AI Companion Privacy Guide: Store & Never Share

The AI Companion Privacy Guide: What They Store, What to Never Share

Quick answer

AI companion apps store your chats on their servers, usually forever, and some train on them. Your defense is behavioral: sign up with a nickname and a throwaway email, share no identifying details, and file a GDPR or CCPA deletion request on the way out. One 2024 breach exposed roughly 1.9 million records.

Millions of people tell AI companions things they have never said out loud. That is the app doing its job, letting you feel heard at 3am with zero judgment. It is also the privacy catch in one line: every confession becomes a row in a database owned by a company you know almost nothing about. No shame in using these. Just walk in with your eyes open. This guide covers what happens to your chats, what has already gone wrong, and the habits that keep a data incident from turning into a personal one.

What do AI companion apps actually store?

Your full chat history, usually kept forever by default. It is what powers the memory features these apps compete on, the thing that makes you feel remembered.
Your account identity: email, payment method, IP addresses and device fingerprints. Web-billed apps also hold billing records under the operator's company name.
Your character setup, which is revealing on its own. The personality and scenario you designed says a lot about you.
Generated media: images and voice notes tied to your account. These often stick around even after you delete the individual chats.

Some platforms also train their models on your conversations. Policies range from a clear opt-out to a vague 'we may use data to improve services' clause. Before you subscribe, search the privacy policy for the words 'train', 'improve' and 'retain'. Three minutes there tells you most of what you need to know.

Have AI companion apps actually been breached?

Year	Incident	What it exposed
2024	Muah AI hacked (~1.9M records)	Emails linked to users' private prompts; extortion attempts followed
2023	Italy's Garante bans Replika	No legal basis for data processing, no age verification
2025	Luka Inc. (Replika) fined €5M under GDPR	Same failures, formalized; an AI-training probe was opened as well
Ongoing	App shutdowns and pivots	Defunct apps' databases outlive the apps, deletion rights get murky

Notable privacy failures in the AI companion category

The Muah AI case is the one to sit with. Attackers did not just grab emails. They got emails *linked to sexual roleplay prompts*, including material that drew law enforcement attention. Plenty of users had signed up with work addresses, corporate and government domains among them, and that handed the attackers a ready-made blackmail kit. We break it down further in our Muah AI review and in our full safety guide.

Sign-up is the one moment you fully control what a future breach can reveal about you. A nickname and a throwaway email cost nothing on day one, and you cannot add them back later.
By CrushScout Editorial Team

Legal name, address, workplace, school. Not even in passing. Memory features mean a detail you drop once tends to stick around forever.
Real photos of yourself or anyone else. Face uploads are the highest-stakes data here. Apps that push an 'add your photo' feature deserve more scrutiny, not a free pass.
Financial and medical specifics. Bank names, diagnoses, medications. A companion does not need them, and a database should not have them.
Anything about other real people. Your chats pull in more than you. Names of exes, colleagues or family end up in the record too.

What shows up on your bank statement?

App-store purchases like Replika, Talkie and Character AI subscriptions show up as normal Apple or Google charges. Web-billed platforms such as Candy AI, DreamGF and most NSFW-leaning apps bill under processor or company names instead. Check what lands on a statement if that matters for your situation. Where your bank offers virtual cards, use one. No urgency here, this is just prudence.

How do you actually delete your data when you leave?

Deleting the app deletes nothing. Do it in order. Remove characters and chats in-app first, then the account, then send a formal erasure request naming the GDPR (EU and UK) or CCPA/CPRA (California). Most apps honor these globally rather than checking your jurisdiction. Keep the confirmation email. Apps with clean, easy-to-find deletion flows earn points on our privacy axis. The ones that bury the button tell you something too.

Which AI companion apps respect your privacy?

Privacy is 10% of every score we publish (see how we test). At the top of that axis sit Nomi and Kindroid: no breach history, clear controls, no ad-tech tangle. The honest catch is that their strong deletion tools cannot undo details you already typed, so day-one discipline still matters. At the bottom sits Muah AI, for the reasons this page has already made clear. The full field is ranked in our best AI companion apps guide.

Curious which apps handle your data with care? Every review includes a privacy section covering what is stored, training policies, breach history and deletion rights. Browse freely, no card or sign-up needed.

Browse apps with privacy scores

Frequently asked questions

They are private from other users but not from the company running the app. Chats sit server-side, usually forever, and some platforms train on them. Millions of people use these safely by treating every message as data they are handing to a business rather than a sealed diary.

Company staff and systems can access your stored chats under most privacy policies, and breaches have spilled them into public view. The clearest example is Muah AI's 2024 hack, which exposed roughly 1.9 million records that tied emails to private prompts. That is the real-world risk to plan around.

Some do, some do not. Policies range from an explicit opt-out to a broad 'service improvement' clause that covers almost anything. Search the privacy policy for the words 'train' and 'retain' before you subscribe. We summarize each app's training stance in its individual review so you do not have to dig.

Deleting the app alone does not touch server-side data. Remove your chats and characters in-app, delete the account, then email a formal GDPR or CCPA erasure request and keep the confirmation. Most companies honor these requests globally, and the confirmation email is your proof if you ever need it later.

App-store subscriptions show up as ordinary Apple or Google charges. Web-billed companion apps bill under company or payment-processor names instead, which can read as neutral or as a giveaway depending on the name. Check what appears before subscribing if discretion matters, and use a virtual card where your bank offers one.

Among the apps we have tested, Nomi and Kindroid score highest on privacy: no breach history, clear data controls and straightforward deletion. Their strong tools still cannot unsend details you already typed, so early caution helps. For intimate use, steer clear of any platform carrying a breach record.

Privacy NSFW Statistics