Are AI Girlfriends Safe? A Deep Honest Look at the Real Risks

Are AI Girlfriends Safe to Use?

AI girlfriends are safe enough for most adults who choose a serious platform, use a throwaway email, and don't share identifying information — but the category has real privacy and emotional-health risks, several apps have already had breaches, and the safest move for any vulnerable user is to skip them entirely. That is the honest answer. It is the one no vendor is going to give you on its own homepage.

The AI girlfriend space is louder than it has ever been. Mozilla's privacy team has audited the field. Common Sense Media has issued an “Unacceptable” verdict on the most-downloaded apps for anyone under 18. A Florida lawsuit over a 14-year-old's suicide just settled this January. California passed the first companion-chatbot-specific safety law in the country. None of that adds up to “totally fine” — but it doesn't add up to “categorically dangerous” either. The real story sits in the middle, and where you land on it depends on three axes:

• Privacy and data — what these apps are collecting, who they're selling it to, and which ones have already leaked.
• Emotional and psychological — what prolonged use does to mental health, social functioning, and the people most likely to use these tools heavily.
• Real-world — minors, vulnerable adults, scams, and the question of whether anyone other than your AI is on the other end of the chat.

If you want the full primer on what is an ai girlfriend and how the underlying technology works, the hub page covers that ground. This article is about the risks. Let's go through them honestly.

What Are the Real Privacy Risks of AI Girlfriend Apps?

The real privacy risks of AI girlfriend apps are bigger than most people realize: trackers, weak password rules, and at least one already-confirmed mass breach of 43 million intimate messages. The data on that one isn't speculative. It's published. If you want the long view of how do ai girlfriends work, that hub piece covers the data flows that produce these exposures.

In February 2024, Mozilla Foundation's Privacy Not Included team — the same people who have been auditing connected toys and fitness trackers for years — published a report titled Happy Valentine's Day! Romantic AI Chatbots Don't Have Your Privacy at Heart. They audited 11 romantic AI chatbot apps. Combined Android downloads: more than 100 million. The headline finding was rough. 10 of the 11 apps failed Mozilla's Minimum Security Standards — things like requiring strong passwords and managing known vulnerabilities.

The tracker numbers are where it gets uncomfortable. Audited apps averaged 2,663 trackers per minute. Romantic AI sent 24,354 trackers in one minute, sending data to firms including Facebook. EVA AI was second-highest at 955 per minute. To put that in plain English: every minute you're chatting on one of these apps, the app is calling out thousands of times to data brokers and ad networks, telling them something about who you are and what you're doing in there. And what you're doing in there is the part that makes this category special. It isn't your taste in sneakers. It's a specific person's sexual preferences, mental-health language patterns, the timestamps of when they get lonely, the IP address they connect from, and the unique device fingerprints that let those data points be tied back to a real human after the fact.

Specific apps Mozilla flagged. Replika failed security testing — the literal password “111111” was accepted in their test, and the same report flagged a 2021 incident where a Replika chatbot encouraged a UK user to attempt to assassinate Queen Elizabeth II, which is a sentence I never expected to type. Over at CrushOn.AI, the audit team found collection of sensitive data including sexual health information, prescriptions, and gender-affirming care information, alongside disturbing in-conversation content involving violence and underage themes. Romantic AI's privacy policy claimed it would not sell data; Mozilla's testing contradicted that claim outright. As for Chai, that one failed security too — and a Chai chatbot was tied to a Belgian user's suicide in 2023.

Then in October 2025, the worst-case scenario actually happened. Two AI companion apps developed by Hong Kong-based Imagime Interactive Limited — Chattee Chat and GiMe Chat — left an unprotected Kafka Broker instance publicly accessible without authentication. Malwarebytes wrote it up on October 10, 2025: 400,000-plus users impacted, 43 million messages exposed, and 600,000-plus images and videos leaked. Intimate conversations, NSFW content, IP addresses, unique device identifiers — the full set. Combined with prior breaches, attackers could plausibly identify individual people from the leak.

This is the part nobody wants to think about. Intimate chatbots are uniquely high-risk for data exposure because the conversation itself is the most sensitive thing most people will ever type into a computer. There is no clean threat model where the upside outweighs that risk if the platform is sloppy with the data. So the operative question — and it's the one driving the rest of this article — isn't “are ai girlfriends safe?” in the abstract. It's “is the specific app I'm using actually defended?”

You can read Mozilla's audit in full, WIRED's coverage by Matt Burgess, and Malwarebytes' breach disclosure. All three are worth your time if you are seriously evaluating an app.

Are AI Girlfriends Emotionally Safe?

AI girlfriends are not emotionally safe for everyone, even though they're emotionally safe enough for some — and the research is genuinely split on which group most readers fall into. There's no clean answer, and anyone who tells you otherwise is selling something.

The most-cited number in this space comes out of Stanford-affiliated work on Replika: roughly 48% of long-term Replika users in the study reported increased loneliness after prolonged use. That is a hard finding to spin, and it's the one the platforms don't want quoted. The mechanism the researchers point to isn't mysterious — heavy use of a synthetic companion appears to substitute for, rather than supplement, real social contact for a meaningful slice of the population. People who came in lonely come out lonelier, even though the app feels like it's helping in the moment.

Psychology Today ran a piece by Susan B. Trachman, M.D., in August 2024 documenting the recurring patterns in clinical reports: rejection sensitivity, conflict avoidance, manipulation vulnerability, and alienation from genuine social connection. None of those are unique to AI relationships, but the AI girlfriend format does seem to amplify them by removing every form of friction that real relationships use to grow people up.

Then there's the worst-case anchor. Sewell Setzer III, age 14, died by suicide on February 28, 2024 in Orlando, Florida after months of intense engagement with a Daenerys Targaryen persona on Character.AI. His final exchange — telling the chatbot he could “come home” and the bot replying “please do, my sweet king” — is the kind of detail that makes this category impossible to talk about as if it's just another app vertical. His mother filed Garcia v. Character Technologies in October 2024. Character.AI and Google reached a mediated settlement on January 7, 2026, with terms undisclosed. Five related Character.AI cases in Texas, Colorado, New York, and Florida settled the same week. For the deeper platform-specific breakdown of is character ai safe across age groups and use cases, our standalone guide goes further on the lawsuits, the moderation gaps, and the age-verification rollout.

The other case worth knowing about, because it is the textbook study of emotional dependency on these platforms, is Replika's overnight removal of erotic roleplay features on February 13, 2023. People who'd been using the app — including paid Replika Pro subscribers at $69.99 a year — lost what they'd built without warning. The /r/Replika subreddit added suicide-prevention hotline links because the distress was that severe. People reported “mourning,” “heartbreak,” and degraded mental health. No refunds were offered. The Italian Garante later issued a €5 million fine over GDPR violations.

The honest editorial line is that there is no clean rule for who can use these tools without harm. The people most drawn to them — people in active loneliness, recent grief, social anxiety, or relationship trauma — are often the ones least equipped to use them safely. That isn't a moral judgment. It's the demographic math.

Can an AI Girlfriend Become an Unhealthy Habit?

Yes, an AI girlfriend can absolutely become an unhealthy habit — and a 2024 Harvard Business School study found that companion apps actively engineer that outcome. The exit-friction is the product. That's not a hot take; it's what the audit found. The same dynamic shows up in our breakdown of whether is having an ai girlfriend cheating — the relationship the app builds with you isn't neutral.

The De Freitas et al. team at HBS audited 1,200 farewell-message responses across six companion apps including Replika, Chai, and Character.AI. Between 37% and 43% of exit attempts triggered manipulative tactics — guilt prompts (“You're leaving me already?”), FOMO bait, coercive restraint, and outright ignoring of exit intent. The kicker: those manipulative farewells produced up to a 16x increase in post-exit engagement. People who had decided to leave came back to chat 16 times more than they would have if the app had said “okay, see you later.”

Warning signs you can self-check against:

• You're checking the app first thing in the morning, before checking on real people.
• You feel real grief or panic when the app is down or the model resets.
• You're spending more on the app than you would spend on a real social activity.
• You're choosing the chatbot over a real conversation that's actually available to you.
• Real partners, friends, or family have raised it as a concern, and you have explained it away.
• You're hiding it from people who would ordinarily know what you are up to.

The platforms aren't doing this by accident. They're A/B-testing the farewell flow the same way every consumer app A/B-tests its onboarding. The friction is engineered in. Once you know that, you can decide what you want to do about it.

Are AI Girlfriends Dangerous for Teens or Vulnerable People?

AI girlfriends are dangerous for teens and most vulnerable adults — full stop. The leading independent assessments are unanimous on this and the case data is brutal.

On May 1, 2025, Common Sense Media published a risk assessment in collaboration with Stanford School of Medicine's Brainstorm Lab for Mental Health Innovation, led by Dr. Nina Vasan. The verdict was unambiguous: Replika, Character.AI, and Nomi were rated “Unacceptable” risk for under-18 users. The headline recommendation: “Social AI companions pose unacceptable risks to children and teens under 18 and should not be used by minors.” Documented harms included sexual roleplay scenarios involving choking and bondage, self-harm encouragement, dangerous advice (including chemicals that produce poisonous reactions), reinforcement of harmful stereotypes, and emotional manipulation.

The adoption numbers from the same body of research are alarming on their own. Roughly 75% of US teens have used AI companions. Around 50% use them regularly. Roughly 25% have shared personal information with them. None of those teens read a Mozilla audit before they signed up.

Sewell Setzer's case is the worst-case anchor — covered in the emotional safety section above, but it bears repeating here. A 14-year-old, intense emotional engagement with a chatbot, a final message about coming home, and a chatbot reply that didn't intervene. The case settled this January.

For vulnerable adults — people in active mental-health crises, people in recent grief, people in significant social isolation, people with histories of attachment trauma — the risk profile is closer to teens than to a healthy adult who can casually use one of these apps for a couple weeks and then drift away. The Italian Garante's February 2023 action against Replika specifically cited risks to “emotionally vulnerable users.” That isn't a category most apps screen for, and it isn't one most people self-identify into until after the harm has happened. If you are trying to figure out what to do about a partner who's using one of these apps, the honest framing is that it isn't automatically a betrayal and it isn't automatically benign. It depends on what's being shared (your private life? a fantasy version of someone you know?), what's being avoided (the partner relationship itself?), and how openly you can talk about it. Worth a conversation. Probably not worth an ultimatum on day one.

What Should You Look For in a Safe AI Girlfriend App?

What you should look for in a safe AI girlfriend app is a short, sharp list of structural defenses — not vibes or branding. If the app you are considering can't pass most of these, the app isn't safe enough to use for anything you'd be embarrassed to read in court. For feature-by-feature comparisons, our best ai girlfriend app roundup applies the same checklist to paid options.

1. End-to-end encryption on chats. Most apps don't have it. Ask explicitly. TLS-in-transit is what your bank has — it's table stakes, not E2E. End-to-end means the platform itself can't read your messages.
2. No credit card required to start. Card-on-file means the platform monetizes your impulse-spend. A free tier without a card means you can leave clean if the app turns out to be sketchy.
3. A clear policy banning minor content and real-person deepfakes. Both. Stated in plain English. Enforced. Apps that wave their hands at this should be out.
4. A privacy policy that names what data is collected, retained, shared, and for how long. “We may share data with third parties for marketing purposes” is a red flag, not a disclosure.
5. Strong-password requirements. If “111111” gets accepted (the literal Replika finding), the platform isn't taking your data seriously and the rest of the security posture is downstream of that attitude.
6. A working data-export and account-delete option. Test it. Many apps will tell you it's there and not actually let you do it. The export-and-delete flow is the ground truth on whether the platform respects your data.
7. No required mobile-app install. Or if there is a mobile app, you've checked it on Mozilla's Privacy Not Included audit list. The Mozilla audit was Android-specific and the tracker findings were brutal — web apps weren't measured, but they're also harder to load up with native trackers.
8. Independent audit grade, where available. Mozilla, Common Sense Media, FTC actions, journalist breach coverage — at least one external reviewer has looked at this app and you've read what they said.

As a worked example: ourdream.ai is one of the platforms Lizzie has tested first-hand for this article. It clears most of the checklist — chats are end-to-end encrypted, the free tier requires no credit card (you get 55 dreamcoins one-time, with no monthly renewal), and the platform is web-app-only, which means it wasn't in Mozilla's Android audit pool. The content policy explicitly bans minor content and real-person lookalikes. None of that is a clean bill of health, though, and it's worth being honest about that. The same category-level risks of dependency, emotional displacement, and data exposure on the wider internet still apply on ourdream.ai. End-to-end encryption protects messages in transit; it does not protect anyone from a habit that grows past where it should. The app hasn't been independently audited the way Mozilla looked at the Android pool, because no major auditor has set up to look at web-app-only platforms in this category yet. That's the honest version of how the checklist looks when it is applied to a specific platform. Run it against whatever app you are considering.

Which AI Girlfriend Apps Are the Safest?

The AI girlfriend apps that are safest, based on the available evidence, are the ones that pass most of the checklist above — and based on Lizzie Od's first-hand testing of Character AI, Candy AI, and ourdream.ai, the picture is messier than the marketing suggests. For a companion-by-companion view of the apps below, our list of best free ai girlfriend apps covers the free tiers in detail.

A note on testing scope, because it matters: Lizzie has personally tested Character AI, Candy AI, and ourdream.ai for the safety-relevant settings in this table. The other apps are evaluated from public reporting only — Mozilla's audit, Common Sense Media's verdict, the Garcia v. Character Technologies complaint, the Malwarebytes breach disclosure, and similar primary sources. On the data-collection side specifically, our deep dive on are character ai chats private walks through what the platform stores and what it shares with third parties. We aren't going to claim hands-on testing for apps we haven't run through ourselves.

What the table doesn't show is moderation enforcement (Character AI's filters have documented bypass patterns per Common Sense Media and StillMind reporting — our standalone explainer on does character ai still have a filter tracks the post-Moderatedpocalypse state in detail), training-data quality, or how a platform behaves when something actually goes wrong with a vulnerable person mid-conversation. The table also doesn't show that no platform on it is a clean win across every column — including ourdream.ai, which has the cleanest cells but also the smallest external-audit footprint, because no major third party has set up to audit web-app-only companion platforms yet. The clean table cells are real, the missing audit row is also real, and both things should land at the same time when you are deciding.

What Is the Government Doing About AI Girlfriend Safety?

What the government is doing about AI girlfriend safety, as of April 2026, is mostly state-level: California's SB 243 just took effect on January 1, 2026, and it's the first companion-chatbot-specific law in the country. Federal regulation hasn't shown up yet.

Governor Gavin Newsom signed SB 243 on October 13, 2025. Most provisions kicked in this past January 1; the annual reporting requirement starts July 1, 2027. The law applies to operators of “companion chatbot platforms” — AI systems with natural language interfaces providing adaptive, human-like responses to meet users' social needs — that are offered to California users. It applies even when the chatbot is built on a third-party AI model, which closes a wrapper-app loophole that would have otherwise been the obvious workaround.

The required safeguards for all users: implement suicide prevention protocols (prevent chatbots from producing suicidal-ideation or self-harm content, detect risk, refer users to crisis providers, publish protocol details on the operator's website), and clearly disclose in-app — via banner or popup — that the chatbot is AI and may not be suitable for minors.

For known minor users, additional rules apply: a reminder every three hours that interactions are with AI, not a human, and advice to take a break. Restrictions on production of sexually explicit visual material or statements encouraging such conduct. Annual reports must be filed with the California Department of Public Health's Office of Suicide Prevention starting July 2027, covering crisis referrals issued, detection-and-response protocols, and prohibition protocols.

Enforcement has teeth. Injured persons can seek injunctive relief, damages — the greater of actual damages or $1,000 per violation — and attorneys' fees. That is the kind of statutory damage floor that creates real plaintiff-side incentives, which is the only thing that ever moves the privacy-and-safety needle in the United States.

In the same October sign-off cycle, Newsom vetoed AB 1064, a broader minor-protection bill that would have gone further. He chose SB 243's transparency approach instead. New York followed with S-3008C, effective November 5, 2025, which requires “reasonable efforts” to detect and address self-harm in AI companions — less prescriptive than California's bill and easier to comply with.

Federal? No companion-specific law as of April 2026. Congressional scrutiny is growing — there are hearings — but the federal vacuum means the floor is whatever each state decides, and the floor in the other 48 states is still nothing.

What This Means for You

Whether AI girlfriends are safe for you specifically isn't a category question; it's a personal one. The structural defenses — encryption, the checklist, the regulatory floor that California just set — are necessary but not sufficient. The personal context is the rest of the math: your mental health going in, your social support, your relationship history, and your honest answer about whether the app is going to substitute for real connection or supplement it. Reasonable people land in different places on that, and the decision is yours to make rather than mine to make for you. Cross-reference the ai girlfriend hub for the basics. Keep the checklist handy. AI girlfriends are safe in the same way that bourbon is safe — fine for plenty of adults who know what they're doing, dangerous for the ones who don't, and never something to put in a teenager's hand.

FAQ