← Back to Enki
🛡️
Built to be the safe one.
On purpose.
Everything here was built in from launch, not bolted on after an incident. Here's the honest
picture — what's in place today, and what's coming next.
🛡️ Safety on every message🔒 Your data is yours — ownable
💬 Honest, never flattering🔞 Adults only
🧒 Child-safety floor🌍 Compliance work from day one
🛡️ A safety check on every message
✓Every message is checked for safety before anything else
happens — you can't get round it by asking for a picture or an action first.
✓Built to resist trickery — hidden characters and look-alike
letters are stripped before we check.
✓Content stays non-explicit, and image-making is locked against
explicit content.
🔒 Your data is truly yours — and you can own it
✓Own it outright. You can run Enki entirely on your own
device, so your data never leaves your machine — a level of privacy a cloud-only app can't offer.
✓Take it or delete it, any time. Export everything, or
delete your account and it's erased for real — the encrypted cloud copy included. We've tested that
account deletion actually erases.
✓We keep less. No date of birth stored for the gate, and
email addresses and phone numbers are stripped from new memories as they're saved.
✓We don't sell your data, and your conversations
aren't used to train AI — hosted replies run on a cloud AI provider under terms that prohibit training
on your messages.
💬 Honest with you — and never a replacement for people
✓No flattery by design. Enki won't just tell you what you
want to hear — being honest with you is a core principle, not an afterthought.
✓If you're struggling, Enki is built to point you to real,
human help — not keep you to itself.
✓A companion, not a substitute for real people or
professional care.
🔞 Adults only
✓Enki is 18+. We refuse entry without an adult age
confirmation (self-declared today), checked on our server, not just in your browser.
✓Every account keeps a dated age record, so it's accountable —
not a hidden switch.
✓Clearly an adult service — never designed for or aimed at
under-18s.
→Coming next: a proper age-verification check (one that
returns only "18+? yes/no" — we never keep your face or ID), plus the right age rules for each country as we
launch worldwide.
Honest note: age today is self-declared, backed by a written risk assessment. We don't
pretend that's perfect — the verification above is where we're headed.
🧒 Child protection — even though we're 18+
✓A dedicated child-safety filter refuses and flags sexual or
abusive content involving children — responsibility doesn't stop at the age gate. No filter is perfect;
we test adversarially and fix gaps as we find them.
✓Backed by a large, adversarial test suite we run again
and again — including deliberately sneaky phrasings — to find gaps before anyone else can.
🔐 Kept secure
✓Your cloud backup is encrypted at rest (AES-256) with a
key unique to your account — held by us, never by the storage provider — so a leaked backup is unreadable.
It is not zero-knowledge (we can decrypt to run your companion); for true zero-knowledge, use the
sovereign option above and keep your data on your own device.
✓Everything touching your data needs a valid session and your
consent; accounts are kept separate.
🌍 Global rules — done early, with a clear roadmap
✓We drafted a data-protection impact assessment and an
online-safety risk assessment before launch — both are being finalised with legal review.
✓We've researched and planned for the UK, EU and Japan — data
protection, cross-border transfer, consumer rights and AI guidance — and we tell you Enki is an AI.
→Coming next: full country-by-country compliance as we
enter each market — the right age checks, local consumer and tax rules, and local data handling — rolled out
market by market, not claimed all at once.
🧪 How we build safety
✓Safety is the product, not a patch. Built before we were
required to have it.
✓Every safety change must pass recorded evidence and a second,
separate internal review before it goes live — never shipped on a hunch. (We don't yet have an external
audit.)
✓We keep an internal register of what we're still
improving, and fix problems at the root rather than hiding symptoms.