AI companions: the privacy checklist

An AI companion holds a category of data almost nothing else does: what you say when you think nobody is judging you. Not your search history, not your purchases, but the unguarded version of yourself.

That deserves more scrutiny than it usually gets, and the disclosure quality across this category is genuinely poor. Here is how to audit an app before you write anything personal into it.

Try Nastia AI for free

1. Does the policy allow training on your conversations?

This is the first thing to check, and the answers range from explicit to absent.

Dondi.ai is the clearest case in our ranking, precisely because it says so. Its privacy policy states that your content and interaction data may be processed by AI systems, and that this processing includes model training and improvement. The app sells its memory as the headline feature, which means the same architecture that makes it feel attentive is what makes your conversations valuable to it.

That is not automatically disqualifying: it is a trade you can accept knowingly. What should worry you more is the larger group of apps that say nothing at all. Several apps in our ranking publish no public information on how long conversations are retained or whether they feed model training, which leaves you with no basis for a decision.

Look for an opt-out available on the free tier, not just the paid one.

2. How long is data retained after deletion?

“Deleted immediately” and “removed from backups within 90 days” are not the same promise, and only one of them is usually true.

Ask specifically what happens to: the conversation text, the generated images, the account metadata, and any backups. An app that answers only the first is answering the easy question.

If the policy does not distinguish between deleting a conversation and deleting an account, assume the first does nothing meaningful on the server.

3. Can you export your history?

If you cannot download it, it is not really yours.

This is the rarest feature in the category. Nastia AI is the only app in our ranking that offers a genuine export of your conversations. Everywhere else, months of accumulated context are effectively hostage to the platform, which also means a policy change or a shutdown takes your history with it.

Export matters more than it sounds, because it is the only defence against the two most common failure modes in this category: an app that changes its content rules, and an app that disappears.

4. Where is the company registered?

This is the item most people skip, and it determines whether every right listed above is enforceable or decorative.

The pattern across uncensored apps in our ranking is consistent:

Operator	Registration
Nastia AI	France (company number 982046385)
FlirtCam	DevPro s.r.o., Nitra, Slovakia (EU)
Kupid AI	SNB Technologies LTD, Nicosia, Cyprus
Nemora	A Context AI Solutions LTD, Nicosia, Cyprus
FantasyGF	Oradea, Romania (company ID 49734069)
Dondi.ai	No country of incorporation stated

An app that declares no jurisdiction leaves you knowing neither where your data sits nor which regulator could compel its return. For a European user, an EU-registered entity makes your privacy rights effective in practice rather than in theory.

Two caveats keep this honest. First, EU registration is a floor, not a guarantee: Replika took a European privacy fine in 2025. Second, a small EU company is still a small company, and FlirtCam’s Slovak s.r.o. does not put the people behind it forward, so registered in the EU does not mean transparent about everything.

5. What ships inside the mobile app?

Which analytics and advertising SDKs are bundled into the binary? These apps often carry more third-party code than you would guess, and the privacy policy rarely enumerates it.

Note also that the free tiers funded by advertising (SpicyChat, Character.AI since 2026) necessarily involve more third-party data flow than a subscription-funded one. That is a structural consequence of the model, not a hidden betrayal, but it belongs in your decision.

The distinction almost every buyer gets wrong

Several apps advertise “discreet billing”, meaning the charge appears under a neutral name on your bank statement. FlirtCam bills as “DevPro s.r.o. Nitra” rather than the service name.

Do not conflate two different things: being discreet towards the people around you is not the same as being protected from the operator. Discreet billing addresses who sees your statement. It says nothing about who reads your conversations, how long they are kept, or whether they train a model. Marketing pages in this category blur the two deliberately.

Practical habits

These cost nothing and materially reduce your exposure:

• Use a dedicated email address, not the one tied to your real identity.
• Never give a real full name, employer, address or school, even inside roleplay, where the framing makes it feel safe.
• Keep financial and health details out entirely. They have no upside in a companion conversation and maximum downside in a breach.
• Assume everything you write could one day be read by a human. On most platforms in this category, that is technically possible, and moderation systems mean it sometimes happens by design.
• Test the export button early, in your first week, while your history is still short enough not to matter.

What a good policy looks like

The apps that score best on this criterion share three traits: a plain-language policy you can read in one sitting, an export function that works, and an explicit statement about training data, whether the answer is yes or no.

None of that is technically difficult. Its absence is a choice, and it is reasonable to read it as one.

If this criterion is your priority, the shortlist is short: Nastia AI combines a European operator, an actually readable data policy and conversation export, which is why it ranks fifth overall despite being far smaller than the household names above it. FlirtCam offers EU registration with an identifiable address. Everything else in the uncensored segment asks you to trust a company in Cyprus, Romania, or nowhere at all.