Privacy Policy

Last updated: 21 July 2026

1. Who we are

Enki AI is a business software platform operated by Enkisonics Pty Ltd (ABN 48 688 943 106) of 80 Fernley Street, Cairns QLD 4870, Australia (“we”, “our”, “us”). This policy covers the enki.ai website, the Enki AI mobile apps, the Enki desktop app, and the Enki platform itself. We are committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. Information we collect

Account information

Name, email address and mobile phone number — your mobile number is used to send sign-in verification codes (two-factor authentication) by SMS.
Password (stored only as a secure cryptographic hash) and device identifiers for signed-in devices.
Company details you or your company administrator provide, such as business name, ABN and branding.

Content you create on the platform

Your conversations with Enki — messages you send and the replies you receive.
Voice messages — recordings you make in the app are transcribed to text so Enki can respond; spoken replies are generated from Enki's response text.
Business data your company stores in the platform: contacts, documents, files, pipelines, transactions, schedules and app data.
Details of third-party services you choose to connect (for example your email or accounting provider), including the secure tokens needed to access them on your behalf.

Collected automatically

Device and technical information: IP address, browser or app version, operating system.
Usage information: features used, pages visited and interaction patterns, used to operate and improve the service.

Mobile app permissions

Microphone — only when you actively start a recording: tapping the microphone button, or pressing your headset button in walkie mode (which can begin a recording while the app is in the background, always announced by an audible chime). The microphone is never accessed passively or without an action from you.
Contacts — only if you grant permission, to let you use your device contacts inside the app. We do not upload your address book without an action from you that requires it.

3. How AI processing works

Enki is an AI assistant. When you send a message, it — together with the context needed to answer, which can include your company data — is processed by AI models. We use a mix of models we host ourselves on our own GPU infrastructure in Australia and leading commercial AI providers (such as Anthropic, OpenAI and Google) accessed under business API terms that prohibit the provider from training their models on your data. Voice transcription runs on our own infrastructure; spoken replies may be generated by a third-party voice synthesis provider.

4. How we use your information

To provide and operate the platform, including generating Enki's responses.
To secure your account — verification codes, sign-in alerts and fraud prevention.
To respond to your enquiries and provide support.
To send service notifications, and marketing only with your consent (opt out any time).
To process subscription payments and maintain business records.
To analyse usage and improve the product.
To comply with our legal obligations.

5. Data isolation between companies

Every company on the platform is a separate tenant. Your company’s data — contacts, documents, conversations, memories, connected services — is scoped to your company and is never visible to, or used on behalf of, any other customer.

6. When we share information

We do not sell, trade or rent your personal information. We share it only with:

Service providers who help us run the platform: cloud and content-delivery infrastructure, SMS delivery (for verification codes), transactional email, payment processing, voice synthesis, and the AI model providers described in section 3 — each bound to use your information only to provide their service to us.
Third-party services you choose to connect — data flows to them only at your direction, under their own privacy policies.
Authorities, where required by law, a court order or an enforceable government request.
A successor entity if our business is merged, acquired or restructured — we would notify you before your information becomes subject to a different policy.

7. Security

Encryption in transit (TLS) across the platform.
Passwords stored as secure hashes; two-factor authentication on sign-in.
Per-company data isolation enforced at every layer of the platform.
Credentials for connected services encrypted at rest.
Primary hosting on infrastructure located in Australia.

No method of transmission or storage is completely secure; we cannot guarantee absolute security, but we work to protect your information with commercially reasonable measures.

8. Retention

Account and company data: for the life of the account, then deleted or anonymised, with records kept up to 7 years where Australian tax and corporations law requires.
Transaction records: 7 years, as required by law.
Conversations and business content: until you delete them or your account is closed.
Usage analytics: typically anonymised within 24 months.

9. Your rights

Under the Australian Privacy Principles you can:

Ask for access to the personal information we hold about you.
Ask us to correct anything inaccurate or out of date.
Ask us to delete your information, subject to legal retention requirements.
Ask for a copy of your information in a portable format.
Withdraw consent to marketing at any time.
Complain to us, and if unsatisfied, to the Office of the Australian Information Commissioner (OAIC) — www.oaic.gov.au, 1300 363 992.

To exercise any of these rights, contact us via the details below. We respond within 30 days and may need to verify your identity first.

10. International transfers

Some of our service providers — including the commercial AI providers in section 3 — operate outside Australia, primarily in the United States. Where information is processed overseas we rely on contractual safeguards requiring those providers to protect it to a standard consistent with this policy.

11. Children

The platform is built for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from children; if you believe we have, contact us and we will delete it.

12. Cookies

We use cookies and similar storage to keep you signed in, remember preferences such as theme, and understand how the site is used. You can control cookies in your browser; disabling them may limit sign-in and other features.

13. Changes to this policy

We may update this policy as the product, law or our practices change. Material changes will be flagged on this page with a new “last updated” date, and account holders will be notified of significant changes.

14. Contact us

Enkisonics Pty Ltd (ABN 48 688 943 106), 80 Fernley Street, Cairns QLD 4870, Australia. The fastest way to reach us about privacy is the contact form. We aim to answer all privacy enquiries within 30 days.