Last updated: March 14, 2026
Engram is a memory infrastructure product built by Thomas Stockham. This policy covers how we handle data for both the self-hosted open source version and the hosted Engram Cloud service.
When you run Engram locally, all data stays on your machine. We collect no telemetry, no analytics, and no usage data. Your memories, embeddings, and knowledge graphs never leave your device. The only external call is to your configured embedding provider (e.g. Google Gemini) for generating vector embeddings, governed by that provider's own privacy policy.
When you use Engram Cloud, we store the following data on our servers:
Engram Cloud data is encrypted in transit (TLS) and at rest. Our infrastructure runs on Fly.io with isolated per-account storage. API keys are hashed before storage. We follow standard security practices for credential management and access control.
You can delete individual memories at any time via the API. You can export your entire vault using engram export and delete your account by contacting us. When you delete your account, all associated data is permanently removed within 30 days.
For privacy questions or data deletion requests, contact tstockham96@gmail.com.