The short answer: do not rely on a “private” or “secure” marketing label alone. Read the current privacy policy and help pages, then look for the exact rules on conversation storage, model training, human review, deletion and third-party services.

This is educational information, not legal advice. Policies differ by product, location, age and account type.

1. Find the policy that applies

Start from the provider’s official website or app settings. Look for the Privacy Policy, Terms of Service, Safety Center and data controls. Record the date you checked them. App-store privacy labels can help, but they do not replace the full policy.

2. Check six topics

What is collected?

Check whether the service collects chats, prompts, images, voice recordings, account details, device information, diagnostics and payment data.

Are conversations used to improve models?

Look for whether conversations may be used to train or improve AI systems, whether there is an opt-out and whether it applies to future chats only. Do not assume paying automatically opts you out.

Can people review chats?

Find out whether employees, contractors or service providers may access content for safety, support, moderation or quality review. Check stated exceptions.

How long is information kept?

Deleting a conversation, turning off memory, deleting an account and requesting erasure can be different actions. Look for retention periods and exceptions.

Who else receives information?

Some services rely on third-party AI models, hosting, analytics, payment or support providers. Check what data may be shared and why.

Can you export or delete data?

Locate the actual steps in settings or the help center. If you cannot find them, ask support before sharing sensitive information.

3. Use this five-minute audit

  1. Open the official policy and note its last-updated date.
  2. Search for “conversation”, “training”, “retention”, “delete”, “third party” and “human review”.
  3. Inspect settings for memory, personalization and data controls.
  4. Find account deletion and data-request instructions.
  5. Save the URLs and date checked; recheck after major product changes.

4. Reduce risk

  • Do not share passwords, banking details, identity documents or confidential work files.
  • Use a unique password and enable available security options.
  • Limit memory to details you want saved.
  • Be cautious with intimate images, voice samples and identifying details.
  • Do not assume chats are a permanent or reliable record.

5. If the policy is vague

Ask: “Are my private chats used to train models, and where can I opt out?” Keep the reply and date. If you cannot get a clear answer, share less or consider another service.

Sources and update notes

This guide is general editorial advice. It does not state any specific product’s current features, prices or policies, so it does not cite product sources.

To practise the audit, try it on these official policy pages (links checked 31 October 2026):

General guide, not a hands-on audit of any service. Links checked 31 October 2026.