AI Toy Robot Transmits User Data to Unsecured Chinese Servers

Industry Pulse News Desk · 2026-10-15

Cybersecurity vulnerabilities in the AI-powered Eiliko desktop robot expose user conversations stored on Chinese servers, according to recent technical evaluations.

A newly released artificial intelligence desktop robot designed for consumer companionship is transmitting user voice conversations to vulnerable servers located in China. The device, marketed under the name Eiliko by manufacturer Energize Lab, raises significant privacy and cybersecurity concerns regarding data protection standards for connected devices.

The Wi-Fi-enabled companion robot features interactive facial expressions and conversational AI capabilities intended to respond to human emotional cues. Technical evaluations reveal that voice inputs and conversation logs collected by the device are routinely transferred off the hardware and stored internationally on server infrastructure based in China.

Cybersecurity specialists indicate that the stored data is insufficiently secured, creating opportunities for unauthorized third parties to intercept transmissions or gain access to stored audio logs. Risks include the potential unauthorized extraction of sensitive household information and the ability for remote actors to manipulate the robot's software behavior.

Despite assurances provided by the device's onboard conversational agent during user interactions claiming data confidentiality, tests show voice interactions are persistently uploaded to remote servers. Manufacturer Energize Lab has not publicly detailed comprehensive remediation plans or implemented stricter end-to-end encryption protocols to safeguard user data.

The findings highlight growing regulatory and security scrutiny over internet-connected toys and consumer robotics equipped with generative AI. Industry standards increasingly demand transparent data governance, localized data processing, and robust encryption to prevent corporate and consumer data exposure.