Every AI girlfriend app stores what you type. The useful questions are who reads it, whether it trains the next model, how long it is kept, and who gets it if the company is sold. We read the current privacy policy of seven apps on 18 October 2026 and put the answers side by side.
Character.AI filed for Chapter 11 on 12 October 2026 and is selling its assets (what that means for its users). Every policy below has a clause covering the same situation.
The short version
- Three apps say outright that they train AI models on your chats: Candy AI, OurDream and CrushOn.
- Kindroid is the only one that says chats are encrypted at rest and read by people only when a safety system flags them or the law requires it.
- All seven allow your data to pass to a buyer in a merger, sale or bankruptcy.
- Retention varies a lot. It runs from “deleted within 28 or so days” (Nomi) to three years after your last login (Candy AI).
- SpicyChat’s policy is dated 4 May 2023 and does not mention chats at all.
- None of the seven appears in Have I Been Pwned, which indexed 1,046 breaches on the day we checked. The one companion app that does appear is Muah.ai: 1,910,261 accounts in September 2024, with AI prompts and sexual preferences in the leaked data.
The comparison table
| App | Operator | Trains models on chats? | Chats encrypted at rest? | Sale or merger transfer | Retention after you leave |
|---|---|---|---|---|---|
| Candy AI | EverAI Limited, Malta | Yes | Not stated | Yes | Account data 3 years after last activity |
| OurDream | Dream Studio USA Inc. (US) and Tektopia Ltd (Cyprus) | Yes | Yes (AES, all data) | Yes | “Time necessary”, no period given |
| CrushOn | Techiepie Ltd, Cyprus | Yes | Not stated | Yes, including liquidation | “Reasonably necessary”, no period given |
| Nomi | Glimpse.ai Inc., Maryland | Training archive, not attributable after deletion | Not stated | Yes | Deleted within about 28 days |
| Replika | Luka Inc., San Francisco | Only its own safety filters, anonymised | In transit only | Yes | Messages up to 60 days, account and billing 10 years |
| Kindroid | Beautifully Incorporated, Los Angeles | Not listed as a use of chats | Yes | Yes, including bankruptcy | Until you delete the AI or the account |
| SpicyChat | NextDay AI (Canada and Cyprus) | Not addressed | Not stated | Yes, including bankruptcy | “As long as necessary” |
“Not stated” means we could not find the point in the policy. It does not mean the app does not do it.
Who trains on your chats
Candy AI is the most explicit. Its notice says it uses your data to “train and develop our AI models and moderation technologies”. It adds that preparing training datasets “may include human review of de-identified and/or anonymized interactions”. It also says third-party LLM providers “may receive the content of your messages”.
OurDream lists training “our artificial intelligence/machine learning models” among the uses of collected data. CrushOn says it “may use User Content from character chats to train AI models”.
Replika draws a narrower line. It says it uses small, anonymised portions of messages to train its own safety algorithms, and that this data “is not used to train third-party large language models”.
Kindroid’s data table lists chats under one purpose only: providing the service. Its “improving the services” purpose covers other data, “excluding the Chats”. Nomi refers to “training archives” and says that after deletion, anything in them “would no longer be attributable to you”.
Who can read them
All of these apps process your messages on their servers, because that is how a reply gets generated. None of the seven offers end-to-end encryption. Kindroid says so plainly: it “is not end-to-end encrypted”.
Kindroid is also the only policy that names the conditions for a human reading a chat. It decrypts content when automated safety systems flag it, when you ask (for example in a moderation appeal), or when the law requires it.
OurDream says all user data is encrypted at rest and in transit with AES and TLS 1.3, on a SOC 2 Type 2 certified platform. Replika says data is encrypted in transit and stored on secure servers, without stating encryption at rest.
What happens if the company is sold
Character.AI’s users now face this clause in practice. Every policy we checked lets your data move to a buyer:
- Candy AI: data may transfer to a buyer or successor and stays subject to the same privacy notice.
- OurDream: may disclose data during a “merger, sale of company assets, financing, or acquisition”.
- Nomi: your personal information “would be transferred to the successor or purchaser”.
- Replika: may share information “with acquirers and other relevant participants in business transactions”.
- Kindroid: data may go to a third party “if we undergo a merger, acquisition, bankruptcy or other transaction”.
- CrushOn: covers mergers, acquisitions, liquidation and the sale of substantially all assets.
- SpicyChat: covers a sale “as part of bankruptcy, liquidation, or similar proceeding”, and promises notice before your data falls under a different policy.
How long they keep it
Nomi makes the strongest promise: delete your account in settings and your personal information goes “within 28 or so days”. Kindroid keeps chats until you delete the companion or the account.
Replika keeps profile data and messages for up to 60 days after you close the account. It keeps account, billing and automatically collected data for at least 10 years.
Candy AI keeps account data for three years after your last activity, financial records for 10 years and logs for 30 days. Its notice describes deletion as a request to its privacy team rather than an in-app button.
OurDream, CrushOn and SpicyChat give no fixed periods. OurDream adds one caveat worth knowing. If a character you made public becomes popular, it may keep that character running after you delete your account. Character.AI’s policy has the same clause.
What we would do before signing up
- Read the training clause. If you do not want your chats used for training, the policies that say so are Candy AI, OurDream and CrushOn.
- Use an email address you do not use for anything else, and never type your full name, address or workplace into a chat.
- Find the delete option before you need it. Nomi, Replika, Kindroid and OurDream describe deletion or deactivation from account settings. Candy AI’s notice routes deletion through its privacy team at support@candymail.ai.
- Assume a sale could happen. Anything you type could end up with whoever buys the company.
If we test these apps hands-on, we will add the results here. The privacy part of that test includes deleting a chat and the whole account to check that both are really gone. See how we test.