Enki Privacy Policy

Effective date: July 12, 2026

App: Enki

Provider: Bennu Systems LLC, Scottsdale, Arizona ("Bennu," "we," "us," or "our")

Contact: privacy@bennusystems.com

Mailing address: 2700 Hayden Rd, Scottsdale, Arizona 85257, United States

Enki turns business-card text, selected contact information, and notes into contact records and follow-up tasks that you review before saving to a spreadsheet, your phone, or a connected customer-relationship management system ("CRM"). This policy explains what information Enki processes and the choices available to you.

Our privacy principles

• We do not sell personal information.
• We do not use personal information for advertising or build advertising profiles.
• We do not upload business-card photos. Text recognition happens on your device.
• We do not scan or upload your address book. If you use Apple's contact picker, Enki receives only the contacts you explicitly select for that capture.
• You review proposed records before Enki writes them to a CRM.
• We do not use customer captures to train AI models, and we do not opt API content into any model-training programs.

Information Enki processes

Account information

When you use Sign in with Apple, we receive an account identifier and, if Apple provides them, your name and email address. Apple may provide a private relay email address instead of your personal address.

Capture and contact information

Enki may process:

• text recognized from business cards;
• notes, typed commands, and voice transcripts you provide;
• information from phone contacts you explicitly select to import;
• names, titles, employers, email addresses, phone numbers, postal addresses, meeting notes, and follow-up tasks contained in that material; and
• the structured records and edits you approve in Enki.

This information may identify people other than the Enki account holder. You are responsible for using Enki only with information you are permitted to process and send to your selected destinations.

Business-card photos and audio

Business-card images are used on your device for text recognition and are not sent to or stored by Enki's servers. Enki sends the recognized text.

On Android, when you choose cloud transcription after accepting the in-app AI-processing notice, Enki sends the voice recording to Enki and then to GroqCloud to create a transcript. Enki does not keep the recording after transcription. Groq does not retain inference content by default, but may temporarily retain audio and transcript content for reliability or abuse monitoring for up to 30 days unless its Zero Data Retention control is enabled. Enki sends the resulting transcript for the processing described in this policy.

CRM and spreadsheet information

If you connect a CRM, Enki stores encrypted OAuth credentials that let Enki act on your behalf. Enki stores the proposed commands, their execution status, and any spreadsheet rows it creates so you can review, retry, or download your work.

Usage and technical information

We record limited operational information such as capture timestamps, processing status, usage and processing metrics, error information, and monthly usage counts. Our hosting provider may also produce ordinary security and request logs, such as IP address and request time.

Information stored on your device

Enki stores authentication credentials in Apple's Keychain and keeps capture history and approved record details locally so you can revisit prior results. Enki also saves contacts to the phone address book only when you choose that action.

How we use information

We use the information above only as reasonably necessary to:

• authenticate and secure your account;
• structure the captures and contact information you submit;
• show you proposed CRM, spreadsheet, task, and contact changes for approval;
• perform the writes and exports you approve;
• provide local capture history and retry failed operations;
• enforce plan limits, prevent abuse, troubleshoot failures, and monitor cost and reliability; and
• comply with law and protect users, Bennu, and the service.

Who receives information

We disclose information only as needed to operate Enki or at your direction:

• Anthropic receives the text and context needed to structure a capture through its commercial API. Enki does not opt your captures into model training.
• GroqCloud receives an Android voice recording and returns its transcript when you choose cloud transcription after accepting the in-app AI-processing notice. Groq's retention is described in the Business-card photos and audio section.
• Your selected CRM receives only the records you approve. Once saved, those records are governed by your agreement and settings with that CRM.
• Apple provides authentication, device permissions, speech recognition, and App Store services. Apple's handling of those services is governed by Apple's privacy terms and the settings on your device.
• Hosting and database providers process encrypted account and capture data to run Enki. Enki uses reputable cloud hosting and database providers.

We may also disclose information if required by law, to protect rights or safety, or as part of a business transaction subject to appropriate confidentiality safeguards.

Retention and deletion

Enki currently keeps account information, submitted text, structured commands, spreadsheet rows, CRM connection credentials, and usage records while your account is active so that the service can provide history, retries, exports, and support.

You can disconnect a CRM to remove Enki's stored credentials for that connection. You can also choose Privacy & account > Delete account in Enki. Account deletion removes the account and its authentication records, CRM credentials, captures, commands, spreadsheet rows, and usage records from Enki's active production database, and clears Enki's local capture history, digital-card profile, onboarding state, and Keychain credentials from that device.

Account deletion does not remove records you already approved and saved to a CRM, spreadsheet file, or phone. Delete those copies at their destination. If you used Sign in with Apple, you may separately remove Enki from Apple Account > Sign-In & Security > Sign in with Apple. If subscriptions are introduced, deleting an Enki account will not by itself cancel billing through Apple; Enki will provide a direct way to manage the subscription before deletion.

Deleted information may remain temporarily in encrypted backups until the normal backup rotation completes. Production backup retention: up to 30 days. We may retain narrowly limited records longer when required by law, to resolve disputes, or to prevent fraud or abuse, and will disclose that reason when applicable.

Security

Enki transmits server traffic over HTTPS. In production, capture text, transcripts, spreadsheet payloads, and CRM credentials are encrypted at rest, and authentication credentials on the device are stored in Apple's Keychain. No security system can guarantee absolute protection, but we limit collection and access and use safeguards appropriate to the information processed.

Your choices and rights

Before Enki sends a capture to an AI provider, it shows a clear in-app notice and asks for your permission. You may decline or later withdraw permission in Privacy & account. Declining or withdrawing permission prevents new AI-processing requests; it does not delete records you already created or information already sent to a provider before withdrawal.

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing of personal information associated with your account. Contact privacy@bennusystems.com. We may need to verify your identity before fulfilling a request. We will not discriminate against you for exercising a privacy right.

Enki does not sell or share personal information for cross-context behavioral advertising, so there is no sale or advertising-sharing opt-out to exercise.

International processing

Enki's service providers may process information in the United States and other countries. Before offering Enki in jurisdictions that require a transfer mechanism, Bennu will use the contractual or other safeguards required by applicable law.

Children

Enki is a business productivity service and is not directed to anyone under 18. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy as Enki changes. We will update the effective date and, when required, provide additional notice in the app.

Contact

Questions or privacy requests: privacy@bennusystems.com

Bennu Systems LLC

2700 Hayden Rd

Scottsdale, Arizona 85257, United States