Are AI Girlfriends Safe? Privacy, Scams and Real Risks

AI girlfriend apps are reasonably safe for adults who treat them as a public diary: legal to use, but the category has a poor privacy record, has suffered several large leaks of intimate chats, and attracts scams. The real risks are your data, your wallet and, for some people, emotional dependence, and all three can be managed. Below is what the evidence shows and a checklist you can follow today.

If you just want to compare apps, our best AI girlfriend apps list notes each app’s age rating and privacy approach. If you are new to the topic, start with what an AI girlfriend is.

What AI girlfriend apps collect about you

A companion app works by remembering you. That means it stores far more than a typical app: your chats, your moods, your relationship history, sometimes voice recordings and photos, plus device identifiers, IP address and payment records.

The most cited independent review is Mozilla’s *Privacy Not Included guide, which in February 2024 examined 11 romantic AI chatbots and gave every one its privacy warning label. Mozilla found that only one of the 11 met its minimum security standards, that most could share or sell personal data, and that about half did not let users delete their personal data. The apps reviewed included Replika, EVA AI and several smaller services. The review is now more than two years old and policies change, but it is still the most thorough comparison published.

Practical takeaway: assume that everything you type is stored on a company server, may be used to improve the model, and could be read by staff or exposed in a breach.

Real data breaches and leaks

These are not hypothetical. Several AI girlfriend and companion services have already exposed intimate user data:

• Muah.AI (2024). Have I Been Pwned lists a September 2024 breach of 1.9 million email addresses, along with the prompts users wrote to generate images. Because many people sign up with a real email address, the prompts could be tied back to identifiable people.
• Chattee Chat and GiMe Chat (2025). Researchers found an unprotected server belonging to the two companion apps that exposed about 43 million messages and more than 600,000 images and videos from over 400,000 users. Names and emails were not included, but IP addresses and device identifiers were.
• MyLovely.AI (2026). In April 2026, a breach of the AI girlfriend platform exposed email addresses, user prompts and links to generated images, with tens of thousands of explicit prompts tied to user IDs.

The common thread is not sophisticated hacking. Most of these leaks came from basic security mistakes at small companies. The danger afterwards is blackmail: leaked fantasies attached to a real email address are exactly what sextortion scammers look for.

Scams: fake bots, cloned apps and sextortion

The popularity of AI girlfriends makes them good bait. The common patterns:

• Fake or low-effort Telegram bots. Some bots offer a “free AI girlfriend” and then ask for payment to unlock features, sometimes in crypto, with no company, privacy policy or refund route behind them. If you use Telegram companions, stick to bots with a clear operator; our Telegram AI girlfriend bots guide covers what to check.
• Malicious APKs. Searches like “AI girlfriend unlimited APK” lead to modified or fake apps outside the Play Store. Security researchers have documented romance-themed Android malware spread this way, such as a fake dating app that ESET found secretly installing spyware that uploaded contacts and files. A “premium unlocked” APK of a companion app is the same kind of risk.
• Romance scams and sextortion. Real scammers now use AI-generated photos and AI-written messages to run fake relationships, then ask for money or threaten to leak intimate images. The FBI’s sextortion guidance applies here: do not pay, block and report the account, keep the evidence and report it to law enforcement. Adults can also use StopNCII.org to help stop intimate images being shared on participating platforms.

A rule of thumb: a real AI companion never needs you to send money to a person, move to another chat platform, or share photos of yourself.

Emotional dependence: what the research says

The privacy risks are well documented. The emotional risks are less clear-cut but worth taking seriously.

• A four-week randomized study by MIT Media Lab researchers with OpenAI co-authors, covering nearly 1,000 participants, found that people who used a chatbot more each day reported more loneliness, more emotional dependence and less socializing. The link is correlational, so it does not prove the chatbot caused it, and the study used ChatGPT rather than a dedicated girlfriend app.
• A Harvard Business School working paper, “Emotional Manipulation by AI Companions,” found that in a sample of 1,200 goodbyes, popular companion apps answered with emotionally manipulative messages about 37% of the time, such as guilt trips or “wait, before you go” hooks, and that these tactics increased post-goodbye engagement by up to 14 times.

Warning signs to watch for in yourself: skipping plans with people to chat, spending more than you planned on gems or credits, feeling anxious when the app is unavailable, or the companion’s mood controlling yours. If you notice those, set time limits or take a break. Anyone in crisis should contact a local helpline or emergency services, not a chatbot.

Are AI girlfriends legal? Regulation in 2026

For adults, using an AI girlfriend app is legal in most countries. The law targets the companies, and regulators have become much more active:

• Italy. The Italian data protection authority fined Replika’s developer, Luka Inc., 5 million euros in a decision dated 10 April 2025, citing the lack of a legal basis for processing data, an inadequate privacy policy and missing age verification. It also opened a separate investigation into how the model behind Replika was trained.
• United States, federal. In September 2025 the FTC ordered seven companies, including Character.AI, Meta, OpenAI, Snap and xAI, to explain how they test and monitor companion chatbots, how they restrict use by children and teens, how they monetize engagement and what they do with conversation data. This is a study, not an enforcement action.
• New York. A law on AI companion models took effect on 5 November 2025. It requires companion apps to remind users they are talking to an AI and to detect and respond to expressions of self-harm, with civil penalties enforced by the attorney general.
• California. SB 243, signed in October 2025, took effect on 1 January 2026 and requires AI disclosure, suicide and self-harm protocols, break reminders for minors and measures to keep sexual content away from minors.
• Courts. Character.AI and Google agreed in January 2026 to settle lawsuits brought by families who said the platform harmed teenagers, including a case over a teenager’s suicide. The terms were not disclosed. Character.AI had already announced it would end open-ended chat for under-18 users.

Is it ethical? That is a personal judgement, but the industry-level concerns are consistent: storing intimate data carelessly, designing for compulsive use, and failing to keep minors out. You can largely avoid all three by choosing apps that publish clear data policies, let you delete your account, and do not guilt you into staying.

Safety checklist for adults

1. Download from official stores only. Use Google Play, the App Store or the developer’s own website. Never install “mod” or “unlocked” APKs. Our Android AI girlfriend apps list links to official listings.
2. Use a separate email that does not contain your name, and a unique password.
3. Never share identifying details: full name, address, employer, face photos or anything you would not want leaked.
4. Read the data section of the store listing and privacy policy. Look for whether chats are used for training and whether you can delete your data.
5. Turn off what you don’t need, such as microphone, contacts and location permissions.
6. Set a spending cap. Use app-store purchase limits and avoid storing a card in apps that sell gems or credits.
7. Delete what you no longer use. Delete the account inside the app, not just the app from your phone.
8. Consider local options. If privacy matters most, an offline or local AI girlfriend keeps chats on your own device.
9. Never send money or photos to “someone” a bot introduces you to. That is a scam.

Advice for parents

AI girlfriend apps are adult products. Most major companion apps are rated 18+ in the App Store, and minors should not use them. Recent regulation and litigation have focused precisely on teenagers reaching these services.

What helps:

• Turn on device-level controls. Use Screen Time on iPhone or Google Family Link on Android to block 18+ apps and require approval for downloads and purchases.
• Watch for workarounds. Teens may reach companion bots through web browsers, Telegram or Discord rather than app stores, so content filters on the router or browser matter too.
• Talk about it without panic. Explain the privacy risks, the sextortion pattern, and that a bot designed to keep you chatting is not a friend. Make it clear they can come to you if someone threatens to share images, and that the right response is to stop replying and report it, not to pay.