The Coordinated House of Enkian ("Enkian", "we", "us", "our") is committed to protecting your privacy and processing your personal data lawfully, fairly, and transparently. This policy explains what data we collect, why, how we use it, who we share it with, and what rights you have.
We are the data controller for the personal data described in this policy. If you have any questions, contact us at privacy@enkian.com.
When you create an account, we collect your email address and optional display name. If you sign in via a magic link, we process your email to authenticate you.
When you complete a cognitive assessment (48-question or 96-question), we collect your responses to each question. From these responses, we derive your cognitive coordinates — twelve numerical values representing your position across the Enkian cognitive framework. We may also derive secondary values including threshold determination, dimensional gap data, and shape descriptions of your coordinate configuration.
When a report is generated for you, we store the full text of that report. Reports are generated individually for your specific coordinate set by an AI system (see Section 5) and are not pre-written templates.
When you make a purchase, we record the product purchased, the amount paid, currency, and a reference to the payment transaction. We do not store your credit card number, CVV, or full card details — these are handled entirely by our payment processor, Stripe (see Section 4).
We use browser localStorage to store your authentication session, assessment progress (so you can resume if interrupted), and your theme preference (light/dark mode). We do not use tracking cookies, analytics platforms, advertising pixels, or fingerprinting technologies. We do not track your behaviour across other websites.
We record when you give or withdraw consent for data processing, including timestamps and the specific consent given. This is required for our own accountability under data protection law.
| Purpose | Data Used | Lawful Basis |
|---|---|---|
| Create and manage your account | Email, display name | Contract |
| Generate your cognitive coordinates | Assessment responses | Consent |
| Generate personalised reports | Coordinates, assessment tier | Contract (paid) / Consent (free) |
| Process payments | Email, purchase details | Contract |
| Send you your report and account emails | Email, report content | Contract |
| Display your dashboard and coordinates | Coordinates, snapshot data | Contract |
| Maintain consent and audit records | Consent timestamps, actions | Legal obligation |
We do not process your data for marketing, advertising, profiling for third parties, or automated decision-making with legal or similarly significant effects.
Your cognitive profile reports are generated by an AI system (Claude, developed by Anthropic). When a report is generated:
Reports are reflective tools designed to help you understand how your mind works. They are not clinical diagnoses, psychological assessments, or medical advice. No automated decisions with legal or similarly significant effects are made based on your data.
Each report includes a visible disclosure confirming it was generated by AI.
| Service | Purpose | Data Shared | Location |
|---|---|---|---|
| Supabase | Database, authentication, server functions | All account and assessment data | EU (Frankfurt) |
| Stripe | Payment processing | Email, payment card details | EU/US (PCI DSS Level 1 certified) |
| Anthropic (Claude) | AI report generation | Cognitive coordinates and assessment tier only | US |
| SendGrid | Transactional email delivery | Email address, report content (when emailed) | US |
| Cloudflare | Website hosting and CDN | Standard web request data (IP address, user agent) | Global edge network |
Where data is transferred outside the UK/EEA, we rely on adequacy decisions, Standard Contractual Clauses (SCCs), or equivalent safeguards provided by each service. Anthropic's API terms include data handling commitments — your coordinates are processed for report generation only and are not used to train AI models.
Under the UK GDPR and Data Protection Act 2018, you have the following rights:
You can exercise your right to erasure directly by using the "Delete My Account" button on your Dashboard. For all other requests, contact privacy@enkian.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk.
We do not use tracking cookies, analytics cookies, or advertising cookies.
We use browser localStorage (not cookies) for the following strictly necessary purposes:
| Item | Purpose | Duration |
|---|---|---|
| Authentication session | Keep you signed in | Until sign-out or browser clear |
| Assessment progress | Allow you to resume an interrupted assessment | Until assessment completed or browser clear |
| Theme preference | Remember light/dark mode choice | Until browser clear |
Our hosting provider (Cloudflare) may set a strictly necessary security cookie (__cflb or cf_clearance) to protect against malicious traffic. This is not used for tracking or analytics.
Enkian is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. Our assessment requires an age confirmation before proceeding. If you believe a child under 16 has provided us with personal data, please contact us and we will delete it promptly.
We implement appropriate technical and organisational measures to protect your data, including:
We may update this policy from time to time. Significant changes will be communicated via email or a notice on the website. The "last updated" date at the top reflects the most recent revision.
The Coordinated House of Enkian
Email: privacy@enkian.com