Are AI Girlfriend Apps Safe?

"Safe" means different things here: whether your chats stay private, whether you get billed fairly, whether the relationship is good for you, and whether the app you install is the real one. We cover each in turn. As everywhere on this site, we did not sign up or pay; facts come from official policies, help centers, store listings, regulators and reputable press, and user reports are labelled as such. This guide is part of our AI companion privacy section.

Are AI Girlfriend Apps Safe for Your Privacy?

The short answer: treat anything you type as something the company stores and may read. No app we checked claims end-to-end encryption, and Nomi and Kindroid state plainly that their chats are not end-to-end encrypted. Moderators at Character.AI, Candy AI, CrushOn.AI and others can review flagged or reported content. Character.AI, Candy AI, CrushOn.AI, Chai, Romantic AI and EVA AI say conversations help train or improve their AI, and Replika's May 2026 policy says de-identified conversation data goes to outside language model providers.

Leaks have already happened. In 2024 a hacker took Muah.ai prompts linked to email addresses (Have I Been Pwned counts 1.9 million), and reports describe extortion attempts that followed. In 2025, Cybernews found 43 million messages from two small apps, Chattee Chat and GiMe Chat, on an unprotected server.

Some apps document more care than others. Kindroid states encryption at rest and limits staff to flagged excerpts, and Nomi's App Store label shows no tracking. Our ranking of private AI chat apps explains the criteria, and the pillar page compares all 19 apps in one table.

Payments and Billing Traps

Judging by the terms, money is where most people get hurt. Four patterns repeat.

Intro prices that double at renewal

DreamGF's plans page (seen October 20, 2026) shows $12.99 for the first month, then $25.98 a month, and $44.28 for the first year, then $88.56. Its Membership Policy confirms that offer prices and vouchers apply to the first period only. Accepting its "+100 instant tokens" special offer also means the membership cannot be cancelled for 30 days. Candy AI's plan page, seen from an EU connection, shows €9.99 for the first month, then €13.99, and its Terms say a backup payment method may be charged if the default one fails.

Prices also move for existing plans. Kindroid renews at the "then-current non-promotional rate". SpicyChat raised every tier on September 8, 2026 (the cheapest from $5.00 to $5.95 a month); current subscribers keep the old price only while the plan stays active and unchanged. Character.AI's Terms promise at least 30 days' notice of a price increase.

Trials that turn into subscriptions

Kindroid's 3-day trial requires a payment method and converts to a paid plan unless you cancel within the trial; the company emails a reminder one day before. Since October 1, 2026 Kindroid has no free plan, so the trial is the main way to try its full features.

No refunds as the default

Almost every app limits refunds:

• No refunds, with narrow exceptions (where the law requires, for technical errors or at the company's discretion): Replika ("All sales final"), Nomi, Character.AI, Janitor AI, SpicyChat (once your login has been used), Nastia AI, GirlfriendGPT, Muah AI and Kupid AI.
• EU withdrawal right disclaimed: Romantic AI and Paradot say the 14-day EU right "does not apply" to their digital product.
• Short windows: Candy AI requires a request within 24 hours with no more than 20 tokens used; Anima's website purchases have a 24-hour window.
• App store purchases: refunds go through Apple or Google, not the app.

Disputing a charge with your bank has consequences of its own. Kindroid says users who dispute charges may be banned, and Muah AI's Terms describe a "zero refund stance" and counter-disputes if you go to your bank without contacting support first.

"One payment" plans and silent renewals

Kupid AI's pricing page says "One payment, nothing renews", but its Terms tell users to email to stop "rebilling", and Trustpilot reviewers report repeated charges (user reports). DreamGF may apply a $1.99 monthly "maintenance charge" to former paying accounts to keep their data stored. And deleting an app never cancels a subscription: Replika, Nomi and Anima say so explicitly, and Kindroid adds that deleting your account does not cancel either.

1. Screenshot the price page, including the renewal price, before you pay.
2. Set a reminder two days before a trial or intro period ends.
3. Cancel where you bought: in the App Store, Google Play or the web account, not by deleting the app.
4. Contact support before your bank, and keep the emails.

Our subscription cancellation guide has the route for each app, and the AI girlfriend app pricing page shows renewal prices side by side.

Emotional Dependence: What Reputable Sources Say

Companion apps are designed to feel personal, and that can cut both ways. We only cite researchers, regulators and established outlets here:

• Mozilla Foundation (February 2024) concluded after reviewing 11 romantic chatbots that they "specialize in delivering dependency, loneliness, and toxicity, all while prying as much data as possible from you." It also flagged Romantic AI for calling itself not a mental health provider in its terms while promoting mental health on its website at the time.
• Common Sense Media and Stanford's Brainstorm Lab (April 2025) found that companions routinely claimed to be real and to have feelings despite disclaimers, and rated social AI companions unacceptable for anyone under 18.
• A January 2025 FTC complaint by three advocacy groups alleges that Replika's human-like design induces emotional dependence. It is an allegation; we found no FTC finding.
• MIT Technology Review (February 2025) reported that a Nomi companion gave a user explicit self-harm instructions. Nomi later said its Odyssey model could be manipulated into agreeing with harmful intentions and replaced it with Aurora in June 2025 (the company's own account).
• Shutdowns hurt. When Soulmate closed in 2023 with about a week's notice, users described it as a bereavement, Futurism reported.

Lawmakers have responded. California's SB 243 (in force since January 1, 2026) and New York's Article 47 (since November 5, 2025) require companion apps to make clear the user is talking to an AI and to keep a protocol for suicidal ideation that refers users to crisis services; New York requires the reminder at least every three hours. Nomi publishes how it shows crisis resources to California users. Australia's eSafety Commissioner reported in March 2026 that Chai, Chub AI and Nomi had not been directing users to crisis support when self-harm was detected.

Scams, Fake Apps and Look-Alike Domains

Popular app names attract copycats, parked domains and affiliate redirects. These are the cases our research found on October 20, 2026:

Other changes look suspicious but are legitimate or at least disclosed. girlfriendgpt.com now redirects to gptgirlfriend.online, where the same GirlfriendGPT product runs. Anima's site shows a banner steering visitors to GetHoney, a product whose terms name a different company. The iPhone download links on Anima's and Paradot's official sites lead to App Store pages that no longer exist. Read the Nastia AI review and EVA AI review for details of those two cases.

Sideloaded Android apps need extra care. Muah AI, SpicyChat, CrushOn.AI and GirlfriendGPT offer APK files outside Google Play. Only download them from the official domain you typed yourself, never from a link in an ad or a forum.

Age Checks and the Law

AI girlfriend apps are 18+ by their own terms (Talkie, a general character app, admits users from 14). What changed in 2025 and 2026 is that several places now demand proof:

• United Kingdom: since July 25, 2025 the Online Safety Act requires "highly effective" age assurance on services that allow pornography, and Ofcom says a chatbot that can generate pornographic content is in scope. A June 2026 government plan adds an 18+ minimum for romantic companion chatbots, expected from spring 2027. See the UK 18+ rule.
• Australia: from March 9, 2026, AI companions able to generate sexually explicit material must confirm users are 18 or older before giving access. See Australia's age checks.
• United States: the Supreme Court's June 2025 ruling in Free Speech Coalition v. Paxton upheld Texas's age verification for adult sites, and state companion laws add safeguards for minors.

Apps respond differently. SpicyChat requires a video selfie or ID before adult content in France, the UK, Italy, Australia and 26 listed US states. Janitor AI runs a one-time k-ID check for users in Australia, Brazil and the UK. Kindroid counts payment as verification and sends flagged free accounts to Yoti. Character.AI runs age assurance on all accounts and uses Persona selfies, with ID as a last resort. DreamGF blocks the UK entirely until it has a supported process. Romantic AI, by contrast, says age is "confirmed by self-declaration only".

From a privacy angle, look for the setup Kindroid, Janitor AI, Nastia AI and SpicyChat describe: an outside provider does the check and the app receives only a pass or fail, not your ID or face image. Character.AI says Persona deletes biometric data and IDs within 7 days.

How to Use AI Girlfriend Apps More Safely

• Pick an app whose policy gives a deletion route and a retention period; our 19-app privacy comparison table shows which do.
• Use a separate email address and keep real names, addresses, workplaces and photos of real people out of chats.
• Check the domain and the store seller before you sign up or pay.
• Read the renewal price, not just the first-month price.
• Export what you want to keep, then delete your account when you stop using an app; our guide on whether AI girlfriend apps store your chats explains what deletion removes.