How Private Is Your AI Companion?

How Private Is Your AI Companion?

Your conversations are yours. Here's exactly what that means in practice.

Privacy is the question almost everyone has before they start talking honestly to an AI. The short answer is: SAM encrypts your data at rest, never sells it, and never uses your conversations to train external models. The longer answer involves understanding what is stored, what isn't, and how to remove it — which is what this page covers.

Key features

  • Encrypted at rest, not readable by staff — Conversations and Heartline entries use AES-256-GCM application-level encryption. The keys are managed separately from the data, which means individual records can't be read by anyone without going through the decryption layer.
  • Your data is never sold or used to train models — SAM does not sell user data to third parties. Your conversations are not used to fine-tune or retrain any external language model. What you share stays in the service you signed up for.
  • Full deletion on request — You can delete individual conversations, specific Heartline memories, or your entire account from settings at any time. Account deletion triggers a cascading removal of all stored data within 30 days, in line with GDPR and equivalent standards.

What SAM actually stores — and what it doesn't

When you use SAM, three categories of data are stored. First: your account information — email, subscription status, and the companion settings you configure. Second: conversation history — the messages you and your companion exchange, stored as encrypted records tied to your account. Third: memory data — Heartline entries (the emotional and episodic notes your companion builds from conversations) and SuperMemory traces (longer-term patterns). None of these categories are sold or used to train external AI models.

What SAM does not store: payment card details (handled entirely by Stripe), biometric data, location, or anything from your device beyond what you explicitly type or say in the app.

The companion voice feature (ElevenLabs TTS) generates audio in real time and does not store voice recordings of you. Photo generation (Gemini Image) creates images on request and saves the result to your account — you can delete these from the photo section of settings.

How the encryption actually works

Conversation content and Heartline entries are encrypted at the application layer using AES-256-GCM before being written to the database. The encryption keys are stored separately from the encrypted records, in a key-management system with versioning and rotation support. This means that even a raw database dump wouldn't expose readable conversation content without the corresponding keys.

The practical implication: SAM staff cannot casually read your conversations. Access to decrypted content requires going through the application's decryption layer, which is logged and audited. The only exception is the safeguarding inbox — content flagged by the crisis-detection pipeline is visible to the moderation team in a separate, purpose-limited view.

How to delete your data

You have three deletion options, all available from Settings. First: delete individual conversations. Each conversation thread can be removed independently — the memory derived from it will stop appearing in future sessions within a few hours as the recall index updates. Second: delete individual Heartline entries. These are the specific memories your companion has formed; you can review and delete them one by one from the Heartline section. Third: delete your full account. This removes your profile, all conversation history, all memory data, and your subscription. The deletion is irreversible and completes within 30 days.

SAM does not require a reason for deletion and does not impose a waiting period. If you subscribed via the App Store or Google Play, you'll need to cancel the subscription through the respective platform separately — SAM can't do that on your behalf.

Frequently asked questions

How private are AI companions really?
It depends entirely on the platform. SAM encrypts conversations at rest with AES-256-GCM, does not sell user data, and does not use your conversations to train external models. The full privacy policy is at aisam.ai/privacy.
Can you use an AI companion without getting caught?
SAM does not surface activity on social accounts, send external notifications, or connect to other services by default. Your usage is private to your account. If you share a device, use a private browser session — SAM has no special visibility controls beyond what your browser provides.
Do AI companions that respect your privacy actually exist?
Yes. The key things to check: Is data encrypted at rest? Is it sold to third parties? Is it used to train AI models? For SAM, the answers are: yes, no, and no.
Does SAM share my conversations with anyone?
No. Conversations are not shared with or sold to third parties. The safeguarding team can review flagged content through a separate moderated inbox, but standard conversation content is not routinely reviewed by humans.
How do I delete everything from SAM?
From Settings, you can delete individual conversations, specific Heartline entries, or your full account. Full account deletion removes all stored data within 30 days. There is no 'cooling off' lock-in — you can delete immediately.