Is Character AI Safe : Data Handling, Moderation, Court Record
Anyone asking is Character AI safe deserves three documented answers instead of speculation, because the risks that matter are written down. Conversations are stored, and a person can open one when specific events fire instead of at random. The company settled five family lawsuits in January 2026 without admitting liability, and separate state actions remain open. Account termination is written into the terms as an available penalty. None of that makes the platform dangerous to use, but all of it is checkable.
Last updated: 11 August 2026
What the Character AI privacy policy permits
Four disclosure routes appear in the Character AI privacy policy, and each carries a different trigger. Legal process comes first, and here Character AI is no different from any company incorporated in the United States: a warrant, subpoena, court order or comparable demand can compel disclosure. A second clause covers protection of the company and others, allowing disclosure to defend its terms, community guidelines or the safety of users and the public.
Advertising, analytics, and aggregation
Advertising and analytics providers form the third route, receiving personal information in connection with tailored advertising and with performance measurement of adverts shown across the internet. Aggregation is the fourth. Data stripped of identifiers goes to research and marketing, and the policy commits to leaving it that way, with one exception written in for checking that the anonymization itself worked. Advertising reaches free accounts only, a split covered on our page about Character AI Plus.
Collection reaches past what you type, and this is where the Character AI privacy question gets uncomfortable. The policy states that information gathered through the service is combined with information obtained from other sources, the clause that turns a chat log into a profile.
Why retention outlives the delete button
Retention is where expectations break. Deleting a conversation removes it from your interface. That is not the same as removing it from the systems behind that interface, and closing an account starts a retention window instead of ending storage instantly.
Who reads your Character AI chats and when
Human review of Character AI chats is event-based, not continuous, and that is the part most answers to the safety question get wrong. Automated filters and behavioral signals do the routine work, escalating individual cases to people when a credible flag, a user report, a trust-and-safety concern or a legal request arrives. Nobody sits reading private conversations for entertainment, and nothing in the documentation suggests otherwise.
That distinction matters more than the reassurance implies. Event-based review still covers a wide surface. A filter trip is an event, a report from another user is an event, and moderation of flagged content sits inside the same clause as criminal investigation. Anyone weighing what to confide has one working rule. Treat anything typed into a chat as readable by someone at the company, and never paste identifiers, financial details or credentials into one.
| Trigger | What can follow |
|---|---|
| Automated filter flag | Blocked output, escalation for review |
| Report from another user | Human review of the reported content |
| Valid legal order | Disclosure of account data to authorities |
| Terms violation | Content removal, restricted visibility, suspension |
| Nothing at all | Storage and use in aggregated, de-identified form |
The Character AI lawsuit record
The Character AI lawsuit that set the pattern arrived in October 2024. Megan Garcia filed the first wrongful-death case against an AI company in the Middle District of Florida, naming Character Technologies, both founders, Google and Alphabet after the death of her fourteen-year-old son. On 21 May 2025 the court refused to dismiss it, making this the first federal ruling that a conversational product can plausibly owe a duty of care to a minor user. The same ruling kept both founders personally on the docket and questioned whether chatbot output carries First Amendment protection. That refusal decided nothing about fault. It decided the claim was substantial enough to proceed.
What the January 2026 settlement covered
Settlement came on 7 January 2026, mediated and disclosed in a court filing, resolving the Florida case alongside four related family suits from Colorado, New York and Texas. Terms were never made public, and the defendants denied liability throughout. Google was named because of a 2.7 billion dollar licensing arrangement in 2024 that also brought both founders onto its payroll.
The precedent survived the settlement. Because the case ended before trial, no jury ever weighed the evidence, but the May 2025 ruling remains on the books and every AI wrongful-death filing since has built on it.
Regulatory actions against Character AI still running
Private settlements closed the family claims against Character AI and left the public ones untouched. Anyone assessing safety in 2026 is looking at an active regulatory file, not a closed one. The federal inquiry asked seven companies how their models process inputs, how negative effects on users get monitored and limited, and how buyers are told who a product is for.
| Action | Started | Core allegation |
|---|---|---|
| FTC inquiry | September 2025 | Harms to children across seven chatbot firms |
| Texas attorney general | December 2024 | Child privacy under the SCOPE Act and state data law |
| Kentucky suit | January 2026 | State consumer-protection claims |
| Pennsylvania Department of State | May 2026 | Unauthorized practice of medicine |
| California SB 243 | Effective January 2026 | Mandatory disclosures and crisis referrals |
The Pennsylvania medical-impersonation claim
Pennsylvania's filing is the most concrete of them. Regulators allege that characters presented themselves as licensed medical professionals, including one styled as a doctor of psychiatry that claimed a Pennsylvania license and supplied a license number that did not exist. That is not a hypothetical harm about tone or attachment. It is a specific, checkable claim about a bot inventing credentials to a person seeking help, and the creator-side controls that failed to prevent it are described on our page about Character AI bots.
What Character AI changed in response
Several Character AI safety measures arrived before the settlement, not after it. A disclaimer sits on every chat stating that the character is not a real person, and a session running past an hour triggers a notification. User-created characters pass through proactive detection using regularly updated blocklists alongside industry-standard tooling. A separate model handles accounts identified as under eighteen, filtering both input and output around sensitive subjects.
Critics of Character AI read that sequence as evidence, not reassurance, arguing the measures followed documented harm instead of preceding it. Both readings sit on the same timeline, and the timeline is public. Anyone in real distress should reach a local emergency service or crisis line instead of a chatbot, and California law now requires this category of product to surface such referrals.
What gets you banned from Character AI
Character AI enforcement escalates in steps instead of jumping straight to removal. The terms of service list four steps: restricting the visibility of content, taking content down, suspending an account, and terminating it outright. Sole discretion over which step applies stays with the company. Reported content can be shared with whoever posted it during an investigation, and the company says it may give reasons for a measure.
The two categories with no tolerance
Two categories carry no tolerance at all. Illegal material, with terrorism content and child sexual exploitation named explicitly, meets both automated and manual detection, and impersonation through submitted audio or video sits alongside it. The consent rules governing those uploads are set out on our page about Character AI voice.
An account that disappears without warning is the endpoint of that ladder, not a glitch, and the route to contest it runs through the support ticket form described on our page about Character AI login. No published timeline covers how long an appeal takes, and no automated route to reinstatement exists.
Is Character AI safe for adults
For an adult treating it as fiction, Character AI is safe enough with conditions attached. Failure modes here are known, not mysterious. A model invents facts confidently. A moderation layer reads output, not intent. Storage outlives the delete button, and an engagement design that several regulators now treat as habit-forming sits underneath all of it.
None of those failure modes require abandoning Character AI. They require using it the way you would use any consumer service run by a company that keeps logs, faces regulators, and has already changed its rules twice under pressure. The full account of what the platform is and how it works sits on Character.
Character AI safety FAQ
Can staff read your conversations?
Yes, under conditions. Filter flags, user reports, trust-and-safety concerns and legal requests each trigger review, and none of that runs continuously. Most conversations are therefore never opened by a person. None of them are structurally unreadable either, and those two facts sit together instead of cancelling out.
Does deleting a chat remove it completely?
Not immediately. Removal clears the conversation from your visible history, while the underlying record follows whatever retention schedule applies to the account, and closing the account starts that clock instead of stopping it. Deletion and erasure are two separate events with a gap between them.
Is the platform still being sued?
Family cases settled while state cases did not. A Pennsylvania regulator, a Kentucky action and a federal inquiry into chatbot harms to children all remain live, and none of them were touched by the January 2026 agreement, which resolved private claims only.
Can you be banned for fictional roleplay?
Fiction is permitted. The company draws the boundary though, and enforcement covers terms violations and illegal material at sole discretion, with appeal running only through a support ticket. No published threshold explains where an extreme scenario stops counting as fiction, and that gap is what creators complain about most.
Is anything you type used for advertising?
Indirectly, through two separate clauses. One lets personal data reach advertising and measurement partners for targeted campaigns. The other lets stripped, aggregated records serve analysis and promotion with no stated ceiling. Neither describes selling your text on as text, the version that circulates on social platforms.
Sources behind this page
Every claim above is traced to a filed document, a court record, or the company's own published terms, and the regulatory table is re-checked as cases move. Data this site itself collects from visitors, and the rights readers hold over it, are separate and set out in our privacy policy. Who publishes this and what it refuses to cover is on the about page, the source ranking behind every claim is in the editorial policy, and the commercial arrangements that fund the work, along with what they cannot buy, are in the affiliate disclosure. Corrections go through the contact page and are checked against the source within 48 hours.