Privacy Policy

Enki is provided by Tallisa ("Tallisa", "we", "our", or "us"). This policy applies to the Enki iOS app, its extensions, our service, and this website.

What we collect

Account information

We collect your email address and an account identifier when you create or use an account. We use them to authenticate you, keep your devices connected to the same account, provide support, and protect the service.

Content you choose to save

Enki processes the links, text, notes, images, videos, and other material you choose to save. Durable user content is encrypted before it leaves your device. Encrypted content and the minimum metadata needed to sync it may be stored by our service.

When you save a link, Enki's own infrastructure fetches that page and its public media instead of your device doing it. The site you saved from sees a request from Enki's extraction service rather than your device or network address, and we do not tell it who you are or what else you have saved. We retrieve only what is needed to build the save, such as page text, page metadata, images, and short video or audio.

Features such as enrichment, search preparation, resurfacing, recommendations, and collections may require temporary plaintext processing. That processing is limited to bounded staging. The plaintext is not copied into durable sync data or object storage and is deleted after processing succeeds or reaches a terminal failure.

AI processing is optional. Before it begins, Enki asks for permission to send saved URLs, extracted text, notes, images, audio, video, and related prompt context to OpenRouter and the selected model provider. If you decline, saves still sync and remain available without AI-generated summaries, recommendations, or collections. You can change this choice in Settings; withdrawing permission stops future AI processing but cannot recall a request that a provider has already completed. Existing generated results remain in your encrypted library, and saves made while AI processing is off are not processed automatically if you later turn it back on.

Purchases

We receive purchase and entitlement information needed to determine whether Enki Plus is active and to provide subscriber features. Apple processes payment details. We do not receive your full payment card information.

Diagnostics, device data, and product interactions

We collect crash information and a device or installation identifier to keep the app reliable, deliver notifications, prevent abuse, and operate the service. If you consent to analytics, we also collect de-identified product interactions so we can understand whether features work. You can change analytics consent in Enki's settings. We do not use this information to track you across other companies' apps or websites.

How we use information

• Provide account access, local-first sync, backup, search, collections, and other app features.
• Process and enrich saves when you ask Enki to do so.
• Verify subscriptions and restore purchases.
• Send service and optional push notifications.
• Diagnose crashes, secure the service, prevent abuse, and improve reliability.
• Respond to support requests and comply with law.

We do not sell personal data. We do not use your saved content for advertising.

Service providers

We use providers only where needed to operate Enki. They process data under their own terms and our agreements with them:

• Apple for App Store purchases, Sign in with Apple, and push-notification delivery.
• Google Firebase for authentication, remote configuration, messaging, crash reporting, and consented analytics.
• RevenueCat for subscription and entitlement management.
• OpenRouter and the selected model provider for bounded content-processing features, only after you allow AI processing. Enki requests zero data retention and denies provider data collection on these requests.
• Cloudflare for encrypted object storage and network services.
• Hetzner for service hosting.

We may also disclose information if required by law, to protect rights or safety, or as part of a corporate transaction. We do not give service providers permission to use your data for their own advertising.

Retention and deletion

We retain account information and encrypted content while your account is active and as needed to provide the service. Temporary plaintext processing data is deleted after processing succeeds or reaches terminal failure. Operational records may be retained for a limited period where needed for security, fraud prevention, legal compliance, and reliable recovery.

You can delete saves in the app. You can request account deletion and deletion of associated personal data from Enki's settings or by emailing [email protected]. We may retain information where law requires it or where a narrow security or legal need applies. Backups expire through their normal retention cycle.

Your choices and rights

You can decline or withdraw optional analytics consent and AI-processing permission, manage notification permission in iOS, access and delete content in Enki, and request access, correction, export, or deletion of your personal data. Additional rights may apply based on where you live. Contact us to exercise them.

Security and international processing

We use technical and organizational safeguards designed to protect data, including encryption in transit and client-side encryption for durable user content. No system can guarantee absolute security. Our providers may process information in countries other than your own, subject to applicable transfer safeguards.

Children

Enki is not directed to children under 13, or a higher minimum age where local law requires one. If you believe a child provided personal data without appropriate consent, contact us.

Changes and contact

We may update this policy as Enki changes. We will post the new effective date and provide any notice required by law. Questions or requests can be sent to [email protected] or Tallisa, Colombo, Sri Lanka.