How to Evaluate an AI Companion App’s Chat Privacy

Use this guide to assess how an AI companion app handles the messages you send, the information it collects, and the controls it gives you. You will need access to the app and its current privacy policy; avoid using real sensitive details while you investigate.

What You’ll Need

• The app, preferably updated to its current version, and access to its settings.
• The app’s privacy policy, terms, and any separate data or AI-use disclosures.
• A web browser for checking the developer’s support pages and app-store privacy information.
• Optional: a separate email address or test account, if the service permits one and you want to explore without linking your main profile.

Step-by-Step

1. Identify the actual service and operator. Check the app’s store listing and its settings for the developer or company name, official website, and support contact. Make sure the privacy policy belongs to that service and not a similarly named app. Note whether the policy applies to the app, its website, and any connected features, since separate services may have different terms.
2. Read the policy sections about conversations. Search the policy for terms such as “conversation,” “messages,” “content,” “prompts,” “training,” “improve,” “review,” and “retention.” Determine whether chats are stored, how long they may be kept, and whether they may be read by staff or service providers. Watch for vague wording such as “as long as necessary” without a meaningful explanation. Record what is unclear rather than assuming it means chats are private.
3. Check whether chats are used to improve AI systems. Find out if the service may use conversation content to train or improve models, or share it with an AI provider for that purpose. Look for an opt-out and confirm whether it applies to future chats only or also to data already collected. Do not assume that disabling training prevents storage, human review, or processing by providers; those are separate questions.
4. Find out who else may receive the data. Review disclosures about service providers, analytics, advertising, and AI model providers. Ask whether they receive message content or only limited technical information, and whether the company restricts their use of it. A list of provider categories may be less informative than named providers, but the key question is what each recipient can access and why. Treat an unclear answer as unresolved.
5. Inspect account and chat controls in the app. Look for options to delete individual conversations, clear history, export data, close the account, or change data-use preferences. Read the confirmation screens: deleting a chat from the visible list may not immediately remove backups or records retained for operational reasons. Check whether deleted conversations remain accessible on another device after syncing.
6. Review device permissions and linked services. In your phone’s system settings, check whether the app has access to the microphone, photos, contacts, location, or notifications. Compare each permission with a feature you actually use, and deny optional access you do not need. Also inspect connected accounts, voice features, keyboards, or integrations; data sent through them may be covered by another service’s policy.
7. Check security claims carefully. Search for a clear explanation of encryption in transit and at rest, and whether chats are end-to-end encrypted. These terms are not interchangeable. With end-to-end encryption, the service generally should not be able to read message content in the ordinary way; ordinary encryption between your device and a server does not by itself prevent the service from accessing stored chats. If the app does not explain its approach, do not infer protection from a lock icon or a general claim that data is secure.
8. Verify what happens to sensitive details. Check whether the app asks for a real name, phone number, precise location, or other profile data, and whether you can use it with less information. Avoid testing privacy by entering actual secrets, intimate details, passwords, or someone else’s personal information. If you want to try the chat experience, use a fictional scenario and do not treat a test account as proof that the service cannot link activity to you.
9. Make a practical decision and revisit it. Decide whether the app’s collection, retention, sharing, deletion, and security practices fit your comfort level. If key answers are missing, ask support specific questions and save the response. Recheck the policy and settings after major updates or when the service changes its terms; privacy practices can change over time.

Common Mistakes

• Assuming a private-feeling conversation is confidential. A companion’s conversational tone is not a privacy guarantee. Treat chats as data handled by a service unless the service clearly explains otherwise.
• Confusing encryption with anonymity. Encryption can protect data in transit or storage, but it does not necessarily stop the provider from associating chats with your account or accessing them.
• Relying only on an app-store privacy label. Labels are useful starting points, but they may summarize categories rather than explain retention, review, or model-training settings. Compare them with the current policy.
• Thinking “delete” means instant removal everywhere. Copies may persist temporarily in backups or be retained for stated operational or security reasons. Check the policy and deletion confirmation for qualifications.
• Sharing real secrets to test safeguards. A test message containing a password or private detail creates the very exposure you are trying to assess. Use fictional content instead.

Tips

• Search long policies electronically for “retention,” “training,” “human review,” “delete,” and “third parties,” then read the surrounding paragraphs.
• Use a distinct password for the account and enable multifactor authentication if the service offers it.
• Turn off optional data sharing and permissions where available, then confirm the setting is saved.
• Keep notes of the policy date, the controls you changed, and any support answers. This makes later changes easier to spot.
• For highly sensitive conversations, choose not to enter them unless you can verify the protections you require.

Troubleshooting

You cannot find a privacy policy: Open the app-store listing and follow the developer’s privacy link. If it is broken or leads to a different service, contact support. Until you get a clear, relevant policy, avoid sharing personal chat content.

The settings do not match the policy: Take note of the wording and app version, then ask support which control currently applies. Do not assume the more reassuring statement overrides the other one.

You cannot delete a chat or account: Check the app’s help or account section for the current deletion process. If a request requires support, use the official contact listed by the service and keep confirmation. Ask what data is removed, what remains, and for how long.

A permission keeps appearing: Review the operating system’s app-permission settings and disable access you do not need. If doing so breaks a feature, decide whether that feature is worth granting access; do not grant a permission merely because a prompt appears.

The policy is too vague to assess: Ask concise questions: Are chats used for model training? Can staff review them? What is the retention period? Which providers receive message content? What does deletion remove? If answers remain unclear, treat the uncertainty as a reason not to share sensitive information.

Frequently Asked Questions

Does an AI companion app own my chats?
Ownership and usage rights depend on the app’s terms and applicable rules. Read the sections on content, licenses, and data use; do not infer the answer from the app’s conversational style.

Are AI chats encrypted?
Some services encrypt data in transit or at rest, but that is not the same as end-to-end encryption. Check which type is stated and whether the provider can access message content.

Can employees read my conversations?
Some services may allow limited human review for support, safety, or service improvement. Look for the policy’s review disclosures and ask support if it is not clear.

Does deleting a conversation remove it from backups?
Not necessarily. The service may retain backup copies temporarily or keep certain records under its stated retention rules. Check the deletion policy for timing and exceptions.

Is opting out of AI training enough?
No. It may limit one use of chats, but it does not automatically stop storage, processing by providers, or human review. Check each practice separately.

What should I do if the app’s privacy details are unclear?
Ask the provider direct questions and avoid sharing sensitive information while waiting. If you cannot get clear answers, consider a service whose data practices are easier to verify.

Related

• How to Search Your ChatGPT Conversation History
• What Are the Newest Credit Card Rules?
• How to Take a Break on Facebook