AI and your data

A search box never invited this. You typed three or four words into it, guardedly, because you knew you were typing into a machine. A chat assistant asks for the whole story, and people give it: the health worry you have not raised with a doctor, the argument with your mother that is now in its third week, the paragraph explaining that your daughter has been struggling since the move — with her name in it, and her school, because the tool asked for context and context is what makes the answer good.

What turns that into a real objection rather than a general unease is that the format is doing the persuading. It writes to you in the second person. It asks a follow-up question. It does not react, does not judge, does not tell anyone else, and there is nobody else in the room. Every signal on the surface says private conversation. Underneath, each message is a network request that leaves your house, arrives at a company's servers with an account attached, and lands in a system built to keep records rather than to forget them.

You do not have to believe anyone is acting in bad faith to think that is a poor trade. The gap between what the thing feels like and what the thing is, is the entire objection, and no statement of intent closes it. A company can be run by careful people and still hold years of your family's most candid writing on machines you will never see, under terms it may rewrite, for reasons it will describe later.

What you type usually leaves your device and is kept for a while. The service may need it for the active conversation, safety checks, support, and backups. The exact time varies by company and plan.

Many consumer plans may use submitted content to improve future models unless you turn that setting off. Look in the account's privacy or data settings for language about improving the model or sharing content.

Deleting a chat often removes it from your view and the company's active records. It may not remove separate copies in logs, backups, or a completed training run.

Free plans often offer less protective terms than paid, school, or workplace plans. The same-looking service can sit on a different contract, and those terms can change.

“We do not sell your data” answers only one question. It does not say how long data is kept, who can open a conversation, which service providers receive it, or whether it is used for training. Check each promise separately.

“We do not train on your data” says nothing about storage. “Your data is encrypted” describes how it travels and sits on a disk, not who can read it when the service uses it. “Anonymized” may remove a name while leaving sensitive details in the text.

People may also review submitted content for abuse, safety, quality, or support. Engineers, authorities, or an intruder may sometimes reach it too. A sensible working assumption is that somebody could read what your family types.

Assume anything typed could be read by a person. Not because someone is watching your family in particular, but because human review is an ordinary part of running these services, because accounts are breached, and because records get requested. The usable version is a test you can run in two seconds before you press send: if this appeared in front of a stranger at that company with your name attached, would that be survivable? Almost everything a family types passes easily. The few that do not are exactly the ones worth rewriting before they go.

Then use the account settings to ask for deletion, and keep the confirmation. In the privacy or data section, export a copy of what is held first — that tells you what there is — then delete the conversations, and delete the account itself if you are finished with the service. Where the only route is a written request, send it in writing and save the reply. Data-protection law in some countries gives people a right to a copy and a right to deletion, and it is worth finding out whether yours does; even where no such right applies, a dated request and a dated answer is a record you did not have before, and a company that will not put an answer in writing has told you something.

None of this requires you to allow these tools at all. If the answer in your house is no, the habits still earn their keep, because your child will meet these tools at school, on a friend's phone, and inside apps that do not announce what is underneath them — and cropping the picture, choosing the school account, and knowing that a switch exists to look for are habits that travel to whatever they meet next.

Whether deletion reaches derived data is the largest unanswered question here. You can usually get a conversation off your screen, and often out of a company's records. Whether the influence of that text can be removed from a model that already learned from it is not something a company can demonstrate to you, and in some cases not something it can establish for itself. Anyone who tells you your words are definitely gone, or definitely still in there, is claiming more than is known.

What happens to conversations already used for training is open in the same way. Turning a switch off changes what happens next; it does not reach backwards into a model that has already been trained. There is no established mechanism for withdrawing text after the fact, no way for you to audit whether one was applied, and no outside party positioned to check on your behalf. The switch is a valve on the future, not on the past, and it is worth knowing that before you feel finished.

Whether a child's data can be meaningfully withdrawn later is the one with the longest tail. A thirteen-year-old accepting terms has no way to know what those terms will turn out to have covered, and the person who might want that decision undone does not exist yet — the adult they become. If, at twenty-five, they want the record of their adolescence withdrawn, every question above is still unanswered, only now it concerns a person who was a child when the record started. Nobody has a good answer to this, and very few are being asked it.

So a parent who reads all of this and concludes that the terms are not good enough has drawn a legitimate conclusion. Keeping your family out of these tools is not a failure to understand them. It is a judgment about an exchange in which the other side will not tell you what it is holding, how long it is holding it, or whether it is able to let go — and declining an exchange on those terms is an ordinary, defensible thing to do. That reading of an unfinished picture is as sound as any other on offer, and it is yours to make.