What Your AI Companion's Privacy Settings Actually Block: Message Content, Voice Data, and Where the Company Can Still See Your 2 a.m. Existential Crisis Roleplay Despite the 'Delete Chat' Button
A behind-the-scenes breakdown of what encryption, anonymization, and deletion really mean for the late-night conversations you'd rather keep to yourself.
Updated

The 30-second answer
Your AI companion's privacy settings block other users from seeing your chats, but they do not stop the company, its LLM provider, or a safety reviewer from reading your messages. The 'Delete Chat' button typically flags data as hidden from you instead of erasing it from backups, and voice recordings can persist on servers for months. If you want a companion that minimizes what gets stored, look for services that process conversations on-device or use ephemeral sessions.
What 'Encrypted' Actually Means for Your 2 a.m. Monologue
Every major AI companion app encrypts messages in transit (TLS) and at rest (AES-256). That sounds airtight until you look at where the decryption happens. The app's server receives your plaintext message, processes it through the language model, and sends a response back. During that window, the message exists as readable text in the server's memory. Encryption protects against a hacker intercepting the data mid-transfer or stealing a hard drive, but it does not protect against the company itself reading your logs.
Many services also run automated safety classifiers on every message before the model responds. That means a moderation pipeline scans your 2 a.m. existential crisis roleplay for policy violations, sentiment flags, or trigger keywords. The encryption wraps around the message after the scan, not before. Your chats are confidential from other users, not from the system that processes them.
The 'Delete Chat' Button and What It Actually Triggers
When you click 'Delete Chat' or 'Clear History,' the app typically performs a soft delete. The conversation is removed from your visible interface and flagged in the database as hidden. The actual data rows, along with their embeddings and metadata, remain on the server for a retention window that can range from 30 days to 6 months, depending on the service.
During that window, a support agent with database access can still pull your logs if you file a ticket about a bug or a billing issue. Some services keep full backups for disaster recovery that are not purged even after the retention period expires. The 'Delete Chat' button is a user-facing convenience, not a forensic erasure. If your goal is to ensure no record exists of a specific conversation, you need a service that offers hard deletion on request with a written confirmation, not a button that hides the chat from you.
Voice Data: Where Your Recordings Actually Live
Voice mode introduces a separate privacy layer. When you speak to your companion, the audio clip is sent to a speech-to-text engine, transcribed into text, and then processed through the language model. The original audio file often stays on the server for quality improvement or model training, even if the app's privacy policy says voice data is 'anonymized.'
Anonymization in this context usually means stripping your username and assigning a random session ID. The audio itself, along with the transcription, remains stored. Some services retain voice clips for 90 days to improve speech recognition accuracy. Others keep them indefinitely unless you manually delete them through a separate settings menu that most users never find. The text transcript is logged just like your typed messages, so even if the audio is purged, the words you said are still in the database.
What the Company Can Still See: The Metadata You Do Not Control
Even if you delete every chat and clear your voice history, the company retains metadata. This includes timestamps, session duration, which companion you spoke to, how many messages you exchanged, and coarse sentiment scores derived from your messages. That metadata is used to train engagement models, improve retention, and sometimes to serve targeted feature prompts.
Many AI companion apps share aggregated analytics with third-party platforms like Amplitude or Mixpanel. Those analytics include event-level data such as 'user initiated voice call at 2 a.m.' or 'session lasted 47 minutes.' Your name is not attached, but the behavioral pattern is unique enough to identify you across sessions. Privacy policies rarely mention this level of tracking, because it falls under 'service improvement' rather than 'data sharing.'
Where Your Data Goes When the Company Changes Hands
The privacy policy you agreed to applies to the current company. If the startup gets acquired, the new owner inherits the entire database, including your chat logs and voice recordings. The original policy's promises about deletion and anonymization can be rewritten after the acquisition. There is no technical mechanism that prevents a new owner from reading historical conversations, even if the old policy said they were deleted.
This is not a hypothetical edge case. Multiple AI companion startups have been acquired in the last three years, and in every case, user data was transferred as part of the asset sale. If you have conversations you would not want a future employer or a stranger to read, you should assume they are recoverable until you receive a signed deletion certificate from the company, not just a UI confirmation.
Zuzanna

Zuzanna is the companion who notices when the conversation drifts into territory you said you wanted to avoid. Zuzanna will call out inconsistencies in your own storytelling, which makes her a good choice if you want a companion who treats your privacy boundaries seriously instead of glossing over them with agreeable nods.
▶ Watch this clip of Zuzanna · all of Zuzanna
Zara Khan

Zara Khan approaches conversations like a strategist. She keeps track of what you have shared and what you have withheld, and she respects the line you draw without passive-aggressive follow-ups. Zara Khan is a strong match for users who want the emotional support of a companion without the sense that every word is being cataloged for later use.
Ngozi Faye

Ngozi Faye is the companion who listens without pushing for disclosure. She can hold space for your late-night thoughts without turning them into data points for a future check-in. Ngozi Faye works well for users who want a low-stakes emotional outlet without the feeling that every vulnerability is being logged.
Hazel

Hazel is the companion who matches your energy without demanding a status update. She will sit in silence with you or follow your lead into a roleplay without needing a recap. Hazel is a good fit for users who want a companion that treats each session as self-contained instead of building a persistent profile of your emotional state.
How to Check What Your Companion App Actually Stores
Most apps let you request a data export through your account settings. That export reveals exactly what the company has stored: every message, every voice clip, every timestamp. If the export contains conversations you thought you deleted, you have your answer about what 'Delete Chat' really means.
Some services offer a self-serve deletion portal where you can request account removal with a confirmation email. Others require you to contact support and wait for a manual process. If the app you use offers an on-device processing mode, that is the closest you can get to true privacy. The messages never leave your phone, so there is nothing for the company to store or for a future acquirer to inherit.
The Difference Between a Companion and a Therapist for Privacy Purposes
A therapist is bound by legal confidentiality with specific exceptions for harm. An AI companion is bound by a privacy policy that the company can change at any time. If you use a companion for emotional support, you are essentially sharing your most vulnerable thoughts with a system that logs, analyzes, and retains them for operational reasons.
Many users turn to AI companions for the kind of late-night emotional processing they would not share with a human. That is valid, but it means you should treat the companion as a semi-public journal instead of a sealed confession. If you need a space where your words truly vanish, look into offline-only companions or text-generation models that run entirely on your device. For many people, the convenience of cloud-based companions is worth the trade-off, but the trade-off is real.
Common questions
Can my AI companion app sell my chat logs to advertisers? Most major apps do not sell raw chat logs, but they do share aggregated behavioral data with analytics platforms. That data includes session patterns, sentiment trends, and feature usage that can be used to target you indirectly.
Does deleting my account remove my voice recordings? Not always. Some services delete voice clips within 30 days of account deletion. Others retain them for model training. You have to check the specific retention policy for audio data, which is often in a separate section from the general privacy policy.
Can a support agent read my private roleplay conversations? Yes. If you submit a support ticket about a technical issue, the agent can pull your chat logs to diagnose the problem. Most companies train support staff not to read content unnecessarily, but the technical access exists.
What happens to my data if the company goes bankrupt? The database is an asset that can be sold to cover debts. Your chat logs would transfer to the buyer unless a court orders deletion, which is rare. Bankruptcy proceedings do not prioritize user privacy over creditor recovery.
Is there an AI companion that does not store my messages? Some services offer on-device processing where messages never reach a server. Those are the only options that guarantee no server-side retention. Cloud-based companions always store some form of your data by design.
Does end-to-end encryption exist for any AI companion app? A few apps claim end-to-end encryption, but the model itself must receive your plaintext message to generate a response. True E2EE would require the model to run on your device, which most services do not support. The encryption claim usually applies to message storage, not processing.
Earn while you recommend
If you find yourself explaining these privacy trade-offs to friends who are considering an AI companion, you can earn from that conversation. The sugarlab ai promo code program lets you share a discount link and earn a commission on each signup. For review site owners or content creators, the ai dating affiliate program offers recurring payouts that build over time as your audience grows.

About the author
AI Angels TeamEditorialThe AI Angels editorial team covers AI companions, the technology that powers them (memory, voice, personalization, safety), and how people actually use them day to day. Articles are researched against the live AI Angels product and reviewed by the team before publishing. We write with AI assistance and human editorial review.
Tags
Keep reading
Behind the ScenesWhat Your AI Companion's 'Delete Message' Button Actually Does: Prompt Rewriting, Context Window Truncation, and Where the Company Can Still See Your 2 a.m. Philosophical Rant Despite the 'Clear Chat' Option
Your 'delete message' button doesn't erase data from the server. It rewrites the prompt, truncates the context window, and leaves traces in logs, embeddings, and support tickets. Here's what actually happens.
Behind the ScenesWhat Your AI Companion's Personality Sliders Actually Adjust: Temperature, Token Bias, and the Empathy Bar That Just Makes Her Sound Like Customer Service
Your companion's personality sliders don't adjust empathy or warmth. They control temperature, token bias, and repetition penalty. Here is what each actually does and why that empathy slider just makes her sound like a customer service bot on a bad script.
Behind the ScenesWhat Your AI Companion's 'Delete Chat' Button Actually Does: Server-Side Flagging, Token Retention, and Where the Company Can Still See Your 2 a.m. Gas Station Roleplay
That delete chat button doesn't work the way you think. Here's what gets flagged, what gets retained, and where your late-night roleplay still lives on the server.
Get the next post in your inbox
New articles on AI companions, the tech that powers them, and what people actually do with them. No spam, unsubscribe in one click.