1. Who we are
MEOK is operated by CSOAI LTD ("we", "us"), a company registered in England and Wales (company number 16939677). We build sovereign AI tooling: personal AI characters, signed identity passports, and measurement instruments for AI behaviour.
2. What we collect
- Account data — email address and credentials when you create an account.
- Passport data — your Ed25519 public key and passport metadata. Private keys are generated and held on your device; we never see them.
- Usage data — interactions needed to operate the service (character settings, preferences, session continuity across your devices).
- Measurement data — if you opt in to benchmarks or training, the prompts, responses, and scores associated with your runs.
3. What we do NOT do
- We do not perform automatic IP-based geolocation. Regional features are opt-in and stated at the point of use.
- We do not use ambient sensing of any kind (no WiFi/CSI presence detection, no always-on microphone processing) without an explicit, revocable opt-in.
- We do not sell your personal data.
- We do not use third-party advertising trackers.
4. Legal bases (UK GDPR)
- Contract — to provide the service you signed up for.
- Legitimate interests — service security, abuse prevention, and product improvement using aggregated, non-identifying statistics.
- Consent — for optional features (benchmarks, training data contribution, regional features). You can withdraw consent at any time in settings.
5. Where data lives
MEOK is local-first by design: character memory and preferences are stored on your devices and synced only to provide cross-device continuity. Server-side processing runs on Cloudflare (UK/EU/US data centres) and Oracle Cloud infrastructure. Signed attestation records are append-only and tamper-evident by design.
6. Retention
Account data is kept while your account is active. Benchmark and measurement contributions you make under consent are retained as part of versioned, anonymised datasets; you may withdraw from future use at any time, and we will delete identifying links within 30 days.
7. Your rights
You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data. Email [email protected] and we will respond within 30 days. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).
8. Children
MEOK is not directed at children under 13, and we do not knowingly collect their data.
9. Changes
We will post changes here and, for material changes, notify you by email or in-product notice before they take effect.