✦ Buyer guide / Source check · 19 October 2026

AI companion privacy: what happens to personal conversations?

Understand where messages may be processed, what deletion means and what to verify before intimate chats.

Independent research ✧ Source-linked feature claims ✧ No fabricated hands-on tests

An AI companion can invite unusually personal conversations. That makes privacy a buying feature, not just legal fine print. A message can feel like a one-to-one conversation while still being processed on servers, routed through model providers and retained under a service’s published rules.

Ask three separate privacy questions

  1. Who receives the data? Account operators, infrastructure providers and AI model vendors may have different roles.
  2. Why is it processed? Replies, personalization, safety enforcement, analytics and model improvement are not the same purpose.
  3. How can it be controlled? Review chat deletion, account deletion, export, retention and requests under applicable privacy law.

What current primary sources tell us

Replika’s May 2026 privacy policy describes processing conversations and the involvement of third-party AI language model providers. Kindroid’s FAQ describes encrypted data and limits on staff access, while its account documentation lists export and deletion paths. Those are provider statements; neither is an independent proof of how every internal system works.

A 2026 qualitative research paper on AI companion privacy describes the tension between conversational intimacy and limited awareness of platform-level data handling. The practical lesson is to keep the emotional feel of a chat separate from the institutional privacy relationship.

Do not equate encryption with zero access

Encryption in transit, encryption at rest and end-to-end encryption protect different things. If a provider has to process messages server-side to generate replies, it may need access to plaintext during processing. Never infer end-to-end encryption because a site merely says conversations are “secure.”

A five-minute privacy check

  • Find the current privacy policy, company identity and support contact.
  • Search for words such as training, processors, retention, export and deletion.
  • Check whether data controls require the app or can be exercised through support.
  • Avoid sharing passwords, financial identifiers, exact addresses or third-party private information.
  • If you use generated images, check separate upload and generated-media rules.

If you change apps

Exporting a companion’s chat history and uploading it elsewhere can increase exposure. Read the migration checklist and the deletion checklist before doing so.

Sources and evidence trail

These are primary-source documents reviewed for this research article. They describe what providers say their products do; they are not independent performance tests.

Source review: 19 October 2026. Features, pricing and terms may change. Recheck before subscribing.

Want to verify something? See how we research or submit a correction.