AI companion apps can store conversations, memories and generated media for long periods. Before subscribing, review privacy controls with the same attention you give features and price.

1. Long-term memory controls

Can you see, edit and delete remembered information?

2. Training settings. Check whether your conversations are used for model improvement and whether an opt-out exists.

3. Account deletion

Look for a clear deletion path and an explanation of retention.

4. Media handling. Photos and voice samples may have different storage rules from text.

5. Export

A useful service should explain what data can be downloaded.

6–10. Also check. Notification controls, blocked-user tools, private sessions, third-party integrations and creator-data boundaries.

For a longer evaluation process, see AI Companion Apps Comparison Guide.

Bottom line

Privacy is part of product quality. Review controls before building months of relationship history.

Review what the app remembers. Conversation history and persistent memory are not always the same. An app may delete a chat while keeping a separate preference summary, or it may use interactions to personalize future responses. Look for a memory screen that explains which details remain active and provides clear correction and deletion controls.

If a companion offers several characters, check whether a private fact told to one character becomes visible to others.

Check notification privacy

Lock-screen previews can expose personal topics even when the conversation inside the app is private. Test the notification settings, quiet hours and whether sensitive text can be hidden from previews.

If the device is shared, also test account switching and whether conversations remain accessible after signing out.

Understand microphone, photo and location permissions. A companion may request audio, photos or location for optional features. Grant only what is necessary for the interaction you want. Selected-photo access or approximate location may be sufficient in some cases, while unrelated permissions should not be required for ordinary text chat.

Check whether uploaded media and derived summaries can be removed separately.

Look at billing and data controls together

Before subscribing, identify the renewal date, cancellation path and whether exported data remains available after cancellation. A privacy feature should not become inaccessible simply because premium access ended.

For creator digital twins, verify whether the real creator or their team can read private chats and whether the AI nature of the interaction is clearly disclosed.

Test deletion rather than relying on the label. Deleting an account, removing a conversation and clearing long-term memory can be different actions. Try a harmless memory correction or deletion and check in another session whether the old detail still affects responses. The strongest products make both the scope and result of those actions understandable.

When using a creator-backed companion, make the privacy boundary especially clear. The character may sound like a real person, but that does not necessarily mean the creator reads every message. Profiles should say whether conversations may be shared with management and which requests can be escalated to humans.

A good privacy test should include a correction and an export. Save one harmless fact, remove it through the memory settings and check a later session. Then download available account data and see whether it distinguishes raw chats from saved memories and generated media. That practical workflow reveals far more than a generic privacy assurance.

Users should also consider notification previews when the phone is shared or visible in public. Sensitive topics can leak through a lock screen even if in-app messages are protected. A well-designed companion makes those previews configurable rather than forcing an all-or-nothing notification setting.

For stronger privacy protection, check what happens when a device is lost or an account is accessed from another location. Session management, logout from other devices and activity notifications can matter as much as the ability to delete one memory. Those safeguards protect the relationship history accumulated over months.

The settings should remain usable without a premium subscription. A service should not require someone to pay in order to delete personal memories, revoke optional data access or close an account. Before committing to a long-term plan, verify that these controls are visible, understandable and actually change the app’s future behavior instead of only hiding an entry in the interface.

You should also examine how the app handles privacy-policy changes. Meaningful new uses of sensitive information deserve a clear explanation and appropriate choice rather than silently changing the relationship contract.