What’s Changed (updated 13 October 2026): SpicyChat’s new help center now states that deleted chats are gone for good and that its support team cannot read your chats. Account deletion is also a button in settings now. The privacy policy still names no retention period, and an independent index still grades SpicyChat’s policies F.
Search the question and you get handed two facts that look like they cancel each other out. An independent trust index gives SpicyChat an F. SpicyChat’s own documentation says your chats are private.
Both are true. They are also answering different questions, and nobody on the first page of results bothers to say so.
The thing that surprised me most is where the real answers live. Until September 2026 they sat only in Reddit comments from support staff, and those answers shifted between 2025 and 2026. That month SpicyChat’s new help center put the deletion rules in writing, while the privacy policy still names no retention period.
This covers what SpicyChat discloses, what it quietly admits in a page almost nobody reads, and the four things you can do today that change your exposure.
Is SpicyChat Safe According to Independent Ratings?
SpicyChat scores F, 19 out of 100, on the VerifyWise AI Trust Index, ranking 207th of 211 apps.
The companion category averages 40, so it sits 21 points below its own peers.
On the same index, Candy AI grades C at 53, ranked 89th of 211, and its policy names a three-year account retention period. VerifyWise also flags that Candy trains on user conversations with no opt-out and takes a perpetual licence over what you type.
The per-category breakdown shows where the points vanished. Training-data use scored 0 of 4, and data-subject rights scored 0 of 5.
Retention and deletion also scored 0 of 4. That is the category a reader asking this question came for.
The search results skip the line VerifyWise prints about its own method. Its grade “reflects our analysis of what an app states in its public privacy policy and terms” and “measures the transparency of those documents, not the company’s actual data practices, security, or compliance.”
So the F mostly scores silence. Neither the privacy policy nor the terms say whether SpicyChat trains models on your chats, and neither offers a training opt-out. Selling is spelled out, though: the terms say SpicyChat “has the right to and will use, sell, license the content generated through chats”, citing service operation and promotion.
That licence covers your chats with any character “in any way, including copying, displaying, selling, distributing, and modifying it”, and it is “sublicensable, perpetual, and irrevocable”. It grants that use without ever mentioning training.
What is a transparency grade: A score for what a company writes down in its public policies, not a test of what its servers do with your data.
| Category scored | SpicyChat score | What a 0 means here |
|---|---|---|
| Training-data use | 0 of 4 | The policy never states whether chats train models |
| Data-subject rights | 0 of 5 | Names a deletion right; edits via account settings or a request, access via a request; no portability or objection right |
| Retention and deletion | 0 of 4 | No named retention period anywhere |
| Third-party sharing | 0 of 5 | Partial disclosure only |
| Transparency | 1 of 4 | Partial disclosure only |
| Sensitive data and children | 1 of 2 | Partly addressed |
| Security and accountability | 0 of 3 | No documented security commitments |
Across all 230,625 characters of SpicyChat’s help documentation at docs.spicychat.ai, read on 13 October 2026, the words “retention”, “encrypt” and “anonymous” appear zero times. The terms do carry a “Data Retention Policy” paragraph, but it names no period beyond keeping chats “for as long as necessary”.
I weigh that silence heavily. A company with 230,625 characters to spend on its own documentation had room to say how long it keeps your messages.
What Happens to Your Deleted SpicyChat Chats?
SpicyChat’s own help center has said since September 2026 that deleted chats are gone for good: “Anything deleted on SpicyChat is deleted permanently. There’s no recycle bin or restore.”
The privacy policy still does not say it. Before the help center, the only answers were Reddit comments from staff, and those changed between June 2025 and April 2026.
In June 2025, a moderator posting as Kevin_ND answered a question about data control in one r/SpicyChatAI thread. The wording was careful: “complete data deletion is only available by requesting it through our Email Support…
The process will take about 1-2 weeks, and when completed, all data associated with your email will be fully deleted from our platform.”
Read that phrasing closely. Deletion was email-only, took one to two weeks, and the promise covered “our platform”.
Someone in that thread caught the gap immediately and asked whether there is “a difference between ‘Platform’ and ‘servers'”. The question was never answered.
In April 2026, a staff account posting as Komiya-ND gave a broader answer in a later deleted-chats thread: “Every data removed or deleted in SpicyChat is considered permanent.
If you delete your chatbot, it will be removed from the platform as well as from our database. This applies to all, including accounts, chatbots, conversations, personas, etc.”
That is a materially better answer. It covers the database, not just the platform, and it applies to user-initiated deletion rather than a support ticket.
The person asking noticed the shift in real time and said so: “one of your moderators named Kevin mentioned that they are only removed from the platform. So it seems you have changed your retention policy.”
SpicyChat has since put a shorter version of that answer in writing, one that never mentions the database. Its help center article Deleted conversations and what can’t be recovered says support “cannot recover deleted conversations” because chats are “private and not accessible to our support team”. That is support documentation, and the privacy policy, whose header still reads “Last updated: May 04, 2023”, names no period beyond keeping personal data “for as long as is necessary”.
If a chat you deleted still shows up, the same article says you most likely deleted only the newest of several saved chats with that character. In October some r/SpicyChatAI users said chats they deleted long ago had reappeared, and one relayed a second-hand explanation that deleted chats used to stay in the database until a recent change. The relayed explanation adds that the change covered only later deletions, with a cleanup of older ones still in progress.
I could not find that explanation anywhere SpicyChat published it, so treat it as unconfirmed. A SpicyChat moderator replied on 5 October, in the thread that started the debate, that “chat deletions are permanent and they can not be recovered”. The same reply promised to reword the help article, which still read the same on 13 October.
Before: you assume the privacy policy tells you how long SpicyChat keeps deleted chats.
After: you know the policy names no retention period, the help center has called deletion permanent since September 2026, and the 2025 staff answer was narrower.
Are the SpicyChat Apps on the App Store Real?
No. SpicyChat’s own documentation states it has no iOS app and is not on Google Play, so the store listings using its name were published by other companies.
Check where you installed from before you read another word.
The documentation is not ambiguous. On iOS: “SpicyChat does not have a native iOS app on Apple App Store.” On Android, the official app is a direct download from the company’s own site, and the docs add that “it is not available on the Google Play Store”.
There was a real iOS app once. It was pulled on 27 August 2025 after Apple “determined that the app does not comply with their guidelines”, and existing installs stopped working on 25 September 2025.
An App Store listing called “Spicychat AI: Roleplay Chat GF” went live on 13 November 2025, about seven weeks after the official app went dark. Its seller is Chengdu Qizhixu Technology Co., Ltd, and its privacy policy is hosted at qizhixu.xyz, not at spicychat.ai.
I am not going to guess at anyone’s intent here. The verifiable part is enough: install that app and your conversations go to a company SpicyChat says is not it, under a privacy policy that is not SpicyChat’s.
| Where you install from | Official? | What it means for your data |
|---|---|---|
| spicychat.ai in a browser | Yes | Covered by SpicyChat’s own policies |
| APK from spicychat.ai/download | Yes | Official Android build, no store review, manual updates |
| Apple App Store listing | No | Different company, different privacy policy |
| Google Play listing using the SpicyChat name | No | SpicyChat itself is not on Play; only its SFW app PixelChat is |
The sideloaded APK is the awkward answer, and I would rather say so than pretend otherwise. It is genuinely the official Android build, and it also skips store review and does not auto-update. If that trade bothers you, the browser is the clean option.
What Problems Has SpicyChat Already Admitted To?
SpicyChat publishes a Known Issues list naming three unresolved data problems, and none of them appear in any review on the first page of search results.
They sit inside its security reporting page.
The first concerns uploaded images. The company states that photo metadata is not stripped, so an upload “may retain the original metadata embedded by the device that captured them, such as camera or device details, timestamps, and in some cases GPS coordinates, which can be read from the served image.”
What is EXIF data: The hidden record your camera or phone writes into a photo file, covering the device, the time, and often the exact location.
That is a location leak in your own profile picture, described by the company itself. It is also trivially avoidable once you know.
The second concerns deletion, and it sits in tension with the staff position above. An uploaded image “may stay retrievable from its direct (unguessable) URL for a period after the related content or account is removed, until storage cleanup completes.”
The third concerns logout. Signing out “ends your session on the current device, but the session token is not revoked on our servers and stays valid until it naturally expires”, and there is “no control to remotely sign out of all other devices”.
Credit where it is due, and I mean this: publishing a known-issues list at all puts SpicyChat ahead of most platforms in this category, which say nothing at all.
The problem is that the page is written for security researchers, so the people who most need these three facts never see them.
| Symptom or worry | Likely cause | What fixes it |
|---|---|---|
| Profile photo may expose your location | EXIF metadata is not stripped on upload | Strip metadata before uploading, or use an image you did not shoot |
| Deleted image still loads from an old link | Storage cleanup runs after the delete | Nothing user-side, assume a delay before it clears |
| Logged out but a shared device still has access | Token is not revoked server-side at logout | Change your password, which invalidates sessions |
| Unsure whether a chat is truly gone | The help center says deletion is permanent; the privacy policy names no period | Delete every saved chat with that character, then the chat itself |
Who Can Read Your SpicyChat Conversations?
Character creators cannot read your chats, and since September 2026 SpicyChat’s help center says its support team cannot either. Its terms also let SpicyChat “access, review, edit, and delete” content you submit “at any time and for any reason”, without saying whether that includes chats.
The documentation answers one narrow question, and answers it well: “Can Creators See My Chat Logs? No! Your chats with characters are private.”
It closes with the scope: “Any messages you send or receive are not viewable by the character’s creator.”
The help center added that second group in September 2026: chats are “private and not accessible to our support team, so there’s genuinely nothing for us to retrieve.” The terms, updated 23 July 2026, add a rule for employees and contractors, an “internal policy, which prohibits unauthorized access to users’ personal information and chats”. None of the three statements mentions moderators by name or model training.
The documentation is explicit that moderation has visibility elsewhere. On hidden characters it states that “while hidden characters are not visible to the public, they can still be seen by our moderators.”
Google’s own answer box made this worse when I checked it in September. It rendered the vendor line as chats that “cannot be viewed by other users or the character’s creator”, adding a category the source never claimed.
The same answer box told searchers “standard encryption is used” and attributed that to nastia.ai, a competing companion product writing about a rival. SpicyChat’s help docs and help center never use the word. Its terms say only that it is “implementing advanced encryption techniques and anonymization processes where appropriate”, with no standard named.
My position is that an unverified encryption claim sourced from a competitor is worse than no claim, because it retires a question the reader should still be asking.
Is SpicyChat’s Age Verification Safe to Complete?
Age verification is the one area where SpicyChat’s disclosure is strong, and it still leaves the important name blank.
The docs state plainly: “We never see, receive, or store any images, documents, or personal details used during verification.”
Checks run through third-party partners using a video selfie, with an ID check as fallback. SpicyChat says it receives only a yes or no result.
The gap is that the partner is never named, and retention is described as deletion “according to their privacy standards”. You are being asked to trust a company you cannot look up, on a standard nobody states.
Verification is required in 26 US states plus France, the UK, Italy and Australia, triggered by your connection IP and tied to your account rather than your device. The state-by-state detail is covered in the state-by-state breakdown.
I find the contrast genuinely odd. The company wrote a clear, specific, verifiable privacy commitment for the one flow where regulators are watching, and wrote nothing at all about the chat logs it stores every day.
Has SpicyChat Ever Been Breached?
There is no publicly documented SpicyChat breach.
I want to say that plainly, because the fear in this community runs well ahead of the evidence.
The sector risk is still real, and it usually arrives through carelessness rather than attack. In February 2026 a different product, Chat & Ask AI, exposed 300 million messages from more than 25 million users through a Firebase misconfiguration with security rules set to public.
That is why undefined retention matters more than it sounds. Every message a platform keeps past its usefulness is a message available to leak on the day somebody misconfigures a bucket.
Scale sharpens it. AI companion apps had been downloaded 220 million times globally by July 2025.
Silence about training data is a category habit rather than a SpicyChat invention. Mozilla reviewed 11 relationship chatbots in February 2024 and flagged every one of them, finding that most gave users no way to opt out of having intimate chats used for training, with Genesia AI the single exception.
Content safety is a separate question from data safety, and the research is less kind there. An academic benchmark of 16 character platforms across 5,000 questions found that these platforms return an unsafe response 65.1% of the time against 17.7% for baseline models.
SpicyChat is one of the 16 studied, and one of only five where the gap between adult-mode and standard-mode safety was statistically significant.
What Should You Do About SpicyChat Privacy?
Four changes cover most of your realistic exposure, and all of them take under five minutes. None require leaving the platform.
- Strip metadata from any image before you upload it, or use a picture you did not take on your phone. This closes the GPS leak the company has already documented.
- Register with an email that is not your main one, and never reuse a password. The most common real-world exposure is somebody reading your screen, not a server breach.
- Delete the conversation, not just the bot, and clear every saved version: open the chat, go to Chat menu, then View saved chats, and delete each one before deleting the chat. Staff have confirmed chats and bots are separate data sets, so removing a character can leave the chat behind.
- Change your password when you finish on a shared or borrowed device. Logging out does not revoke the session token, so a password change is what ends it.
Keep personal details out of the chat itself. The only account detail worth linking to your intimate conversations is the one you cannot avoid, which is the email, and even that can be a throwaway.
Those four steps are enough for most people, and staying put is a defensible call. If that is you, run SpicyChat from the browser rather than a store app and treat the four fixes above as setup rather than optional.
If you decide to leave, SpicyChat now lets you delete the account yourself: open your profile settings, expand Advanced, select Remove Account and let the 10-second countdown run. It removes your chats, saved conversations, characters, personas, settings and memories, and none of it can be recovered. If you delete it by accident, support cannot restore it but can move any remaining paid time to a new account.
Cancel first if you subscribed through Google Play, SubscribeStar or Boosty, because those subscriptions keep billing after the account is gone. The Google Play route runs through PixelChat, SpicyChat’s SFW app, since SpicyChat itself is not on Play. Subscriptions bought on the SpicyChat website cancel automatically.
The terms separately give users “the right to request the deletion of their personal data and chat history”.
If the documentation gap is the part that bothers you, and I think that is a reasonable place to draw the line, the fix is a platform that writes its retention rules down.
Candy AI publishes what it collects and how long it holds it, which is the specific thing missing here.
Nectar AI is the other one I point people toward when character depth matters most, so check its policy the same way.
Neither is a privacy guarantee, and I would not sell one as such. Candy’s policy names a retention period, which SpicyChat’s still does not.
If you want the wider set, the SpicyChat alternatives roundup covers what each one trades away, and our Janitor AI safety breakdown runs the same checks on the closest comparable platform.
Quick Takeaways
- The F grade scores missing paperwork and a sweeping chat licence, not proven misuse, and reading it as a data-abuse verdict gets SpicyChat wrong in both directions.
- Since September 2026 SpicyChat’s help center says deleted chats are gone for good and support cannot read them, but the privacy policy still names no retention period.
- SpicyChat has no iOS app and is not on Google Play, so any store listing with its name belongs to someone else.
- Strip photo metadata before uploading, delete every saved chat separately from the bot, and change your password instead of trusting logout.
- If you want a named retention period in writing, that is my reason to switch, and it is a different reason from fearing a breach that has not happened.
