Is PolyBuzz safe? Its FAQ and its terms give different answers

The Morse teamPublished October 27, 20267 min read

As of October 2026, PolyBuzz is safe only for chats you'd be comfortable with the company reading, because its terms let PolyBuzz "access and use the contents you … upload for purposes including but not limited to product analysis," while its FAQ says "neither the creators nor Poly have access to the chat content." Which company "Poly" means depends on where you chat: a Hong Kong company runs the website, and a Delaware company runs the iPhone and Android apps, each under its own privacy policy.

To write this, we set PolyBuzz's documents against each other on October 22, 2026: the website's privacy policy and terms, the privacy policy and terms the apps link to, the FAQ, the membership, Coins, and Opals pages, the Google Play listing and its data safety label, and Apple's App Store records. Google's own AI answer to "can polybuzz see your chats" cited the FAQ that day, not the terms.

Is PolyBuzz run by a Hong Kong company or a Delaware one?

Both. The website's privacy policy says polybuzz.ai "is operated by Singularity Mutual Entertainment Culture Media Limited in Hong Kong." The policy the apps link to names Cloud Whale Interactive Technology LLC in Wilmington, Delaware, and the Google Play listing names the same Delaware company as the developer. Neither policy says how the two companies are related.

Someone who chats on polybuzz.ai at a desk and in the Android app on a phone has agreed to both policies, with two different companies.

Can PolyBuzz staff read your chats?

The FAQ says no, and the terms keep the right to. The FAQ answers "Are PolyBuzz chats private?" with "Yes, PolyBuzz chats are completely private." Section VII of the terms says you "authorize us to reasonably access and use the contents you … upload." Section XI counts "all texts, images, data, information, and other contents" you upload, and takes "a permanent, irrevocable, free of charge, perpetual, non-exclusive, sublicensable (multi-tiered) license" to use them "in any analysis of our Services."

The privacy policy lists "uploaded pictures or input text" among what PolyBuzz collects, and says it discloses data "in response to court orders and subpoenas." The terms say breaking the rules "will be recorded by our device at back-end office and may be submitted to the relevant government authorities as evidence." The FAQ says other users can't read your chats "unless you explicitly share your conversations." For how ChatGPT, Claude, Gemini, Grok, and Meta AI answer the same question, see are AI chats private, and for how chats reach a courtroom, can AI chats be subpoenaed.

Does PolyBuzz use your location and photos to train its AI?

Yes, by its own policy. When it asks for permissions, the privacy policy gives the purpose of photo access as "to collect the photos that you wish to upload and display to other users, or train our AI algorithm (photos will be uploaded to our back-end server)." It gives the purpose of precise geolocation, in full, as "to train our AI algorithm." The terms add that "the AI language model in Web Services may evolve based on user inputs" (terms).

Neither policy names a training opt-out. The nearest thing is a general line saying you can withdraw "certain consent" in the Settings menu, and the policy says that withdrawing doesn't affect data already collected.

Why does PolyBuzz ask for your contacts?

So you can see which of your contacts use PolyBuzz, according to the privacy policy, which lists "your Contacts" next to your email, username, payment records, and "precise geolocation information." From your device it also takes the device ID, IMEI, MAC address, IP address, and advertising IDs. Both policies list, among the uses of your information, sharing "with third parties (including the Chat-GPT platform) that help us deliver effective functionality," without saying what is sent (app policy).

Location also feeds ads. The Android app's data safety label says it shares approximate and precise location with other companies for "Advertising or marketing," and collects app interactions, user-generated content, photos, voice recordings, and purchase history. Apple's listing, in an archived copy from November 2025, said identifiers "may be used to track you across apps and websites owned by other companies." PolyBuzz says "We DO NOT sell User Information," and lets you turn off ad "sharing," as California law defines it, under data sharing in settings (privacy policy).

Why is PolyBuzz not on the App Store?

Neither PolyBuzz nor Apple has said, on any page we read. On October 22, 2026, Apple's lookup for PolyBuzz's app ID returned nothing in the US, UK, Japan, South Korea, Germany, Brazil, the Philippines, or Indonesia, and searching the US store for "PolyBuzz" brought up other companion apps instead. PolyBuzz's FAQ still says "Head over to Google Play or the App Store." On Android, the app was listed, updated October 19, 2026, with more than 50 million downloads, and the website still worked in a browser.

Does PolyBuzz have a Teen Mode?

Its FAQ says so, and its privacy policy says teens can't use PolyBuzz at all. The FAQ says PolyBuzz has "a dedicated Teen Mode specifically for children." The privacy policy says you must be 18 and that users under 18 "will be denied access to our services." Everyone, guests included, types in a birthdate on first use, and a guest can't change it afterward. Google Play rates the app Mature 17+, and Apple's archived listing rated it 18+.

In the UK, PolyBuzz runs age checks through Ondato and Yoti under the Online Safety Act, and the policy says it "does not store your government-issued identification or verification documents," only whether you passed.

What do PolyBuzz Coins, Opals, and Poins cost?

Three of the four ways money moves through PolyBuzz, though its FAQ says the app "is accessible at no cost." The free tier carries ads: the membership page lists "Ad-free" among Premium and Ultimate perks, and on October 22, 2026, it offered a first week for $14.90 beside a countdown clock. Coins pay for extra model rounds, regenerated replies, and voice time; the Coins page sold 1,000 for $2.49 and 20,000 for $19.90 under a "Today Only" banner. The Opals page sold packs from $5.90 to $199.99.

Poins go the other way, to creators. The terms give a character's creator one Poin for every two Coins other users spend on it, and let creators with at least 100,000 Poins exchange up to 80% of them for rewards at a rate PolyBuzz can change "without an expressive notice" (its wording).

Does deleting your PolyBuzz account erase your chats?

Not right away, and not everywhere. You delete under Setting, then Account, then Delete (privacy policy), but the terms allow it only when the account has no dispute, nothing is owed, and any premium service you bought has expired. Backup copies go "when the backup system is updated or upgraded." Anonymized data derived from yours can be kept "for any purpose (commercial and non-commercial) as we deem fit and proper." The terms also say "ownership of your Web Services account is vested in us," and the policy lets control of your data pass to someone else in a "merger, acquisition, bankruptcy, or liquidation."

How to roleplay without a company holding your chats

PolyBuzz's FAQ and its terms can disagree about who reads your chats because PolyBuzz has them, on its servers, under whichever of its two policies applies. Morse's servers don't keep your messages or log what's in them (privacy policy).

• Who runs it. Morse is made by Watermark Labs, Inc., in San Francisco, and one privacy policy covers it. It's a web app you open at trymorse.ai, so there's no store listing to go missing.
• Who can read your chats. In Characters, your chats, the characters you make, and your personas are stored encrypted in your browser. They lock when you sign out, and unlocking needs a key that never leaves your device plus one Morse's server hands you at sign-in.
• Location, photos, and contacts. Morse doesn't train AI on your content, sell your data, or show ads, and runs no advertising trackers or third-party analytics. Your account holds sign-in details, your plan, your balance, and a usage ledger with no content.
• Age. Morse is for adults only, and every user confirms they're 18 or older.
• Currencies. The Free plan has no cap on character messages, with the model picked for you, and Pro is $19 a month.
• Deletion. Clearing your browser or deleting your account removes your chats for good. Morse can't bring them back, so save a copy of any story you want to keep.

In Chat, you choose a privacy mode for each conversation. Private, the default, runs open-weight models like DeepSeek, Kimi, and GLM on providers that keep nothing, under Morse's zero data retention agreements. E2EE, on Pro and Max, has your browser verify the enclave's hardware attestation and seal each message so only that enclave can read it, as long as the enclave hardware and attestation work as designed; the enclaves are run by third-party providers, not by Morse. Anonymous strips your account, email, and IP address so GPT, Claude, or Gemini answers without knowing it's you, though the provider may keep the message for a limited time to check for abuse, under its own policy.

If you're choosing between companion apps, our guide to Character AI alternatives compares Nomi, Replika, Chai, and SillyTavern on sale clauses, training, and retention.

Send your first message from the Morse home page with no account, or start free with unlimited character messages.