Is an AI girlfriend app safe?

The claim to distrust is end-to-end encryption. Any companion product that moderates content can read that content, because moderation is reading. A product claiming both is claiming something impossible, and two operators in this category currently do.

Flirtly encrypts chat and media at rest with per-user keys, so a stolen database alone does not yield readable conversations. That is not end-to-end encryption and we do not call it that: the application reads content to moderate it and to generate replies. Ask any competitor the same question and see whether the answer distinguishes the two.

Raw chat turns are retained for one year and then deleted automatically. She still remembers you afterwards, because long-term memory is stored as distilled facts rather than transcripts, and you can read, correct or delete those facts yourself.

The number to ask a competitor for is the retention window in days. One product in the August scan retains conversations for six years after account closure. Most do not publish a figure at all.

Deletion is in account settings, confirmed by an email link so a stolen session cannot do it alone. Once confirmed, every chat, memory, media file and credit is erased and cannot be restored. Export is a button in the same place and gives you a JSON file.

Every price is published before you spend, and the number sits on the button before you press it. A failed or refused generation is refunded automatically, with the reason in plain words.

The pattern to watch for elsewhere is a token currency whose exchange rate is discovered at the moment of the decision, and an "unlimited" that quietly is not.

An adult product without hard limits is not permissive, it is negligent. Minor-coded content, real-person likeness, non-consent and crisis situations are refused for every user on every surface, and those refusals are never downgraded to a warning.

The structural version of that: Flirtly accepts no photograph of a real person anywhere, for any purpose. Not a setting that is switched off, a feature that was never built.