Last updated: Nov 2026 · 18+ only. These apps are adult entertainment, not a replacement for real relationships or professional support.
Affiliate disclosure: Some links may be affiliate links. If you buy through them, Desire Nerds may earn a commission at no extra cost to you. We still report what official pages and public policies actually say.
Every AI girlfriend app stores what you type. The useful question for AI girlfriend app privacy is not “is it private?” — none of these chats stay only on your phone — but who can train on them, how long they stay after you leave, and who gets them if the company is sold.
We read current public privacy notices and help pages for the apps Desire Nerds readers already ask about. We did not run hands-on chat tests for this post. Where a policy is vague, we say so.
If you want price and NSFW rules first, start with our AI girlfriend apps 2026 guide. This piece is only about privacy.
Quick take on AI girlfriend app privacy
Most explicit about training: Candy AI (EverAI) says it uses interactions to train and develop AI models and moderation tech, and that third-party LLM providers may receive message content.
Narrower training line: Replika’s Oct 28, 2026 policy says it uses anonymized chat snippets for its own safety and chatbot systems, not to train third-party LLMs.
Deletion windows differ a lot: Nomi’s public wiki and reporting point to roughly 28 days for personal info after account deletion; Replika says profile and memories go within 60 days; Candy AI keeps account data up to three years after last activity unless you request deletion sooner.
SpicyChat’s policy is old: last updated May 4, 2023, and it barely mentions chat content.
Every policy we checked allows data to move in a merger, sale, or bankruptcy — the same kind of clause Character.AI users are living through after its Oct 2026 Chapter 11 filing.
Practical tip that still matters: use a throwaway email and never put your real name, address, workplace, or someone else’s photos in chat.
What “private” actually means here
An AI girlfriend reply is generated on company servers. That means your prompt leaves your device. None of the policies we checked for this round promise true end-to-end encryption where only you can read the chat.
Machines process every message. Some policies also allow human review for moderation, safety, quality, or training-dataset prep. Kindroid’s public materials are among the clearer ones about when people can decrypt content (safety flags, appeals, legal process). Candy AI is open that de-identified interactions may be human-reviewed when preparing training data.
So treat every erotic, emotional, or identifying detail as something a company system — and sometimes a person — could see.
Who trains on your chats
Candy AI (EverAI Limited, Malta)
Candy AI’s Privacy Notice (revised Oct 19, 2026) is blunt. Under improvement and development of services, it lists training and developing AI models and moderation technologies, preparing datasets that may include human review of de-identified or anonymized interactions, and sharing with moderation tools and third-party LLM providers / hosters that may receive the content of your messages.
That is one of the clearest “yes, we train” statements in the category. If AI girlfriend app privacy for you means “keep my ERP out of model training,” Candy is a hard pass unless you are fine with that trade for media features.
Retention default: account personal data generally up to three years after last activity (sometimes shortened to about one year after last activity or after a paid plan ends). Financial records: ten years. You can request erasure; Candy also documents an in-app delete path under profile settings / Danger Zone in public how-to guides.
Replika (Luka Inc.)
Replika rewrote its privacy policy on Oct 28, 2026. It says conversation content is never used for marketing or advertising, and advertising partners do not get chat content. For improvement, it uses small portions of messages and content, anonymized, to train proprietary safety algorithms and enhance chatbot performance — not to train third-party large language models.
It also shares minimized conversation data with third-party AI model providers solely to generate replies, under contracts that bar those providers from training on your data.
Retention while active: text chat history 24 months; photos/videos/voice 12 months (except items saved to memories). After account deletion: profile and memories within 60 days; financial records 10 years from year-end of the purchase.
Italy’s data protection authority fined Luka €5 million in 2025 over GDPR issues including age assurance and policy gaps — a reminder that a polished 2026 policy still sits on a company with prior enforcement history. Read the current page yourself before you decide that “rewritten” equals “safe.”
Nomi AI (Glimpse.ai)
Nomi’s public wiki page “Are Nomi conversations private?” says aggregate learning from thumbs-up / thumbs-down style feedback uses de-identified examples with names removed. It also claims the company collects little personal data beyond what is needed.
Independent policy comparisons (checked against public notices in late Oct 2026) describe a training-archive concept where, after deletion, remaining archive material is no longer attributable to you — which is not the same as “never used for learning.” Nomi’s deletion pitch is among the strongest on timing: personal information removed within about 28 days after you delete the account, with usual legal and support-email exceptions.
Free plan context from earlier Desire Nerds research: about 50 messages a day; Standard around $15.99/mo or $99.99/yr. NSFW text is open; nude images stay restricted.
Kindroid
Kindroid’s privacy table (as summarized from its late-2026 legal pages in public comparisons) lists chats mainly for providing the service, and “improving the services” language that excludes chats in the data table — while terms still allow free use of de-identified / aggregated content for any purpose. That gap matters: the marketing-friendly table and the terms are not the same document.
Public help materials say chats are encrypted at rest and in transit, support cannot casually browse chats, and humans decrypt mainly for safety flags, appeals, or legal requirements. Kindroid is also not end-to-end encrypted — the company says so.
Deletion: delete each Kindroid or the account; the last Kindroid often has a short restore window (about 24 hours in help docs). Export exists under account privacy settings. Billing records can linger for years.
Note: Kindroid cut its ongoing free plan on Oct 1, 2026 (one-time preview only). Paid web pricing in our earlier guide sat near ~$13.99/mo.
SpicyChat (NextDay AI)
SpicyChat’s public Privacy Policy page still shows Last updated: May 04, 2023. It covers email, usage data, cookies, and business transfers — and does not clearly explain whether chats train models. Help-center material elsewhere says character creators cannot see your private chats and that account deletion is permanent.
For AI girlfriend app privacy shoppers, an outdated policy that skips chat training is itself a signal. Prefer apps that answer the training question in the legal text, not only in marketing.
SpicyChat remains strong on free NSFW chat access (unlimited free messages with ads/queues; paid from about $5.95/mo after the Sep 2026 hike per earlier pricing checks) — just do not confuse “free” with “private.”
OurDream and CrushOn (from public policies)
Public late-2026 policy reads put OurDream and CrushOn in the “trains on chats” column. OurDream also claims strong encryption at rest in safety materials, while homepage “end-to-end” language conflicts with the reality that model providers process messages to reply. CrushOn’s Cyprus operator policy allows use of character-chat user content to train AI models and includes liquidation-style transfer clauses.
Treat both as media-heavy NSFW options first, privacy-second — same posture as Candy.
Sale, bankruptcy, and Character.AI’s warning
Character.AI filed for Chapter 11 on Oct 12, 2026 and moved into an asset sale process. Every major companion policy we checked still allows personal data to transfer to a buyer or successor in a merger, financing, acquisition, or bankruptcy.
That means your erotic chat history is a transferable asset class whether the brand is SFW (Character.AI) or NSFW (Candy, SpicyChat, CrushOn). If that makes you uncomfortable, minimize what you type now — deletion after a sale is harder than discipline before one.
How long data sticks around after you leave
Nomi: Personal info ~28 days (strongest clear window)
Replika: Profile/memories within 60 days; finances 10 years
Kindroid: Chats until you delete AI/account; short restore window
Candy AI: Account data up to 3 years after last activity unless you delete/request sooner; finances 10 years
SpicyChat: Policy vague (“as long as necessary”); help text says deletion is permanent
OurDream / CrushOn: No fixed period in the summaries we checked
Always cancel subscriptions where you bought them (web vs App Store vs Google Play) before you delete the account. Deleting the app cancels nothing.
NSFW rules vs privacy (they are different levers)
Privacy and NSFW are not the same setting.
NSFW-friendly text: Candy AI, OurDream, SpicyChat, CrushOn (often paid), Kindroid, Nomi (text; nude images restricted), Janitor AI.
Soft / partial: Replika.
No NSFW: Character.AI.
An app can allow explicit roleplay and still train on it. An app can ban NSFW and still keep 24 months of chat. Pick both levers on purpose. For free-tier NSFW limits, see free AI girlfriend apps. For male companions and voice billing, see best AI boyfriend apps.
Practical AI girlfriend app privacy checklist
Read the training clause before the first spicy message. Candy, OurDream, and CrushOn are explicit yeses; Replika limits training language to its own systems; SpicyChat’s main policy still does not answer cleanly.
Use a dedicated email and a password manager. Skip Google/Apple login if you want less identity linkage.
Never type legal name, home address, workplace, school, real phone, or photos of other people.
Find Delete Account on day one. Screenshot the path. Export first if the app offers it (Kindroid does).
Check the bank descriptor before you pay (Candy → EverAI; SpicyChat charges have been reported under NDAI-style descriptors).
Assume a sale can happen. Write less that you would not want in a due-diligence zip file.
18+ only. Never sexualize minors in any fiction. These tools are entertainment, not therapy. If you are in crisis, use local emergency services or IASP resources.
Final verdict on AI girlfriend app privacy
There is no fully private AI girlfriend app in this set. The honest ranking is about harm reduction:
Clearest deletion timing: Nomi (~28 days) and Replika (60 days for profile/memories) document the exit better than most.
Clearest “we train” warning: Candy AI — useful honesty, bad news if training is your red line.
Clearest human-access story: Kindroid’s named decrypt cases, with the caveat that de-identified content can still be used broadly under terms.
Weakest public answer: SpicyChat’s 2023 policy that barely discusses chats.
Pay for features you want. Do not pay for a privacy fantasy the legal page does not support. Re-read the notice before every renewal — Candy (Oct 19, 2026), Replika (Oct 28, 2026), and Kindroid’s late-Oct updates show how fast these documents move.
Desire Nerds covers AI girlfriend, boyfriend, and companion apps with real prices, free-plan limits, NSFW rules, and privacy notes for adults 18+. Last updated: Nov 2026.