legal

Privacy Policy

Last updated: March 14, 2026

Overview

Engram is a memory infrastructure product built by Thomas Stockham. This policy covers how we handle data for both the self-hosted open source version and the hosted Engram Cloud service.

Self-hosted Engram

When you run Engram locally, all data stays on your machine. We collect no telemetry, no analytics, and no usage data. Your memories, embeddings, and knowledge graphs never leave your device. The only external call is to your configured embedding provider (e.g. Google Gemini) for generating vector embeddings, governed by that provider's own privacy policy.

Engram Cloud (Hosted Service)

When you use Engram Cloud, we store the following data on our servers:

  • Memory content you store via the API (text, entities, topics, metadata)
  • Vector embeddings generated from your memory content
  • Knowledge graph data (entities, edges, relationships)
  • Account information (email, API keys, billing details via Stripe)
  • Basic usage metrics (memory count, recall count) for plan enforcement

What We Do Not Do

  • We never use your memory data to train AI models. Your data is yours.
  • We do not sell, share, or license your data to third parties.
  • We do not access your memory content except to provide the service or when required by law.
  • We do not run analytics on the content of your memories.

Data Security

Engram Cloud data is encrypted in transit (TLS) and at rest. Our infrastructure runs on Fly.io with isolated per-account storage. API keys are hashed before storage. We follow standard security practices for credential management and access control.

Data Retention and Deletion

You can delete individual memories at any time via the API. You can export your entire vault using engram export and delete your account by contacting us. When you delete your account, all associated data is permanently removed within 30 days.

Third-party Services

Contact

For privacy questions or data deletion requests, contact tstockham96@gmail.com.