26official sources checked for this route
37public review signals categorized
2026-08-09latest source date in this view
Labeledpaid hands-on status and affiliate disclosure

Photo upload privacy checklist

Before uploading a photo to an AI companion app, check what is hard to reverse.

A photo upload is not just a feature choice. It can touch privacy, media costs, account deletion, support access, moderation, and refund limits. Check the data path before sharing selfies or private images.

Some links may be affiliate links. Scores do not depend on commission rate.

60-second rule

If you would regret losing control of the image, read the deletion path first.

Do not start with how attractive the app looks. Start with what the app may collect, store, process, retain, delete, or route through support.

First checkUploaded photos and generated media may be treated differently from ordinary account data.
Second checkSubscription cancellation, account deletion, and data deletion are separate actions.
Third checkPayment, safety, legal, fraud, support, and moderation records may have retention exceptions.
Testing statusBased on linked official pricing, help, terms, and privacy pages, plus public signals. Paid hands-on test: not completed yet.

Before upload

A private image creates three checks at once.

You are checking privacy, reversibility, and real cost at the same time: what is stored, what can be deleted, and whether image or media features use credits.

Fast verdict

  • Best first actionFind the official privacy and deletion wording before uploading.
  • Do not assumeDeleting the app deletes photos, account data, billing, and chat history.
  • Cost linkImage-heavy use can also create token, coin, credit, or media-cost pressure.
  • Affiliate policyScores and page order do not depend on commission rate.

Plain rule

Treat photo uploads as a one-way door until the app proves otherwise. The safer decision is to read the current policy, confirm the deletion path, and test with non-sensitive content first.

Sensitivity ladder

Not every upload carries the same risk.

Use this as a practical filter before uploading. The more identifiable the content is, the more you should care about deletion, retention, and support routes.

Low sensitivityA generic avatar, non-identifying image, or test upload.

Still verify deletion and media-cost rules before repeating the behavior.

Medium sensitivityA selfie, recognizable room, voice clip, personal routine, or emotionally private context.

Read privacy, support, retention, and deletion wording first.

High sensitivityIntimate photos, documents, addresses, workplace material, private conversations, or anything you could not comfortably lose control of.

Do not upload unless the policy and deletion path are clear enough for your risk tolerance.

Red flags

Pause before uploading when these show up.

No visible deletion pathIf you cannot find account or data deletion before paying, treat photo uploads as a manual check.
Media costs are unclearIf images, voice, video, or custom media use credits, the privacy decision and cost decision are connected.
App deletion is presented as enoughUninstalling an app should not be treated as subscription cancellation, account closure, or data deletion.
Only marketing pages are easy to findIf pricing pages are clear but privacy, refund, and deletion pages are buried, slow down before uploading.

App-by-app route

Where this check connects to each app.

These are not privacy endorsements. They are the next pages to read before paying or uploading photos.

Candy AI

Candy AI photo-upload check

Visual-first use can involve uploaded images, generated media, tokens, payment records, and moderation or support systems.

Deletion path: Official privacy notice says users may request deletion of personal data; account data is generally retained for a period after account closure unless deletion is requested, while financial/transactional data may be retained longer for legal obligations.

Privacy note: Official privacy notice lists account, content, payment, token-balance, moderation, and retention categories. Review it before uploading sensitive images or personal details.

Last checked: 2026-07-15 official subscriptions page rechecked; paid hands-on test: not completed yet

Read Candy AI checklist

Nomi

Nomi photo-upload check

Memory-first use can mean more personal context over time, so review deletion and account settings before sharing private details.

Deletion path: Official privacy policy says account deletion through Account Settings deletes personal information within about 28 days after confirmation, subject to applicable limits and archived communications.

Privacy note: Memory-first use can involve sensitive context. Review the terms and privacy policy before entering private details or media.

Last checked: 2026-07-15 homepage and US App Store pricing rechecked; policy sources checked through 2026-06-30; paid hands-on test: not completed yet

Read Nomi checklist

Kindroid

Kindroid photo-upload check

Customization and memory can be useful, but confirm the current legal/privacy route and in-app deletion controls before uploading private content.

Deletion path: Official legal/privacy page was checked for privacy-rights and disclosure categories. The exact in-app account deletion or data request route still needs product or support-path confirmation before stronger claims are used.

Privacy note: Official legal/privacy page describes personal data categories, service providers, analytics providers, privacy rights, and account termination language. Review the current legal page and in-app settings before sharing sensitive details.

Last checked: 2026-07-15 official subscriptions pricing refreshed; legal/privacy source checked 2026-07-03; paid hands-on test: not completed yet

Read Kindroid checklist

Replika

Replika photo-upload check

Mainstream app-store billing and account deletion routes make Replika useful as a baseline, but photo and sensitive-data cautions still need a policy check.

Deletion path: Official privacy policy says users can delete their account in account settings and request deletion of personal data, including sensitive information handling described in the policy.

Privacy note: Official privacy policy says users are strongly encouraged not to share special categories of sensitive personal data and describes deletion request rights and provider deletion instructions.

Last checked: 2026-07-03 official help, terms, and privacy sources checked; paid hands-on test: not completed yet

Read Replika checklist

HeyGF

HeyGF photo-upload check

Media-heavy use should be checked for image handling, message history, deletion route, annual billing, and refund wording.

Deletion path: Official privacy policy says users may request access, correction, or deletion of personal data through the stated contact route, subject to applicable limits.

Privacy note: Official privacy policy lists account, payment, messages, AI responses, images/media, preferences, device, usage, and log data. Review training, retention, and opt-out/account-setting language before uploading photos or private details.

Last checked: 2026-07-15 official homepage and About pricing refreshed; terms/privacy checked 2026-07-01; paid hands-on test: not completed yet

Read HeyGF checklist

Final checklist

10 checks before uploading a photo.

Official source mix

Privacy, content, and deletion references used here.

Source links are for verification. Always check the current official page and checkout route before paying or uploading sensitive media.

Candy AI - Official homepage

Candy AI homepage

Plan structure, tokens, media features, top-up mentions, trial wording, and billing-descriptor FAQ were visible. Use the newer subscriptions page reference for numeric plan prices.

Checked: 2026-06-29 - Status: Public page checked

Open source

Candy AI - Official legal page

Candy AI legal information

Public legal page found. Refund, cancellation, and deletion details still need closer help-center or checkout review.

Checked: 2026-06-29 - Status: Public page checked

Open source

Nomi - Official privacy policy

Nomi Privacy Policy

Current homepage links Privacy Policy at /privacy-policy/. Official privacy policy says account deletion through Account Settings deletes personal information within about 28 days after confirmation, subject to limits.

Checked: 2026-06-30 - Status: Public page checked

Open source

Candy AI - Official privacy/deletion page

Candy AI official privacy/deletion page

Official privacy notice describes account/content/payment data, retention periods, deletion requests, and longer retention for financial/transactional data where legally required.

Checked: 2026-06-30 - Status: Public page checked

Open source

Replika - Official privacy/deletion page

Replika official privacy/deletion page

Official privacy policy describes account deletion in account settings, deletion requests, sensitive-information cautions, and provider deletion instructions.

Checked: 2026-06-30 - Status: Public page checked

Open source

HeyGF - Official pricing page

HeyGF official pricing page

Official pricing page showed Casual, Closer, and Exclusive tiers with annual-style monthly-equivalent pricing, yearly coin allowances, and media-feature claims. Standalone monthly checkout, exact billed total, taxes, and coin consumption still need verification.

Checked: 2026-07-01 - Status: Public page checked

Open source

HeyGF - Official pricing and free-tier page

HeyGF official About page

Official About page lists a free basic-conversation tier, Casual at $9.99/month with 150 coins, Closer at $19.99 with 350 coins, Exclusive at $39.99 with 800 coins, unlimited messaging on paid plans, AI photos/videos, and discounted annual plans. Checkout still controls final totals, taxes, region, and coin use.

Checked: 2026-07-15 - Status: Public page checked

Open source

HeyGF - Official homepage

HeyGF official free-start homepage

Official homepage says basic conversations are free with no credit card required, while custom photos, videos, and enhanced intimate chat are premium subscription features.

Checked: 2026-07-15 - Status: Public page checked

Open source

HeyGF - Official privacy/deletion page

HeyGF official privacy/deletion page

Official privacy page describes collection of account/profile/payment information, messages, AI responses, images/media, preferences, device/log/usage data, conversation data use for model improvement, user controls, retention, sharing, and deletion request rights.

Checked: 2026-07-01 - Status: Public page checked

Open source

HeyGF - Official terms page

HeyGF official terms page

Official terms page describes auto-renewing subscriptions, account-settings cancellation, access until the billing period ends, no credits for partial subscription periods, one-time coin/custom-media purchase limits, and discretionary exceptional refunds.

Checked: 2026-07-01 - Status: Public page checked

Open source

Next checks

Use the next page based on your main concern.

Browse this cluster

Keep the check connected.

A single page rarely covers the whole decision. Move through the related guide, tool, comparison, and signal routes before opening checkout.

Next checks

Do not stop at one page.

The real risk usually sits across price, tokens, cancellation, refund wording, privacy, and public signals. Use the next check that matches what still feels uncertain.

PrivacyDeleteLimitsCheck