When you create an account in EnigMe, an encryption key is generated that only exists on your phone. All vital data in EnigMe is encrypted with this key. When you connect with someone through EnigMe, a shared encryption key is created between you and the person you connect with.
When you want to validate a person and go to their profile, a code is generated, encrypted, and sent to the person you want to validate. So only the two of you can read the codes you say to each other.