What AI chat tools do with your conversations, the settings that control training and retention, what not to share, workplace rules and your UK data protection rights.
AI chat assistants are only useful if you tell them things, but what you type may be stored, reviewed by people, or used to improve future models, depending on the provider and your settings. A few minutes checking those settings, and a simple rule about what you share, gives you much more control.
What happens to your conversations?
Depending on the service, your chats may be:
- stored in your account history, sometimes indefinitely until you delete them;
- used to train or improve models, unless you opt out (consumer plans) or your organisation's contract excludes it (business plans);
- reviewed by staff or contractors for safety and quality, often in de-identified form;
- kept for a period after deletion for legal or safety reasons.
Each provider's privacy policy and settings explain its approach. They change, so check them periodically.
Settings to check: step by step
- Training: find the setting for whether your data is used to improve models, often under Settings > Data controls or Privacy, and turn it off if you prefer.
- Chat history: decide whether to keep history. Some tools offer temporary or incognito chats that aren't saved to your history.
- Memory: some assistants remember facts about you across chats. Review what is stored and delete anything you don't want kept.
- Connected apps: if you've linked email, calendars, cloud storage or other apps, review what each can access and disconnect what you don't use.
- Sharing links: shared chat links can sometimes be seen by anyone with the link, and in some past cases have been indexed by search engines. Delete shared links you no longer need.
- Account security: use a strong, unique password and two-step verification.
What not to share?
A simple rule: don't type anything into a consumer AI tool that you wouldn't be comfortable seeing in a data breach. In particular:
- passwords, PINs, security codes or full card numbers;
- other people's personal information without good reason;
- detailed medical, financial or legal information you wouldn't want stored;
- confidential work information, customer data, or unpublished business plans.
If you need help with a sensitive document, remove names and identifying details first.
At work
- Follow your employer's AI policy. Many organisations allow only approved tools with business contracts.
- Don't use personal accounts for work data. Business plans usually offer stronger data commitments and admin controls.
- If you handle personal data, using AI tools is still covered by UK GDPR. Organisations should assess the risks, which the ICO's guidance on AI explains.
Your rights under UK data protection law
If a provider processes your personal data, UK GDPR gives you rights, including to access a copy of your data (a subject access request), to have it corrected, and in some cases to have it erased or to object to its use. Contact the provider's privacy team first. If you are unhappy with the response, you can complain to the Information Commissioner's Office.
Children and AI tools
Many AI services set minimum ages in their terms. If children use them, review settings together, explain what not to share, and use parental controls on devices.
Images, voice and files
Photos can contain location data and other people's faces; voice recordings and uploaded documents can carry a lot of personal information. Check the settings for these too, and remove metadata from photos if you are concerned.
Frequently asked questions
Does deleting a chat remove it completely?
Not always immediately. Providers may keep data for a period after deletion. Their privacy policy explains how long.
Is it safe to use AI for health questions?
It can help you understand information, but it is not a substitute for a doctor or pharmacist. Avoid sharing identifiable health details unnecessarily.
Sources and further reading
- ICO: Guidance on AI and data protection
- ICO: Your right of access
- NCSC: AI and cyber security, what you need to know
Facts checked on 20 October 2026. Spotted an error? Tell us and we will correct it.