What AI assistants do with your messages

The ones with no policy are three different things

Some have no site at all. Some publish nothing at any address a person would try. A few publish a policy that only a person can open, because the page refuses anything automated; those were read by hand and are counted as published.

The training question has four answers, not two

Orchid and Wis.ai draw a distinction the rest do not: a model trained on your data for you, and not a shared model anyone else uses. And 33 give a qualified answer worth reading twice. Notis says “Where feasible, we instruct providers not to use your data to train their models”, which is a request to third parties rather than a commitment about itself, conditioned on feasibility. Martin says its app does not use “google user data” for training, which is a statement about one integration rather than about your conversations. Catch says its AI vendors are contractually prohibited from training on your data, while also saying it uses your data to improve the experience. None of these are the same as “we do not train on your conversations”, and all three read like it at a glance.

Two policies are near-identical

Boba and Wajo describe their use of personal information in nearly the same words, including the same phrasing about developing and fine-tuning models and the same sentence about users providing information about others. That pattern suggests a shared template rather than two documents written to describe two products, which is worth knowing before treating either as a considered statement of what the product actually does.

Some policies predate the products they govern

The oldest dated policies here are Zeme’s, last revised 2023-10-04 and Martin’s, last revised 2024-09-09. A further 8 of 79 state no date at all, so there is no way to tell whether what you are reading describes the product you are about to use.

6 make it a setting

Arlo, Dunnit, Instinct, Muse, Poke, Shuffle say your conversations train their models unless you switch that off. Poke’s wording: data from users who select Maximum Privacy will not be used for model training. A setting is more honest than silence.

The people who never signed up

This is the question the category is built to avoid. A group agent reads the messages of everyone in the thread, and an agent that texts your friends processes the data of people who never saw any terms. 13 of 79 policies acknowledge this at all. Jarvie is unusually direct about it: “In a group, Jarvie processes the thread’s messages to respond, and its replies are visible to everyone.” Most simply do not mention that anyone other than the account holder exists.

Almost nobody names who processes your messages

Only 40 of 79 policies name the model providers your conversations are sent to. Slashy names 10. Vellum names 8. Airtap names 6. The rest refer to “third-party AI providers” without saying which, which means you cannot check those companies’ terms even if you want to.