Do AI Girlfriends Store Data? A Privacy Deep-Dive
See if AI girlfriends store data: yes. Candy.ai, Replika, Joi, Kupid keep transcripts, images, voice, metadata. What's kept, how long, how to delete it.
I read AI girlfriend privacy policies for a living. I did not plan it that way; the job evolved into it. To score 9 apps on our 8 categories I have to read the privacy policy of every one of them properly, and I will tell you up front: nobody else in this space does that, including the apps' own affiliate-review competitors. The policies are written to be unread, and the read time is the trick. The Candy.ai privacy policy at the time of writing runs 8,900 words. I read it at 11 PM on a Thursday because that is when the kids next door finally stop, and it took me 40 minutes. Most readers will never spend those 40 minutes. So this page is what those 40 minutes get you.
Do AI girlfriends store data?
Yes. Every mainstream AI girlfriend app (Candy.ai, Replika, Joi, Kupid, Lovescape, GirlfriendGPT) stores chat transcripts, generated images, account identifiers, and device metadata on cloud servers. Mozilla's Privacy Not Included team reviewed 11 leading romantic chatbots and rated 10 of 11 as failing basic privacy standards, with all 11 collecting more personal information than necessary for the service to function.
The short answer is uncomfortable but unanimous across the audits I have read. The longer answer matters more, because what an app stores, where it lives, and who can request a copy from the operator are three separate questions, and the policies almost never line up the way users assume. The model on your screen needs every word you typed to reply intelligently to the next one. That means the words live somewhere, on some server, indexed by an account you created. Same as Gmail, same as Slack, same as every other cloud product you use. The difference is what is in those words. The things you sext into a Friday-night roleplay are not the things you put in a work email.
Honestly, the apps that store data are not the problem. The apps that lie about it are. Read the next 12 sections in that frame.
What chat data do AI girlfriend apps store?
Eight categories: full chat transcripts (both directions, including drafts and edits), generated images and any selfies you upload, voice recordings, persona configuration (name, body type, kinks, backstory), account ID and email, billing data, authentication tokens, and behavioral metadata. Most apps also retain inferred data (mood tags, attachment scores, kink profiles) derived from your messages and reused for ad targeting and personalization.
The table below summarizes what I observed across the privacy policies of the 17 platforms in our test set. "Typical retention" is the modal answer; outliers exist in both directions, with our Candy.ai longform on the disclosure-friendly end and the worst offenders giving no numeric period at all.
The inferred data line in that table is the one most users miss. The mood tag attached to a session where you took a persona deep into a specific kink does not get cleaned off when you delete the message. It is bound to your account ID, and it informs which prompts the model surfaces in your next session, which is why returning users so often feel like the app "knows them" even after a delete sweep. Last reviewed: 2026.
How long do AI girlfriend apps keep my data?
Retention varies sharply. Replika confirms transcripts are kept for the life of the account. Candy.ai publishes a real numeric retention table (3 years account, 10 years financial, 30 days log files). Most competitors rely on vague "as long as necessary" language, which is itself a GDPR Article 5(1)(e) red flag EU regulators have repeatedly flagged.
When a privacy policy says "for as long as necessary to provide the service," translate that to "indefinitely, unless we change our minds." If you want a hard ceiling on your data's lifespan, the only reliable mechanism is your own deletion request, and even that triggers the 30-to-180-day backup tail covered three sections down. The honest tells in a retention clause are numbers: "3 years," "12 months," "30 days." The dishonest tells are weasel phrases: "as needed," "for legitimate business purposes," "to comply with our obligations." Same policy length, opposite operator intent.
Candy.ai's table is the cleanest I have read in the category, which is also why it scores 8.5/10 on Privacy and Compliance on our scoring page. It is not generous. It is just specific. Specific is the bar.
Are AI girlfriend chats encrypted?
In transit, yes: TLS 1.2 or 1.3 is universal across mainstream AI girlfriend apps. At rest, most apps encrypt the database but hold the keys themselves, meaning their staff and any valid law-enforcement subpoena can access plaintext. True end-to-end encryption, where only you hold the decryption key, is essentially absent from this category.
The Electronic Frontier Foundation has documented the difference between "encrypted" and "end-to-end encrypted" for years [Source: Surveillance Self-Defense: A Crash Course in Encryption · verified 2026-05-26]. On AI chatbots the gap is structural rather than negligent. The model on the server has to read your text in plaintext to generate a reply, so the data is decrypted at least once on the server side before it ever reaches you. That is not a bug; that is how cloud-hosted language models work. Any vendor marketing "E2EE chat with our AI" is using the term loosely. Same as a restaurant claiming "no-touch food prep" while a chef still plates your meal.
Can I delete my AI girlfriend chat history?
Usually yes, with caveats. GDPR Article 17 and CCPA §1798.105 grant a deletion right, and most apps offer an in-app delete button. Backup tapes, training datasets, and legal-hold copies often persist 30 to 180 days after the user-visible deletion completes. Always export first (GDPR Article 20), delete second, then request written confirmation citing the full purge date.
The practical sequence I run on every app I drop: export the data first (most apps support this under the GDPR Article 20 portability right), delete inside the app, then email the published Data Protection Officer requesting confirmation that backups have rolled off. I save every reply in a dedicated folder. You may need it later if a breach surfaces older data: the email thread is what gives you standing in any regulatory complaint that follows. The 30-to-180-day backup tail is not malicious; it is how cloud storage systems work, and any operator who tells you they wipe instantly is either lying or running infrastructure that loses data when something fails.
Do AI girlfriend apps sell my data to advertisers?
Few sell raw chat content, but most share metadata with advertising and analytics partners. Mozilla flagged that 73 percent of romantic AI apps share data with third parties for advertising, and 45 percent allow trackers to read information users would consider sensitive [Source: Pew Research Center, Public Trust in AI: Privacy Concerns and Behavioral Patterns · verified 2026-05-26]. "We do not sell" often coexists with "we share" under the narrower CCPA legal definition.
The trick is the legal definition. Under CCPA and CPRA, "sale" means an exchange for monetary or other valuable consideration [Source: California Consumer Privacy Act of 2018, Cal. Civ. Code §1798.100 et seq. · verified 2026-05-26]. Most ad-tech relationships are structured as "sharing" instead, which until 2023 escaped the same disclosure rules. Read the "Do Not Sell or Share My Personal Information" link in the app's footer. If it offers two opt-outs (sale + sharing), two were needed. If it offers one, you are getting a partial answer to a two-part question.
I will be blunt. Most reviewers in this space do not read these footers. They cite "we do not sell" as if it settles the matter. It does not. The thing the marketing team can technically say in good faith is not the same as the thing the data team is actually doing.
What happens to my AI girlfriend data if the app shuts down?
Privacy policies typically allow the operator to transfer your data to an acquirer in a merger or, in bankruptcy, treat it as a sellable asset. The 2015 Ashley Madison breach and the 2023 Genesis bankruptcy both showed regulators struggle to protect users at this stage. Export and delete before any shutdown rumor solidifies. Once a sale process opens, control evaporates.
This is the scenario most users underestimate. A profitable company you trusted last year may be a creditor's asset two years from now, and the chat archive you built across 18 months of intimate conversation can change hands without you ever being notified. Treat AI companion data the way you would treat dating-app data: assume eventual exposure, limit what you put in, and know where the export button is before you need it.
How do I read an AI girlfriend privacy policy in 5 minutes?
Search the document for six terms: "retention", "third party", "sell", "sale", "training", and "law enforcement". Read the surrounding paragraph for each hit. If "retention" returns no numeric period, or "training" confirms your messages improve the model, treat both as material risks. The full forensic read takes 30 to 60 minutes; the six-term scan covers about 80 percent of decision-relevant signal.
ProPublica and EFF both publish longer reading guides; the six-term scan above is the minimum viable check before you sign up. I use it myself on every platform I review, and only do the full 40-minute read when an app is moving into our recommended list. If you only have 5 minutes per app and you screen 4 apps before picking one, that is 20 minutes well spent. If you spend zero minutes and just click signup, that is also a choice. A worse one.
What does end-to-end encryption mean for AI girlfriends?
End-to-end encryption (E2EE) means only the endpoints (your device, and any recipient's device) can read the message content. For an AI chatbot the model itself must read your text in plaintext to generate a reply, which makes true E2EE technically incompatible with cloud-hosted LLM inference. Any vendor marketing "E2EE chat with our AI" is using the term loosely.
A handful of research projects ship local-only models that run on-device. These can offer genuine E2EE because nothing leaves your machine. They are not the apps the bulk of users are signing up for, because on-device inference means a smaller, slower, less coherent model with no image gen and no voice. The trade-off is real and you should understand which side of it you are on before signing up to anything that promises both privacy and product polish. Usually it is one or the other.
Are AI girlfriend apps GDPR-compliant?
Most claim compliance; few demonstrate it. The Italian Garante banned Replika in February 2023 for processing minors' data without lawful basis and fined Luka Inc. €5 million in April 2025 [Source: Italian Data Protection Authority (Garante), Provvedimento Replika · verified 2026-05-26]. EU users have stronger paper rights than US users under GDPR, but enforcement is reactive: compliance gaps are typically discovered after a breach or a journalist complaint, not before.
If you are in the EU, the practical implication is that you have leverage. A well-cited complaint to the Garante (Italy), CNIL (France), or AEPD (Spain) is taken seriously and can force operational changes. I have watched this play out three times since 2023, and the pattern is the same each time: a researcher publishes, a journalist amplifies, a DPA opens an inquiry, the operator either fixes the problem or pays the fine. Slow but real. The US version of this story is mostly state AG settlements that take longer and cost less, which is its own kind of signal.
What was the MyLovely.ai breach?
In April 2026, Have I Been Pwned confirmed a MyLovely.ai breach exposing 106,362 accounts in a 2.1 GB dataset, including chat logs, emails, and roughly 70,000 prompt strings linked to user IDs [Source: Have I Been Pwned, MyLovely.ai Sensitive Breach entry · verified 2026-05-31]. The incident matches a recurring pattern of misconfigured cloud storage across the AI companion category, the same root cause as multiple 2023 to 2025 breaches in this space.
I treat MyLovely.ai not as an outlier but as a base-rate event. Cloud misconfiguration is the dominant breach mode in this category, which is exactly why practical hardening guidance leans on what you can control client-side rather than what you must trust the vendor to protect. Our companion page on AI companion privacy and data covers what platforms collect; this one covers what you can do about it. The breach watchlist also tracks new incidents as they surface, and it is updated honestly, not on a marketing cadence.
What privacy rights do I have under CCPA?
California residents have five core rights under CCPA and CPRA: the right to know what is collected, the right to delete it, the right to correct it, the right to opt out of sale or sharing, and the right to limit use of sensitive data. Most AI girlfriend apps publish a "Do Not Sell or Share" link in their footer. Use it on day one, not after you have a year of conversation history to worry about.
CCPA-style rights have since been extended in modified form by Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and several others. If you live in any of those states, the same playbook applies: find the rights-request form, send it, save the reply. The opt-out exists because someone has to push the button. The default state is the operator collects everything until you say otherwise.
How do I file a privacy complaint against an AI girlfriend app?
EU residents file with their national Data Protection Authority (the Italian Garante and French CNIL have been the most active on AI chatbots). California residents file with the California Privacy Protection Agency or the state Attorney General. Always email the app's DPO first and wait the statutory window (30 days GDPR, 45 days CCPA); regulators expect that step on the record before they will open a case.
The DPO email is in the privacy policy footer 95 percent of the time. Subject line: "Article 17 deletion request" (EU) or "CCPA §1798.105 deletion request" (CA). Body: account email, account creation date if you remember, a clear ask for full purge confirmation across primary store + backups + training datasets. Save the timestamp of your send. If the operator misses the statutory window, you have standing. If they reply and confirm, you have a paper trail. Both outcomes serve you. Last reviewed: 2026.
Sources and further reading
[Source: *Provvedimento Replika* · verified 2025-04-10] [Source: *General Data Protection Regulation (Regulation (EU) 2016/679), Articles 5, 17, 20* · verified 2016-04-27] [Source: *California Consumer Privacy Act of 2018, Cal. Civ. Code §1798.100 et seq.* · verified 2018-06-28] [Source: *Surveillance Self-Defense: A Crash Course in Encryption* · verified 2024-09-18] [Source: *MyLovely.ai Sensitive Breach — 106,362 accounts* · verified 2026-04-08] [Source: *Public Trust in AI: Privacy Concerns and Behavioral Patterns* · verified 2025-08-05]Cite this page (APA)
Joly, A. (2026). Do AI girlfriends store your data? A privacy deep-dive. bestgirlfriend.ai. https://bestgirlfriend.ai/safety/do-ai-girlfriends-store-data
Frequently asked questions
Do AI girlfriends store data?
Yes. Every mainstream AI girlfriend app (Candy.ai, Replika, Joi, Kupid, Lovescape, GirlfriendGPT) stores chat transcripts, generated images, account identifiers, and device metadata on cloud servers. Mozilla's Privacy Not Included team rated 10 of 11 audited romantic chatbots as failing its Minimum Security Standards.
What chat data do AI girlfriend apps store?
Eight categories: chat transcripts, generated images and uploads, voice recordings, persona configuration, account ID and email, billing data, authentication tokens, and behavioral metadata. Inferred data (mood tags, kink profiles, attachment scores) is also retained and reused for personalization and ad targeting.
How long do AI girlfriend apps keep my data?
Retention varies. Replika keeps transcripts for the life of the account. Candy.ai publishes a numeric retention table (3 years account, 10 years financial, 30 days log files). Most competitors rely on vague "as long as necessary" language, which is itself a GDPR Article 5(1)(e) red flag.
Are AI girlfriend chats encrypted?
In transit, yes (TLS 1.2+). At rest the database is encrypted but the vendor holds the keys, so staff and law enforcement can access plaintext. True end-to-end encryption is essentially absent: the model itself must read your text to reply.
Can I delete my AI girlfriend chat history?
Yes under GDPR Article 17 and CCPA §1798.105, but backups and training datasets often persist 30 to 180 days after the user-visible deletion. Always export first, delete second, then request written confirmation of the full purge date.
Do AI girlfriend apps sell my data to advertisers?
Few sell raw chats. Mozilla found 73 percent share data with advertising third parties; 45 percent allow trackers to read sensitive information. CCPA's "sale" definition is narrower than common usage, so "we do not sell" often coexists with extensive sharing.
What happens to my AI girlfriend data if the app shuts down?
Privacy policies typically allow transfer to an acquirer in a merger, or sale in bankruptcy. Export and delete before any shutdown rumor solidifies. Once a sale process opens, user control disappears.
How do I read an AI girlfriend privacy policy in 5 minutes?
Search for six terms: retention, third party, sell, sale, training, law enforcement. Read the surrounding paragraph for each. Vague retention or training-on-your-messages are material risks worth a second pass.
What does end-to-end encryption mean for AI girlfriends?
E2EE means only the endpoints can read content. The AI must read your text in plaintext to reply, so true E2EE is technically incompatible with cloud LLM inference. Treat E2EE marketing claims on cloud-hosted apps with scrutiny.
Are AI girlfriend apps GDPR-compliant?
Most claim compliance; few demonstrate it. The Italian Garante banned Replika in 2023 and fined Luka Inc. €5M in April 2025. EU enforcement is reactive, not preventive.
What was the MyLovely.ai breach?
April 2026 breach confirmed by Have I Been Pwned: 106,362 accounts exposed (emails, chat logs, and roughly 70,000 prompt strings linked to user IDs) in a 2.1 GB dataset. A pattern across the AI companion category, not an anomaly.
What privacy rights do I have under CCPA?
Right to know, delete, correct, opt out of sale or sharing, and limit use of sensitive personal information. Use the "Do Not Sell or Share" link in the app's footer on day one.
How do I file a privacy complaint against an AI girlfriend app?
Email the app's DPO first; if no resolution within 30 days (GDPR) or 45 days (CCPA), file with the Italian Garante, French CNIL, or California Privacy Protection Agency depending on residency.