we record that decision and the reason.
If you are unhappy with how we handle your data you can complain to the UK regulator, the Information Commissioner's Office - ico.org.uk - though we would appreciate the chance to put it right first.
Your memories never reach us. Enki Memory keeps everything it remembers on your own computer. A free install makes no network connections at all.
If you buy Pro. Stripe takes your payment; your card details go directly to Stripe. Our licence service (run on Cloudflare) then keeps a small record so it can issue and renew your licence: your Stripe customer and subscription ids, your licence id, a one-way hash of your email address (not the address itself), whether your subscription is active, and the date it is paid until. Short-lived records (the checkout link, about 7 days; Stripe event ids, 30 days; rate-limit counters, 2 hours) delete themselves.
The licence check. With Pro, the software contacts our licence service to check the date and to renew your licence, sending only your licence and a random number. Our service does not store your IP address.
How long. We keep the licence record while your subscription runs. When it ends, the record deletes itself automatically 2 years later. You can ask us to delete it sooner at any time: hello@enkilabs.co.uk.
hello@enkilabs.co.uk · See also our Terms of Use.