Are AI porn generators private? Leaks and safe use

Every prompt you type into an AI porn generator is a written record of what turns you on. Every image it makes is stored, at least for a while, on someone else's server, usually next to your account, your IP address and your payment history. That is the trade you make for using a cloud generator, and most people never think about it until a breach puts it in the news.

Breaches have now happened often enough to show a pattern. The companies are often small, the storage is often badly secured, and the leaked material is about as sensitive as personal data gets. Some of it has also included images of real people who never agreed to be there.

So are AI porn generators private? Less than their marketing says. This guide covers what has leaked, what generators say they do with your prompts and uploads, where your payment leaves a trail, and the setup that keeps a future leak from landing on you.

Have AI porn generators leaked users' data?

Yes, several times since 2024: prompts tied to email addresses, tens of thousands of generated images, and in one case nearly two million uploaded photos and videos, many of real women.

GenNomis, March 2025

Security researcher Jeremiah Fowler found a database belonging to GenNomis, an image generator run by the South Korean company AI-NOMIS, sitting online with no password and no encryption. In his report for vpnMentor, published March 31, 2025, he counted 93,485 images and .json files totaling 47.8 GB. The .json files logged the prompts people had typed and links to the images they produced. Nearly everything he sampled was explicit adult content.

It was worse than that. Fowler saw AI-generated images of what appeared to be very young people, and images of celebrities depicted as children. There was a "Face Swap" folder, gone by the time he sent his disclosure notice. GenNomis offered text-to-image, face swapping and image-to-video, and ran a marketplace where users could buy and sell images. According to Bitdefender's write-up, which cites Wired's reporting, the site also had an NSFW gallery. Fowler said he saw no personal user data in his limited sample. He got no reply to his notice; the database was locked down, and within days both companies' websites went offline.

Muah.ai, 2024

Muah.ai sold "uncensored" AI companions that could also generate images. In October 2024, 404 Media reported that a hacker had taken a large database of user interactions from the site, which the hacker called "a handful of open-source projects duct-taped together." The prompts were tied to email addresses, and 404 Media said many looked like personal accounts with real names. It also found many prompts attempting to create child sexual abuse scenarios. Have I Been Pwned lists the breach as September 2024, with 1.9 million email addresses exposed along with the prompts used to generate images and users' sexual fetishes.

Secret Desires, November 2025

On November 19, 2025, 404 Media reported that Secret Desires, an AI roleplay and image platform, had left cloud storage containers open with nearly two million photos and videos in them. Many were not AI creations at all: they were ordinary photos of real women that users had uploaded, taken from social media, workplace pages, graduations and vacation selfies, some alongside full names. The platform had offered face swapping, and the generated output put those women into sexual images and videos. Many of them had almost no public presence online.

Chattee Chat and GiMe Chat, 2025

Image leaks are not limited to dedicated generators. In October 2025, Malwarebytes covered research by Cybernews into two AI companion apps whose server had no authentication at all. It exposed 43 million messages and more than 600,000 images and videos from over 400,000 users, plus purchase records, IP addresses and device identifiers.

Note what these have in common. None of them needed a sophisticated attack. Three were storage simply left open, and the Muah.ai hacker described finding weaknesses quickly. If a company cannot keep its storage locked, its promises about how it uses your data matter much less.

Are your images public?

Some generators run community galleries or feeds, and some let users publish or sell what they make. GenNomis had both a gallery and a marketplace. Whether a given image goes public by default depends entirely on the platform and its settings, and it can change after an update.

Before you generate anything, check:

• Whether new images land in a public feed, a "discover" page or your public profile unless you switch that off.
• Whether characters you create are shared with other users, and whether your prompt is shown alongside them.
• Whether shared links to an image are private, or guessable and open to anyone who has them.
• Whether deleting an image from your library removes it from the server, or only from your view.

Even an image that never goes public is a private file only as long as the company's storage holds. GenNomis, Secret Desires and the Chattee apps all had storage that was never meant to be public and ended up open anyway.

Do AI porn generators train on your prompts and uploads?

Often, yes, or at least they reserve the right to. OurDream's privacy policy allows training on your data, while Promptchan says it doesn't train on prompts or images. Take Candy AI's privacy notice (revised October 19, 2026, operator EverAI Limited in Malta), which covers both its chat and image features. It lists the prompts you enter and the output generated in response among the data it handles. It says it may use data to "train and develop our AI models and moderation technologies," and that preparing training datasets may include human review of de-identified interactions. Its moderation and language-model providers "may receive the content of your messages." The notice does not specifically address photos you upload. Our Candy AI review covers the product itself.

That policy is fairly typical, and it tells you three things worth knowing about any generator. Your prompts may be read by a person. They may be passed to outside companies that run moderation or models. And they may become part of a dataset that outlives your account. If a platform does not say clearly whether it trains on your inputs and how to opt out, assume it does and that you can't.

Uploads are the most sensitive input of all. A photo of your own face turns an anonymous account into an identifiable one. A photo of someone else is a much bigger problem, covered below.

Your payment is the strongest link back to you

You can sign up with a throwaway email and a fake name, but a card payment carries your real identity. Candy AI's notice says it keeps account data for three years after your last activity and financial data for ten years from issue, and names payment processors including Emerchantpay, TrustPay, Volt, Coingate and UpGate. In the Chattee leak, purchase records were exposed along with the chats and images. Deleting an account rarely deletes the payment record, because companies are usually required to keep it.

Ways to loosen that link, each with a trade-off:

• App-store billing, where a platform offers it, keeps your card details with Apple or Google instead of the developer, but the store keeps the record.
• Prepaid cards separate the charge from your main account, but the CFPB notes that an unregistered card may carry fewer protections and may not work online.
• Crypto is accepted by some platforms (Candy AI lists a crypto processor), but exchanges where you buy it usually know who you are.

Whatever you choose, look at what the charge will be called on your statement before you pay. Our guide to what AI porn generators cost explains credits and subscriptions, which also decide how many charges end up on that statement.

Never upload a photo of anyone else

This is the line that turns a privacy question into a legal one. Making sexual images of a real person without their consent is illegal in many places, and the law is moving fast. In August 2024, the San Francisco City Attorney sued the operators of 16 "undressing" websites, which let users upload photos of clothed people and pay to generate nude versions; the sites had more than 200 million visits in the first half of 2024. The suit relies on state and federal laws against deepfake pornography, revenge pornography and child pornography. Since then, federal law has added a takedown duty: the FTC explains that under the Take It Down Act, covered platforms must remove nonconsensual intimate images, including AI deepfakes, within 48 hours of a valid request. Our guide to whether AI porn is legal goes through the criminal and civil side in detail. Anything involving minors is illegal everywhere, with no exceptions for AI.

It is also a privacy disaster for everyone involved. The Secret Desires leak shows what happens to uploaded photos: they sit in storage next to the fake images made from them, with names attached, until someone finds them. The woman in the photo is harmed twice. The person who uploaded her has created a record, tied to their account and payment, of doing something that can be a crime. If someone has done this to you, our guide on getting a fake nude removed covers the reporting tools, including StopNCII.

How to use a generator privately

Before you sign up

• Read the privacy policy's sections on training, retention and sharing. If you can't find a company name and a country, treat that as an answer.
• Use a separate email address that has no name in it and is used nowhere else. The Muah.ai leak hurt because prompts were tied to real email addresses.
• Use a unique password from a password manager, and avoid signing in with Google or Apple, which ties the account to your main identity.

While you use it

• Keep real details out of prompts. No names, workplaces, towns or descriptions that point to a real person, including you.
• Don't upload your own face unless you accept that it could be leaked next to everything you generated.
• Check sharing defaults and turn off public feeds, profiles and character sharing.
• Download what you want to keep and delete the rest. Fewer stored images means less to leak.

When you leave

Delete your images and characters, then the account, and if you want confirmation, email the privacy contact in the policy with a deletion request. In California, the CCPA gives you the right to know what a business holds, to have it deleted, to opt out of its sale or sharing and to limit use of sensitive information, which includes your sex life and sexual orientation. Businesses have 45 calendar days to respond, extendable once. In the EU and UK, Article 17 of the GDPR gives a right to erasure "without undue delay." Both have exceptions for records a company must keep, which usually covers payments.

If your data shows up in a breach

Check your address on Have I Been Pwned; sensitive breaches such as Muah.ai are only shown to someone who verifies they own the address. Change the password there and anywhere you reused it. Expect extortion attempts. The FTC's advice on blackmail emails is simple: don't pay anything, delete the message, change the password they mention and report it at ReportFraud.ftc.gov. Scammers often quote a real password from an old breach to look credible; that proves they read a leak, not that they have anything else.

The short version

An AI porn generator stores your fantasies as text and images, often hands them to outside providers, may train on them, and keeps your payment record for years. The breaches so far came from open storage and thin security, not clever hackers. Keep your real identity out of the account and the prompts, never upload a photo of a real person other than yourself, check what is public, and delete what you don't need.