Is PolyBuzz safe? A privacy, data and billing review for adults (2026)

PolyBuzz is a real, working product with millions of users, not a scam, and there is no publicly reported breach of it as of August 2026. For an adult who reads the billing terms first, it is reasonably safe to use. The risks worth knowing about are not fraud. They are a perpetual license the terms take over anything you upload, a refund clause that says no refunds at all, an arbitration clause that gives up your right to join a class action, and a question about which company actually holds your data that PolyBuzz's own documents do not settle cleanly.

Everything below marked as quoted comes from PolyBuzz's own privacy policy and terms of use, fetched in August 2026. Where we are relying on someone else's reporting or scoring, we say so.

Who owns PolyBuzz?

This is where it gets untidy, and it is the single thing we would want to know before typing anything intimate into the app. PolyBuzz's own privacy policy names the operator as Singularity Mutual Entertainment Culture Media Limited, at Office K, 15/F MG Tower, No. 133 Hoi Bun Road, Kwun Tong, Kowloon, Hong Kong. Meanwhile a number of widely repeated third-party company profiles describe PolyBuzz as developed by Cloud Whale Interactive Technology LLC, a Delaware company.

Those are two different companies in two different legal systems, and we could not reconcile them from public documents. It may be an ordinary parent and subsidiary arrangement, which is common and unremarkable. It still matters to a US buyer, because the jurisdiction that governs your data is the one named in the policy you actually agreed to, and in the document PolyBuzz serves you, that is Hong Kong. If you are the kind of person who checks where a service is incorporated before trusting it with private conversation, check this one yourself rather than trusting a directory listing.

One thing that is not in dispute: the product used to be called Poly.AI and rebranded to PolyBuzz in 2026. If you are searching for older reviews, that is why the name changes.

Does PolyBuzz sell your data?

No, and the policy is unusually direct about it: "We DO NOT sell User Information to any other individual, company, or organization." That is a clearer statement than several rivals manage. The caveat is that not selling is not the same as not sharing. The same policy describes disclosure to third-party advertising networks, with data passed to vendors "in hashed, non-human-readable form."

The mobile apps go further than the website. According to the app store privacy labels, the iOS and Android builds collect data used to track you across other companies' apps and websites for advertising. The web version is the lighter option: reporting on it describes collection largely limited to IP address, browser type and network logs. If you want the smallest footprint, use PolyBuzz in a browser rather than installing the app. That single choice changes what leaves your device more than any setting inside the product.

The full collected list in the policy is long: email, username, uploaded pictures and text, payment records, device identifiers including device ID, IMEI, OAID and MAC address, browser and operator information, advertising identifiers (GAID and IDFA), log data, geolocation and contacts. If seeing advertising identifiers on that list bothers you, it is worth knowing how far that data usually travels, and you can have your personal details pulled from data broker sites separately from anything you do inside a companion app.

Are PolyBuzz chats private?

Partly. PolyBuzz describes a high-privacy model in which staff do not read private conversations, and there is no public evidence contradicting that. But privacy from human employees is a narrower promise than most people hear. Your chats still sit on the operator's servers, are still covered by the license described below, and can still be surfaced for safety review when content is flagged.

The honest way to think about any companion app, this one included, is that everything you type is stored data held by a company you do not control. That is not a knock on PolyBuzz specifically. It is the shape of the whole category, and it is why our guide to AI companion app privacy tells people to decide what they are willing to have on a server before they get attached to a character.

Does PolyBuzz use your chats to train its AI?

For photos and uploads, yes, by its own wording: the consent prompts cover collecting photos "to collect the photos that you wish to upload and display to other users, or train our AI algorithm." For conversational text specifically, the policy does not say plainly either way, which is itself the answer you are getting. An opt-out route exists, but it is not a toggle in settings. You have to send a request with the subject line "Opt-out Request," which is a deliberate amount of friction for something a checkbox could handle.

This vagueness is the main reason PolyBuzz scores badly with independent reviewers. The VerifyWise AI Trust Index gives it a D, 44 out of 100, ranking it 136th of 211 apps assessed, though notably still 8 points above the companion-app category average. That last detail says as much about the category as it does about PolyBuzz.

VerifyWise category	PolyBuzz score	What that means
Training-data use	0 of 4	Nothing meaningful disclosed about what trains the models.
Retention and deletion	0 of 4	No stated period for how long anything is kept.
Third-party sharing	1 of 5	Recipients are described in categories, not named.
Transparency	2 of 4	Partial. Data categories are listed, practices are not.
Data-subject rights	3 of 5	The strongest area. A deletion path does exist.
Sensitive data and children	1 of 2	An 18+ rule is stated and self-declared.
Security and accountability	1 of 3	A named Data Protection Officer, little else.

The two zeros are the ones to weigh. On retention, the policy says only that information is kept "no longer than is necessary for the purposes that are stated herein," with no number attached. In practice that means you cannot find out when, or whether, your conversations are deleted.

What rights does PolyBuzz take over what you upload?

A lot, and this clause is the one most people never read. By using the service you grant PolyBuzz "a permanent, irrevocable, free of charge, perpetual, non-exclusive, sublicensable (multi-tiered) license" to use your content worldwide, covering "reproduction, communication through information networks, adaptation, compilation, modification, translation, making derivatives, performance and display."

Read the two words that do the work: perpetual and irrevocable. Deleting your account does not claw that license back. Sublicensable means it can be passed onward. This is broad even by the standards of a category that writes broad licenses, and it is the specific reason we would not upload a personal photograph here. Comparable wording exists at Candy.ai, which we covered in our review of whether Candy AI is safe, so this is a category habit rather than an outlier.

Can you get a refund from PolyBuzz?

Assume not. The terms state that "any user payment made in accordance with our rates and policies will not be refunded, even if the subscription is subsequently cancelled." There is no stated cooling-off window at all, which is stricter than several competitors. Candy.ai, for comparison, publishes a 24-hour window that voids once you have spent more than 20 tokens. PolyBuzz publishes no window.

Subscriptions also renew by default: a plan "will be automatically renewed unless it is cancelled on or before the last day of the subscription period." Combined with a no-refund clause, that means a renewal you forgot about is money you are unlikely to get back. Cancel the day you decide to stop, not the day it bills.

Two more clauses worth knowing before you pay. Liability is capped: "THE TOTAL LIABILITIES THAT WE SHALL BE RESPONSIBLE FOR HEREUNDER SHALL NOT EXCEED THE TOTAL AMOUNT OF FEES CHARGED BY US." And disputes go to arbitration: "YOU AGREE THAT DISPUTES BETWEEN YOU AND US WILL BE RESOLVED BY BINDING, INDIVIDUAL ARBITRATION AND YOU WAIVE YOUR RIGHT TO PARTICIPATE IN A CLASS ACTION LAWSUIT." Neither is unusual in US consumer software. Both are worth seeing before you agree rather than after something goes wrong.

Is PolyBuzz safe for kids?

No, and PolyBuzz says so itself: "You must have reached 18-year-old to use PolyBuzz and/or our Services." The platform hosts romantic and adult roleplay, and both major app stores rate it 18+. The practical problem is that the age rule is self-declared, so it stops nobody who is willing to enter a different birth year. Parents looking at this app on a teenager's phone should treat the 18+ rating as the real answer and the age gate as decoration.

So is PolyBuzz safe to use?

For an adult, yes, with conditions. Nothing we found suggests fraud or a breach. What we found is a company that discloses less than it should about training and retention, takes a perpetual license over uploads, refuses refunds outright, and identifies itself in its own policy as a Hong Kong entity while directories describe a Delaware one. Those are real trade-offs, not scare stories, and plenty of people will accept them for a product they enjoy.

If you do use it, three things cut most of the exposure: use the browser version rather than the app, never upload a real photograph of yourself or anyone you know, and pay monthly rather than yearly so a forgotten renewal costs you one month instead of twelve. If the training ambiguity or the license wording is what is putting you off, our PolyBuzz alternative comparison lines up the options on price, memory and content policy, including where PolyBuzz is still the better pick.

How PolyBuzz compares on the things that bit people

Question	PolyBuzz	Candy.ai	Aroused
Refund window	None stated. No refunds, even after cancelling.	24 hours, void after 20 tokens used.	Cancel any time; the plan runs to the end of the period.
Auto-renewal	On by default.	On by default.	On by default, cancellable in account settings.
License over your uploads	Perpetual, irrevocable, sublicensable.	Broad, including commercial and marketing use.	You keep your content; we do not license it onward.
Stated operator	Hong Kong entity in its own policy.	EverAI Limited, Malta.	Named in our terms.
Minimum age	18, self-declared.	18, self-declared.	18, self-declared.

Last updated August 2026. PolyBuzz and Candy.ai are trademarks of their respective owners and we are not affiliated with either. We build a competing product, so read this knowing that, and check the clauses yourself before you subscribe to anything.