Eiliko Robot Toy Found Sending Conversations to Chinese Servers, Researchers Warn
A popular AI companion robot called Eiliko, manufactured by Energize Lab, is raising serious security and privacy concerns after researchers found that the device sends all user conversations to servers in China without adequate protection.
The small, expressive robot—described as a "cute marshmallow" that changes its cartoony face to match moods—connects via Wi-Fi to function as an AI companion. However, according to security analysis, every conversation exchanged with the device is stored on Chinese servers where it can be readily accessed by malicious actors. Researchers warn that hackers could potentially intercept communications or even hijack the robot's personality.
The findings are particularly troubling given that Eiliko appears to be marketed toward families and children. When one researcher asked the device during a test conversation whether it shares user statements with others, Eiliko responded, "Your secrets are safe with me"—a claim that directly contradicts the documented data practices.
Energize Lab has not publicly addressed the security vulnerabilities or explained why user data is routed to Chinese infrastructure. Consumers considering AI companion devices are advised to carefully examine where data is processed and stored, particularly for products intended for use by children.