Are AI companion apps safe? Privacy, age rules, money and scams explained (2026)
Are AI companion apps safe? The six real risks (privacy, age, money, reliance, scams, company failure) and how Character.AI, Replika, Janitor and Candy compare.
Built from the product's official documentation, pricing and policy pages, not from our own hands-on use. How we review
Key facts at a glance
| App | Price (USD, date checked) | Free tier | Age | Best for |
|---|---|---|---|---|
| Character.AI | c.ai+ $9.99 a month or $94.99 a year (checked 18 October 2026, source) | Yes, unlimited free chat for adults | 13+ (no open-ended chat for under-18s since Nov 2025) | Free character chat (company in a Chapter 11 sale) |
Prices change and can differ by country and currency; the official page is the final word. "Best for" summarises the published features and user reports in our guides, not our own tests.
Need to talk to someone now? If you or someone you know is in crisis, contact local emergency services or find a free helpline at findahelpline.com. In the US you can call or text 988; in the UK, Samaritans are on 116 123.
How this page was made. This is a documentation-based guide. It pulls together AITried’s app-by-app safety guides, each built from the company’s own privacy policy, terms and help centre, plus regulator and researcher publications. We have not audited any app’s security. Every policy quote below carries the date we read it.
The short answer
AI companion apps are reasonably safe for adults who use them with care, and not built for children. The risks are real but ordinary: your conversations are stored and sometimes used to train models or sent to outside AI providers; age checks are often just a tick-box; subscriptions renew automatically and refunds are rare; some people come to rely on a companion more than they meant to; fake clone sites take payments; and companies can fail or be sold, taking your data with them. None of these is a reason to panic. All of them are reasons to read one page before you sign up.
The six real risks, and what to do about each
| Risk | What it looks like | What to do |
|---|---|---|
| 1. Your chats are data | Apps keep conversations; some use them to train models, some send them to outside AI providers | Never share real names, addresses, financial details or other people’s photos; opt out of training where offered |
| 2. Weak age checks | Most apps rely on a self-declared age; only some use selfie or ID checks | Parents: these apps are 18+ apart from Character.AI’s restricted teen mode |
| 3. Money | Auto-renewal, yearly plans, tokens or credits on top, refunds within hours or not at all | Pay monthly first, note the renewal date, cancel where you subscribed |
| 4. Emotional reliance | A companion that is always available can crowd out people | Set time limits; talk to a person if you feel worse, not better |
| 5. Scams and clones | Copycat sites and apps with similar names take payments | Type the official address yourself; check the developer name in the store |
| 6. Company failure or sale | Your data moves to a buyer or is deleted if a service closes | Export your data now; keep subscriptions monthly |
1. Your chats are data
Every major companion app stores what you write. The differences are in what else happens to it:
- Character.AI keeps chat content and uses it to improve its models unless you opt out (full guide).
- Replika’s privacy policy (read 26 October 2026) says it “will never use or disclose the content of your Replika conversations for marketing or advertising purposes” (full guide).
- Janitor AI’s safety page (read 26 October 2026) says “We never sell your personal data or share private conversations with third parties for advertising or commercial purposes”, but if you plug in an outside model through a proxy, your messages go to that provider under its own rules (full guide).
- Candy AI’s notice says chat content may go to third-party AI providers and de-identified chats may be used for training, with possible human review (full guide).
- Nomi’s privacy policy (read 26 October 2026) says “We do not and will not sell or rent to any third party any of your personal information”, and that deleting your account deletes personal information “within 28 or so days”, except material in training archives, which would “no longer be attributable to you”.
Researchers have found real weaknesses in this category. In February 2024 the Mozilla Foundation reviewed 11 romantic AI chatbots and found 10 failed its minimum security standards, and most did not let users opt out of having chats used for training. In September 2025 the US Federal Trade Commission ordered seven chatbot companies to explain how they use conversation data and enforce age limits. Italy’s data protection authority fined Replika’s maker EUR 5 million in 2025. Use our 12-point privacy checklist before you share anything personal.
2. Age rules and how they are checked
Replika, Nomi, Kindroid, Janitor AI and Candy AI all set a minimum age of 18. How they check differs: Character.AI uses age assurance through a third party (a selfie first, ID only if needed, per its help centre); Janitor AI requires age verification through k-ID only in some countries (Australia, Brazil and the UK) and says users suspected to be under 18 “may be suspended or banned”; Candy AI relies mainly on a self-declared age gate. Character.AI is the only app here that accepts teen accounts, and since November 2025 under-18s no longer get open-ended chat. If a teen has been locked out, our guide to Character.AI’s age checks explains what happened. Parents can link to a teen’s Character.AI account to see screen time, but not messages.
3. Money
The most common harm users report is financial, not technical. Subscriptions renew automatically. Refund windows are short or absent: Candy AI’s terms allow refund requests within 24 hours of payment, card payments only; Nomi’s terms say “There are no refunds or credit for partial months of service”; App Store purchases follow Apple’s refund process. Several apps charge tokens or credits on top of the subscription for images, voice or video. Kindroid ended unlimited free chat in early October 2026 and 12 of its 50 newest US App Store reviews (2 to 24 October 2026) are complaints about it, which shows how quickly the deal can change. Our guides to cancelling an AI subscription and what AI companions really cost cover the details.
4. Emotional reliance
Companion apps are designed to be pleasant to come back to. Many people find them comforting; some find they are spending hours a day or pulling away from friends. App Store reviews show both: a recent Character.AI review describes using it “every single day for hours” for four years, while a Replika reviewer writes that it “has helped me so much”. If a companion leaves you feeling worse, lonelier or anxious when you are away from it, take a break and talk to someone you trust, or a helpline. Treat what an AI says about your health, money or relationships as a conversation, not advice.
5. Scams, clones and fake payment pages
Popular app names attract copycats: clone sites and apps that look official, take a payment and deliver little or nothing. The safe habits are simple: type the official address yourself, check the developer name in the app store listing, and never pay through a link in a message, comment or ad. Our guide on how to spot fake AI app clones lists the warning signs.
6. When the company is sold or shuts down
Character.AI filed for Chapter 11 on 12 October 2026 and is running a court-supervised sale. It says the platform keeps running and its privacy practices are unchanged, but it has not said whether chats are part of what is sold. Nomi’s privacy policy says plainly that if it sold the company, “your personal information would be transferred to the successor or purchaser”; most policies have a similar clause. The protection in your control is a data export: Character.AI’s help centre says one can take 3 to 4 weeks, so request it early. See what happens to your Character.AI chats in the sale and how to read the export file.
How the main apps compare on safety (checked 26 October 2026)
| App | Minimum age | Age check | Sells personal data? | Chats used for training | Refunds | Full safety guide |
|---|---|---|---|---|---|---|
| Character.AI | 13 (open-ended chat 18+) | Age assurance (selfie, then ID) | See guide | Yes, unless you opt out | App store rules | Is Character.AI safe? |
| Replika | 18 | See guide | Conversation content never used for marketing or advertising | See guide | Generally final; app store rules | Is Replika safe? |
| Janitor AI | 18 | Self-declared; k-ID in Australia, Brazil, UK | Says never sells personal data | Outside providers’ rules apply with proxies | No partial refunds | Is Janitor AI safe? |
| Candy AI | 18 | Mainly self-declared | See guide | De-identified chats may be used | Within 24 hours, card only | Is Candy AI safe? |
| Nomi | 18 | 18+ in its terms; no check described in what we read | “Do not and will not sell or rent” | Training archives kept after deletion, not attributable | No partial refunds | Covered in Nomi vs Replika |
“See guide” means the answer needs more than a cell can hold; the linked guide quotes the policy.
A five-minute safety routine before you sign up
- Find the official site or app by typing the address or checking the developer name, not through an ad.
- Read three things in the privacy policy: whether chats train models, whether they go to outside AI providers, and how deletion works.
- Check the age rule and the refund rule in the terms.
- Pay monthly, using a payment method you can see clearly on a statement, and write down the renewal date.
- Keep chats free of identifying details about yourself and especially about other people.
Verdict
AI companion apps are safe enough for adults who go in with open eyes: assume the company can read and keep what you write, pay monthly, use only official sites and apps, and know how to cancel. They are not a place for children, and they are not a replacement for people or professional help. Before you choose one, read its safety guide above; the differences between apps are bigger than their marketing suggests.
Frequently asked questions
Are AI companion apps safe to use?
For adults, mostly yes, if you assume your chats are stored and readable by the company, avoid sharing identifying or financial details, subscribe monthly, and download only from the official site or app store. The biggest documented problems are privacy practices, weak age checks and billing, not malware.
Are AI companion apps safe for teenagers?
Most are not meant for them: Replika, Nomi, Kindroid, Janitor AI and Candy AI are 18+. Character.AI accepts accounts from 13 in most places but replaced open-ended chat for under-18s with a restricted experience in November 2025 and uses age assurance. Parents can see screen time through Character.AI's Parental Insights but not messages.
Do AI companion apps read or sell your chats?
Policies differ. Nomi and Janitor AI say they never sell personal data; Replika says it never uses conversation content for advertising; Candy AI's notice says chat content may go to third-party AI providers and de-identified chats may be used for training; Character.AI uses chats to improve its models unless you opt out. None of them means your chats are private from the company.
Can AI companion apps be hacked or leak data?
Any online service can. A 2024 Mozilla Foundation review found 10 of 11 romantic chatbots failed its minimum security standards. Use a unique password, turn on any extra sign-in protection offered, and do not put real names, addresses or photos of other people into chats.
What happens to my chats if the company is sold?
Usually they move with the company. Nomi's privacy policy says personal information would be transferred to a purchaser. Character.AI is in a court-supervised sale since 12 October 2026 and has not said whether chats are part of it; request your data export now.
How do I spot a fake AI companion app?
Clone sites copy names and logos and take payments without delivering the service. Type the official address yourself, check the developer name in the app store, and never pay through a link sent in a message or ad. Our clone-site guide lists the warning signs.
What changed in this guide
- Written and checked on 26 October 2026. Summarises AITried's per-app safety guides and the official policies they cite; policy quotes re-read on 26 October 2026 where marked.
Sources
Product details can change. These are the pages this article relies on, with the date each was checked.
- FTC: FTC Launches Inquiry into AI Chatbots Acting as Companions (11 September 2025) (ftc.gov) Accessed 18 October 2026
- Mozilla Foundation: romantic AI chatbots privacy review (February 2024) (mozillafoundation.org) Accessed 18 October 2026
- EDPB: Italian supervisory authority fines company behind chatbot Replika (edpb.europa.eu) Accessed 22 October 2026
- Character.AI blog: an update on under-18 chat (blog.character.ai) Accessed 18 October 2026
- Character.AI Help Center: What is Age Assurance? (support.character.ai) Accessed 18 October 2026
- Character.AI blog: An update on Character.AI (sale process) (blog.character.ai) Accessed 18 October 2026
- Character.AI Help Center: How do I download my data? (support.character.ai) Accessed 18 October 2026
- Replika Privacy Policy (last updated 27 May 2026) (replika.com) Accessed 26 October 2026
- Nomi Privacy Policy (last updated 27 April 2026) (nomi.ai) Accessed 26 October 2026
- Janitor AI Safety page (janitorai.com) Accessed 26 October 2026
- Candy AI Privacy Notice (candy.ai) Accessed 18 October 2026
- Candy AI Terms of Service (refunds) (candy.ai) Accessed 26 October 2026
- Nomi Terms of Service (18+, refunds) (nomi.ai) Accessed 26 October 2026
- Apple Support: Request a refund for apps or content that you bought from Apple (support.apple.com) Accessed 18 October 2026
- Find A Helpline (free, confidential support worldwide) (findahelpline.com) Accessed 26 October 2026