AI companion privacy checklist: data, memory and deletion

Research updated 26 October 2026. Documentation-based editorial guidance; these are proposed reader tests, not results of our paid hands-on testing.

A companion chat can contain more information than you intended

An AI companion may receive messages, fictional character profiles, audio recordings, generated media, payment details and metadata such as device or IP information. Some conversations can also reveal real relationships, intimate interests or emotional concerns even if you never enter a full legal name. “Private conversation” in marketing does not, by itself, establish end-to-end encryption, zero retention or no model training. You need to read the provider’s precise policy and settings.

This guide is for deciding what to share, not a claim that a particular service has leaked data. We did not inspect network traffic or audit provider servers.

Ten questions to answer before joining

Question	Where to look	Why it changes your decision
Who operates the service?	Legal notice and privacy controller details	You need a contact for rights requests
What messages are stored?	Privacy notice and chat retention settings	“Delete chat” may differ from deleting account data
Is content used for model improvement?	Training and opt-out clauses	Highly personal text may be processed beyond replies
Are third-party processors involved?	Vendor categories and transfers	Payment, voice and hosting may involve other providers
What happens to voice?	Recording/transcription clauses	Temporary transmission is not the same as stored recordings
Can characters be public?	Sharing/community settings	Private drafts must not become public by accident
Are there age or content restrictions?	Terms and product policy	Some services are adult-oriented
Can you export information?	Account/download tools	Useful before closing an account
How do you request erasure?	Rights section and support route	Deletion can involve legal exceptions and backup schedules
Are cookies and affiliate tracking disclosed?	Cookie notices and consent controls	Visiting an external checkout may start new processing

Run a harmless privacy rehearsal

Before paying, register with a dedicated email address if appropriate, create a fictional character with invented biographical details, inspect memory and sharing settings, and locate the export/deletion controls. Do not upload an ID photo, intimate portrait, private voice sample or another person’s information merely to see how a feature works. If a provider requires sensitive data for a feature you don’t need, choose a less invasive test.

Write a privacy checklist with yes / no / not established, and keep the URL and date of each policy you consulted. “Not established” is a legitimate result: a vague privacy page should not be interpreted as proof of either safety or misconduct.

A subtle distinction: reset, archive and delete

Nectar’s memory documentation explains that reset permanently deletes that conversation’s memories, while archiving preserves them; a new conversation does not carry the previous conversation’s memories. This is a specific product behaviour, not proof that every related server-side copy disappears immediately. Kindroid says a subscription lapse can put the account into read-only mode while chats and media remain viewable or exportable. Neither action is equivalent to an independently verified deletion of all retained account information.

Check whether deleting a generated picture removes it from both the chat and the image gallery. Check whether a community character can be indexed publicly. Avoid posting another person’s likeness, personal messages or identifying information without appropriate rights and permission.

Rights and next steps in the UK

The UK Information Commissioner’s Office explains rights of access, rectification and erasure under applicable data-protection law, subject to conditions and exemptions. A practical request identifies the email/account concerned, asks which categories of data are held, whether messages are used for training, what recipients have access, and how retention and deletion work. Save a copy of the request and any response. Cross-border operators may have different contact and jurisdiction details; do not assume a UK regulator can instantly remove data held by every overseas provider.

Our privacy-minded recommendation

Use pseudonyms, keep fictional test data separate from real life, switch off public sharing when unnecessary, and avoid putting health, banking or identifying details into a companion conversation. Compare policies on concrete criteria instead of trusting blanket “secure” claims. For a site-based review, distinguish provider statements from independently verified security; we have not performed a technical security assessment of any service listed here.