Is SpicyChat Safe? Privacy, Terms and Age Checks (2026)

The verdict

Usable for adults who keep personal details out of their chats. NextDay AI is an identifiable Canadian company, it documents how to delete your data, and it verifies age with a selfie or ID in several countries and 26 US states. The serious caveat is its terms: SpicyChat says it has the right to use, sell and license the content generated in chats, while not owning them. Its own security page also lists three known issues it has not fixed.

What SpicyChat AI's privacy policy says

SpicyChat AI privacy facts
Sells your data?	While SpicyChat.AI has the right to and will use, sell, license the content generated through chats for the proper working of the Service, promotion and this License, SpicyChat.AI does NOT own the said Chats and Generations.spicychat.ai, checked October 3, 2026
Trains on your chats?	We may use Your information for other purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns and to evaluate and improve our Service, products, services, marketing and your experience.spicychat.ai, checked October 3, 2026
Can you delete your data?	You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.spicychat.ai, checked October 3, 2026
How long data is kept	The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy.spicychat.ai, checked October 3, 2026
Who runs it	NextDay AI Incorporated (Montreal, Quebec, Canada, with subsidiaries NextDay AI USA Inc (Delaware, USA) and NextDay AI EU Ltd (Cyprus))spicychat.ai, checked October 3, 2026
Age check	All users must be at least 18 years old.docs.spicychat.ai, checked October 3, 2026
Content policy	Indulge in uncensored roleplay with our AI chatbots. Explore your fantasies with our NSFW characters, designed for adults 18+.spicychat.ai, checked October 3, 2026

What the app showed at sign-up and in chat

Checked September 25, 2026, in SpicyChat's Android app, version 4.3.0, downloaded from spicychat.ai (it is not on Google Play), with a free account. By CompanionHunt Research.

Finding the real app: Searching Google Play for SpicyChat led to "Spicy Chat - Ignite the Spark", an unrelated app whose developer is listed as Minquan County Runyou Building Materials Co., Ltd. SpicyChat is not on Google Play; the real Android app is a download from spicychat.ai.
Sign-up and age check: Connecting through a US VPN, the age check was one tick box, "I confirm that I am 18 year or older", beside a tick box for the terms, on the username screen after Google sign-in. The app asked for no date of birth and no ID. SpicyChat's help pages describe a selfie or ID check for some countries and US states; none was asked for here.
Community Guidelines agreement: Before the first chat, the app required ticking a Community Guidelines agreement that starts: "No content involving illegal subjects such as incest, underage individuals, or any illegal activity."
Safe Search default: On the new account, Safe Search was switched on by default in the profile tab.
Deleting the account: "Remove Account" is in the app's profile menu, so an account can be deleted from inside the app.

Two ticked boxes: I confirm that I am 18 year or older, and agreement to the Terms of Services and Privacy Policy. — The age check seen with a US VPN.

Community Guidelines Agreement sheet with a tick box and a Start Chatting button. — The guidelines agreement before the first chat.

Remove Account, and Safe Search on by default.

One chat, one character, one day, connecting through a US VPN. The app does not show how long a character card is. Screenshots are cropped to the part of the screen described. Source: SpicyChat's Android download page.

Incidents, fines and lawsuits

August 27, 2025: Apple removed the SpicyChat iOS app from the App Store, saying it did not comply with its guidelines; installed copies stopped working on September 25, 2025. docs.spicychat.ai

Who runs SpicyChat

The terms name NextDay AI Incorporated, based in Montreal, Quebec, with subsidiaries NextDay AI USA Inc in Delaware and NextDay AI EU Ltd in Cyprus. The same company runs GirlfriendGPT. Trustpilot lists SpicyChat with an address in Anguilla on an unclaimed profile, which is a Trustpilot listing detail rather than the company's own statement.

What SpicyChat can do with your chats

This is the clause to read. SpicyChat's terms say it has the right to, and will, use, sell and license the content generated through chats, for the working of the service and for promotion, while stating that it does not own those chats. We record that as the policy allowing sale of chat content.

The privacy policy does not say directly whether chats train AI models; it lists evaluating and improving the service among the uses of your information, which we record as unclear. Personal data is kept for as long as necessary for the purposes in the policy, with no fixed period.

Deleting your data

The privacy policy gives you the right to delete, or ask SpicyChat to help delete, the personal data it has collected. Because payments go directly to SpicyChat, cancel your plan in your account before deleting it.

Known issues SpicyChat lists itself

SpicyChat's security and vulnerability reporting page lists three known issues that are out of scope for its bug bounty because they are already known: uploaded images keep their original metadata, which can include location, a deleted image can remain reachable at its direct address for a time, and logging out does not end the session on the server.

None of these is a breach, and it is to SpicyChat's credit that they are published. In practice they mean: strip location data from any image before uploading, do not rely on deletion being instant, and change your password if you lose a device.

Age checks and the App Store

All users must be at least 18. In France, the UK, Italy, Australia and 26 US states, adult content only unlocks after a video selfie, or an ID check if the selfie fails, handled by third-party verification partners. Elsewhere age is self-declared. Apple removed SpicyChat's iOS app on August 27, 2025, saying it did not comply with its guidelines, which is why iPhone users now use the website.

How to use SpicyChat more safely

Use an email address you do not use elsewhere, keep real names, workplaces and photos of real people out of chats and characters, and remove location data from any image before uploading it. Remember that published characters are public, and that under the terms SpicyChat may reuse what the chats generate.

If you verify your age, the check is done by a third-party partner through a video selfie, with an ID scan only as a fallback. Read the partner's notice on the verification screen to see how long it keeps the selfie.

Frequently asked questions

Is SpicyChat safe to use?

For adults who keep identifying details out of chats, it is usable. Its terms let it use, sell and license chat content, and it sets no fixed retention period, so treat chats as reusable by the company.

Does SpicyChat sell your chats?

Its terms say it has the right to, and will, use, sell and license the content generated through chats, while not owning them.

Can you delete your SpicyChat data?

Yes. The privacy policy gives you the right to delete, or ask SpicyChat to help delete, your personal data. Cancel any plan first.

Does SpicyChat verify age?

In France, the UK, Italy, Australia and 26 US states, adult content requires a video selfie or ID check. Elsewhere users confirm they are 18.

Why is SpicyChat not on the App Store?

Apple removed the iOS app on August 27, 2025, saying it did not comply with its guidelines. SpicyChat now points iPhone users to its website.

Has SpicyChat had a data breach?

We found no primary source for one. SpicyChat's own security page lists three known, unfixed issues, described on this page.

Is SpicyChat safe? Privacy, age checks and what its terms allow 18+