The Privacy Covenant: How MEOK Protects Your Most Personal AI Conversations

Does MEOK train AI on my conversations?

No. The Maternal Covenant — MEOK's constitutional care framework written into the codebase itself — prohibits it. Your words improve your companion's memory of you, not a general model. When you tell your companion something personal, that information is stored in your encrypted memory vault and used only to make your companion more attuned to you. It is never extracted, anonymised, aggregated, or fed back into model training. Not today. Not ever.

This is not a policy we could quietly change with a terms update. It is architecturally enforced. The companion memory system is a per-user encrypted vault. There is no centralised training pipeline that touches it. The covenant is code.

How are MEOK memories encrypted?

AES-GCM-256 via the Web Crypto API. Your memory vault is encrypted with a PBKDF2 key derived from your user ID at 100,000 iterations. The server never stores unencrypted memories — the encryption happens client-side before transmission and the key is never sent to our servers. We cannot read your memories even if we wanted to.

Each memory write generates a fresh initialisation vector. Memories are tamper-evident: if any stored memory is modified at the byte level, decryption will fail. The vault is signed and the signature is verified on every read. This is the same standard used by password managers and secure messaging apps.

Is MEOK GDPR compliant?

Yes. MEOK AI LABS is ICO registered. We uphold all data subject rights under UK GDPR and EU GDPR: the right to access your data, rectify it, erase it, and export it in a portable format. You can export everything — conversations, memories, companion profile — at any time from your account settings. Deletion is permanent and irreversible. Nothing lingers in backups after a confirmed deletion request.

Our legal basis for processing conversation data is contractual necessity (providing the companion service you signed up for). We do not rely on legitimate interests to justify secondary uses of your data, because there are none.

What does MEOK share with third parties?

Only what is strictly necessary to deliver the service. We use three sub-processors: Clerk for authentication, Stripe for payments, and Sentry for error monitoring. None of them receive conversation data. Clerk handles session tokens and user IDs. Stripe handles payment card data (which we never touch ourselves). Sentry receives anonymised stack traces when something breaks — no user content, no conversation text.

We have no advertising networks. We do not sell data. We do not share data with AI companies for training. We do not participate in data broker ecosystems. If you are not paying us, you are still not the product — you are a person in beta.

What happens if MEOK shuts down?

You get 30 days' notice minimum. A full data export is provided free of charge to every user before service termination. The memory vault export includes everything: every conversation, every stored memory, your companion's full profile and personality configuration. The export format is human-readable JSON — no proprietary lock-in, no special software required to read it.

We are also committed to open-sourcing the companion memory format specification so that, in the event of shutdown, the community can build tools to migrate vaults to alternative systems. Your companion's memories belong to you — not to the company that helped you build them.