A private AI chat app is one where your messages aren’t stored on the company’s servers or readable by its staff. In practice there are two ways to get there: the AI model runs on your own phone, so your words never leave it, or a cloud service promises not to keep or use your chats, which you have to take on trust. Most popular AI chat apps are cloud-based, so when their marketing says “private”, it usually describes a policy, not how the app is built.
What makes an AI chat app private? #
Ask these questions about any app before you share anything personal:
| Question | Why it matters |
|---|---|
| Where does the AI model run? | If it runs on a server, your messages are sent there to get a reply. |
| Where are chats stored? | Server-stored chats can be read by staff, subpoenaed or exposed in a breach. |
| Do you need an account? | An email or phone number ties every chat to your identity. |
| Are chats used to train AI models? | Training can keep fragments of your conversations in future models. |
| Can you delete everything yourself? | Deletion should cover chats and saved memories, not just the chat list. |
| What do the ad and analytics tools collect? | Even private-chat apps can share device IDs and usage data with ad networks. |
| Is there any path where chat text leaves the device? | Reports, cloud backups and sync features all move text off the phone. |
On-device vs cloud AI chat #
| On-device AI | Cloud AI | |
|---|---|---|
| Where your messages go | Stay on your phone | Sent to the company’s servers |
| Who could read them | Anyone with your unlocked phone | You, plus whoever the company allows or is compelled to allow |
| Works offline | Yes, after the model downloads | No |
| Reply quality | Good, limited by phone memory | Usually better, with larger models |
| Phone requirements | Needs free storage and enough RAM | Almost any phone |
| Cost to run | Nothing extra per message | Server costs, often passed on through subscriptions |
On-device AI is the only design where “we can’t read your chats” is literally true, because there’s no copy on anyone else’s computer. The trade-off is that a model small enough to run on a phone is less capable than the largest cloud models. For companionship and roleplay that gap is smaller than you might expect, but it’s real. Our offline AI chatbot explainer covers how phones run these models.
Even private apps touch the network #
A chat that never leaves your phone doesn’t mean the app never goes online. Common connections include:
- Ads. Free apps often use ad networks that collect device identifiers, approximate location and app activity.
- Purchases. Subscriptions go through the App Store or Google Play, and the app receives a receipt.
- Analytics and crash reports. These usually cover app behavior rather than chat content, but not always.
- Model downloads. On-device apps download the model file once.
The quickest way to see this is the store listing. On the App Store, scroll to App Privacy. On Google Play, open Data safety. For example, Replika’s App Store label lists identifiers and usage data as “Data Used to Track You”, and Character.AI’s label includes third-party advertising. Nomi’s website says its chats are anonymized and not shared with third-party sites, while its App Store label lists user content as data linked to you for analytics and personalization. None of that is unusual for a cloud app. It’s just worth knowing before you share personal things.
Xin: a private AI companion that runs on your phone #
Xin is an on-device AI companion app, and it’s a useful example of both what that design protects and what it doesn’t. The AI model runs on your phone after a one-time download (about 1.3 GB for the free model). Your chats, the characters you create, and everything a companion remembers are stored in a local database on the device. There’s no account, no sign-up and no email. Conversations work with no connection at all.
What does touch the network, per Xin’s privacy policy:
- The model download, once.
- Ads on the free tier, through Google AdMob. On iOS the app asks for tracking permission first, and in the EEA and UK it shows a consent form. Xin’s Google Play data safety form declares approximate location, device IDs, app interactions and diagnostics for this purpose. VIP subscribers see no ads.
- Purchase receipts through RevenueCat, with an anonymous app-generated ID. No name or email.
- Content you choose to report. If you report a reply or a companion, only that excerpt, your reason and the app version are sent.
Two honest caveats. Xin relies on your phone’s own security rather than adding its own encryption layer, so a strong passcode matters. And like most apps, its data may be included in your phone’s own iCloud or Google device backup. The app’s FAQ notes that gems carry over through a device backup for exactly that reason. You can wipe every companion, chat and memory from Me, then Erase all data.
How to make any AI chat app more private #
- Don’t share identifying details such as your full name, address, employer or other people’s private information.
- Opt out of training if the app offers a setting for it.
- Delete chat history and saved memories regularly, and check that deleting one clears the other.
- Use a separate email for AI apps that require an account.
- Limit ad tracking. On iPhone, choose “Ask App Not to Track”. On Android, reset or delete your advertising ID in Settings.
- Lock your phone. For on-device apps, your phone’s passcode is the main protection.
For more on what companion apps gather, see what data AI chat apps collect and AI chat apps that don’t need an account.
Frequently asked questions #
Are AI chat apps private? #
Most aren’t private in the strict sense. Cloud-based apps send your messages to their servers to generate replies and usually store them. Some promise not to train on them or let you delete them, but the company still has access. On-device apps are the exception.
Can AI chat apps read my messages? #
Cloud-based apps technically can, since your messages are processed and often stored on their servers. Whether staff actually read them depends on the company’s policies, moderation practices and legal obligations. An app whose model runs on your phone has no server copy to read.
Is there an AI chatbot that doesn’t save conversations? #
Some cloud assistants offer temporary or incognito chats that aren’t saved to your history, though they may still be kept for a limited time for safety review. On-device apps save conversations only on your phone, and you can delete them there.
Does on-device AI need the internet? #
Only to download the model and, for free apps, to load ads. After that, the chat itself runs without a connection. That’s also a quick test of whether an app is really on-device: turn on airplane mode and see if it still replies.