Replika
- Rank
- Score
- 134/149
- 30 out of 100
Replika is a generative AI chatbot app released in November 2017 that acts as a personal AI companion. It was created by Eugenia Kuyda while she was working at Luka, a technology company she co-founded, and it is offered on a freemium basis with paid subscriptions.
Is Replika safe?
Replika scores 30 out of 100 and ranks 134 of 149. Its strongest category is Privacy, and its weakest category is Security.
How is Replika scored?
Replika is scored out of 100 on Safety (25%), Transparency (25%), Security (25%), and Privacy (25%). See how we score.
Compare
No problems found in 1 public record. That is not proof.
Safety framework
Average used24.4This outside rating doesn't cover this company, so the average of the companies it covers is used.
Pre-release testing
0Points for each confirmed yes.
- No
Was the model tested for dangerous capabilities, such as biological, chemical or cyber risks?
Company claim0/50No document found - No
Did an outside organisation test the model before release?
Company claim0/50No document found
Safety test results
Average used74.1This outside rating doesn't cover this company, so the average of the companies it covers is used.
Incident record
70This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. AI Incident Database and AIAAIC Repository, last 24 months.
No events
AllegationAI Incident Database (opens in a new tab) · 12 Nov 2026
Protecting children
50Points for each confirmed yes.
- No
Does the model card report child-safety tests or safeguards?
Company claim0/50No document found - Yes
Does the privacy policy set a minimum age, or say the service is not directed at children?
Company claim50/50“You must be at least 18 years old (or the age of majority where you live, if higher) to use the Services.”
replika.com privacy policy (opens in a new tab) · 20 Oct 2026
Model documentation
0Points for each confirmed yes.
- No
Does the model card describe what the model can do?
Company claim0/25No document found - No
Does the model card report test results?
Company claim0/25No document found - No
Does the model card state the model's limitations?
Company claim0/25No document found - No
Does the model card describe safety safeguards?
Company claim0/25No document found
Training-data disclosure
Average used29.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Independent transparency index
Average used40.7This outside rating doesn't cover this company, so the average of the companies it covers is used.
Transparency reports
Average used25This outside rating doesn't cover this company, so the average of the companies it covers is used.
Public safety commitments
0Average of the commitments signed.
- No
Has it signed the EU code of practice for general-purpose AI?
Company claim0/100European Commission (opens in a new tab) · 14 Oct 2026 - No
Did it sign only the safety and security chapter?
Company claim0/50European Commission (opens in a new tab) · 14 Oct 2026 - No
Has it signed the Frontier AI Safety Commitments (Seoul 2024)?
Company claim0/100Frontier AI Safety Commitments (opens in a new tab) · 14 Oct 2026
Security programme and certifications
0Points for each confirmed yes.
- No
Is there a way to report security flaws, such as a bug bounty?
Company claim0/34No document found - No
Does it state it holds a SOC 2 Type II report?
Company claim0/33No document found - No
Does it state it holds ISO 27001 certification?
Company claim0/33No document found
Software vulnerabilities
Not enough dataData breaches
Not enough dataStrong written policies; outside evidence is weaker.
Clear privacy policy
100Points for each confirmed yes.
- Yes
Does the privacy policy say what personal data is collected?
Company claim20/20“Account information. This includes your name, surname, email address, password, and unique identifiers that include country, timezone, type…” MoreLess
“Account information. This includes your name, surname, email address, password, and unique identifiers that include country, timezone, type and ID of the device from which the account operates.”
replika.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say whether your data is used to train AI?
Company claim20/20“This includes collecting and immediately anonymizing user feedback, and small portions of Messages and Content data to train our proprietary…” MoreLess
“This includes collecting and immediately anonymizing user feedback, and small portions of Messages and Content data to train our proprietary safety algorithms, enhance chatbot performance, prevent inappropriate outputs, and ensure compliance with safety standards.”
replika.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say how long data is kept?
Company claim20/20“For the purposes based on the performance of our contract with you: we keep your profile information, memories, diary, interests and prefere…” MoreLess
“For the purposes based on the performance of our contract with you: we keep your profile information, memories, diary, interests and preferences, your Replika’s customization, and items you have purchased for as long as your account exists, and delete them within 60 days after your account is deleted or closed; while your account is open, we keep your conversation history for 24 months for text messages and 12 months for photos, videos and voice messages, the same for all accounts, except media saved to your memories, diary or profile, which we keep for as long as your account exists; if you have never made a purchase and have not used the Services for 12 months, we may delete your account and its data.”
replika.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy say who your data is shared with?
Company claim20/20“We share your personal data with companies and individuals that provide services to us or on our behalf or help us operate the Services or o…” MoreLess
“We share your personal data with companies and individuals that provide services to us or on our behalf or help us operate the Services or our business (such as hosting and infrastructure, information technology, third-party artificial-intelligence models, product analytics, customer support, email delivery, and payment and subscription management).”
replika.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does the privacy policy explain your privacy rights?
Company claim20/20“Depending on where you live, you may have the right to request that we confirm whether we are processing your information, obtain details ab…” MoreLess
“Depending on where you live, you may have the right to request that we confirm whether we are processing your information, obtain details about the processing activities, and obtain a copy of such information, subject to certain exceptions.”
replika.com privacy policy (opens in a new tab) · 20 Oct 2026
Training-data defaults
0100 if training is opt-in only, 50 if you can opt out, 0 if neither.
- No
Is your data used for training only if you opt in?
Company claim0/100replika.com privacy policy (opens in a new tab) · 20 Oct 2026 - No
Can you stop your data being used for training?
Company claim0/50replika.com privacy policy (opens in a new tab) · 20 Oct 2026
Export and delete your data
100Points for each confirmed yes.
- Yes
Can you get a copy of your data?
Company claim50/50“Depending on where you live, you may have the right to request that we confirm whether we are processing your information, obtain details ab…” MoreLess
“Depending on where you live, you may have the right to request that we confirm whether we are processing your information, obtain details about the processing activities, and obtain a copy of such information, subject to certain exceptions.”
replika.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Can you delete your data?
Company claim50/50“If you have shared sensitive information and wish to have it deleted, you can request deletion as described in Section 7 below or by contact…” MoreLess
“If you have shared sensitive information and wish to have it deleted, you can request deletion as described in Section 7 below or by contacting us at privacy@replika.com.”
replika.com privacy policy (opens in a new tab) · 20 Oct 2026
Privacy fines
65.3This check counts only when a source covers the company. With no events it holds the pillar, which is not proof of a clean record. Each recorded event takes points off the pillar, and serious or recent ones count most. Allegation checks, regulator actions and open investigations use half the severity load. EU privacy (GDPR) fines and Irish regulator decisions, last 5 years.
1 event
RegulatorCMS GDPR Enforcement Tracker (opens in a new tab) · 12 Nov 2026Date Event Severity 10 Apr 2025 ETid-261110 Apr 2025 · Medium Medium
Independent privacy ratings
Average used52.9This outside rating doesn't cover this company, so the average of the companies it covers is used.
Risk governance
Average used26.6This outside rating doesn't cover this company, so the average of the companies it covers is used.
Regulator actions
Not enough dataCourt judgments
Not enough dataPrivacy contact and complaints
100Points for each confirmed yes.
- Yes
Is there a privacy contact, such as an email or a data protection officer?
Company claim50/50“If you have any questions, or need any clarification regarding the processing of your personal data, please contact us at my@replika.com.”
replika.com privacy policy (opens in a new tab) · 20 Oct 2026 - Yes
Does it tell you that you can complain to a regulator?
Company claim50/50“Depending on where you reside, such as if you reside in the European Economic Area or United Kingdom, you may have the right to complain to…” MoreLess
“Depending on where you reside, such as if you reside in the European Economic Area or United Kingdom, you may have the right to complain to a data protection regulator where you live or work, or where you feel a violation has occurred.”
replika.com privacy policy (opens in a new tab) · 20 Oct 2026
Score history
Newest first. Only days when the score changed are listed.
2 Nov 2026
Score 30
Method 2 Nov 2026
-2
28 Oct 2026
Score 32
Method 28 Oct 2026, update 2
-2
23 Oct 2026
Score 34
Method 21 Oct 2026
+2
21 Oct 2026
Score 32
Method 21 Oct 2026
-2
20 Oct 2026
Score 34
Method Not recorded
+2
14 Oct 2026
Score 32
Method Not recorded
-