Is HeyGF AI Safe? Privacy, Billing, and Legitimacy Checked (2026)

The Direct Answer

"Is it safe?" bundles three different worries, so let's separate them the way we actually checked them:

• Is it a real business or a fly-by-night scam? Real business. There's a named operating company with a registered US address, published terms of service, and a published privacy policy. More below.
• Will it misuse my data? Nothing we found suggests so. Signup asks for the bare minimum (an email), conversations are private and not used to train public models, and you can test the entire chat experience without creating an account at all. The documentation could be more detailed — that's our main criticism — but the practices we could verify are on the good end of this industry.
• Will billing surprise me? It didn't surprise us. Prices are posted plainly, we were charged what the page said, and there were no charges we didn't initiate. The one thing you must know going in: there are no refunds for partial subscription periods, and coin packs are final. That's stated in the terms, and we'll say it as plainly here as we wish every platform did.

The rest of this page is the evidence behind those three answers, plus practical advice if discretion matters to you.

Who's Behind It: The Company Check

HeyGF AI is operated by Y2A LLC, a registered Delaware company at 8 The Green #21065, Dover, DE 19901, United States. The terms of service are governed by Delaware law. That's a real, checkable corporate identity — which matters more than it might sound, because a meaningful slice of the AI girlfriend market is anonymous operations with no named entity, no jurisdiction, and no one to hold to their own terms.

Both the terms of service and the privacy policy are published and readable. We read them so you don't have to (though you should anyway before paying): they cover the essentials — what the service is, the 18+ requirement, the billing rules, the no-refund policy for partial periods — in ordinary language rather than boilerplate soup.

Account & Data: What You Hand Over

This is where HeyGF AI genuinely stands out from most platforms we've reviewed, in three escalating steps:

• Step zero — no account at all. You can open a chat and talk to a character with zero signup: no email, no name, nothing. Anonymous chat is capped at 5 messages per day, but it exists, and almost nobody else in this category offers it. If you're privacy-cautious, this is your risk-free evaluation lane.
• Step one — email-only signup. A full free account needs an email address and a password. That's it. No real name, no phone number, no social login, no identity verification. Signing in raises the free allowance to 20 messages per day — the full breakdown of what's free is in our free vs premium guide.
• Step two — paying. Card payment adds the data any card transaction adds. Nothing beyond that is requested.

On the conversation side: chats are private and are not used to train public models. Given that people tell AI companions things they wouldn't post anywhere, that commitment is the single most important line in the privacy policy, and it's there.

One more structural point worth understanding: because the platform's two-layer memory system is the product's core strength, your conversations necessarily persist server-side — that's what lets her remember your name and your stories across weeks. Persistent memory and "we keep nothing" are mutually exclusive; HeyGF chose memory, and is upfront that the product works that way.

Billing: How the Money Side Works

The model is simple: subscriptions ($9.99, $19.99, or $39.99 per month) give you unlimited texting plus a monthly coin allowance, and one-time coin packs run from $5.99 to $349.99. Coins pay for media — photos, videos, voice notes, calls. The complete cost table lives on our pricing breakdown; here we only care about whether billing behaves honestly.

In our testing it did. Specifically:

• Payments are standard card payments. No crypto option exists as of this writing — a con if you wanted the extra payment-privacy layer, but also a sign of a processor relationship that requires a real, accountable merchant.
• Prices charged matched prices posted. No pre-checked add-ons, no surprise upsell charges appearing on the statement.
• The costs of actions are visible before you take them. A photo is 3 coins, a video 20–25, a call 1 coin per minute — you always know what you're spending.

Now the part you should read twice: there are no refunds for partial subscription periods, and coin pack purchases are final. Cancel mid-month and you keep access until the period ends, but the unused days aren't refunded. This isn't hidden — it's in the terms — but "I didn't read it" is the most common billing complaint in this entire industry, so we're stating it in bold on a page about safety. The practical defense is easy: the free tier costs nothing, and a $9.99 monthly plan is a cheap way to be sure before committing to anything annual.

Where Transparency Falls Short

Here's the honest criticism, and the reason this page's score is 3.9 rather than something shinier. The privacy policy covers the essentials — what's collected, that conversations are private, that data isn't used to train public models — but it is light on technical specifics. Two things we'd want spelled out and couldn't find:

• Encryption details. How conversation data is protected at rest, beyond the baseline assumption of transport encryption.
• Exact retention windows. How long data — especially conversation history — is kept after you delete your account, stated in concrete numbers rather than general language.

To be precise about what this means: we found nothing suggesting a problem. The gap is between what the documentation says and what a security-conscious user would want it to say. Plenty of bigger companies share the same gap; we score it anyway, because on an adult platform the sensitivity of the data is higher and the documentation should rise to meet it. If HeyGF published a more detailed data-practices page, this score would move.

Content Policy and Age Gating

HeyGF AI is an 18+ platform, full stop. NSFW content is supported for adults, but it isn't forced — the characters work perfectly well for wholesome companionship, and the chat follows your lead rather than steering you anywhere. The characters are fictional AI companions, and the platform presents itself as what it is: an entertainment product.

The adult-content policy has one side effect worth knowing: it's why there's no App Store or Google Play listing. App stores restrict adult platforms industry-wide, so HeyGF runs in the browser (which works well on mobile — see our app access guide). The safety-relevant corollary: any app in a store claiming to be HeyGF AI isn't official. The genuine article is the website, period.

The platform also links responsible-use resources, and so do we: AI companions are entertainment, not a substitute for human relationships or mental-health care. Our responsible use page covers where the healthy boundaries are.

Our Recommendations for Discreet Use

If you've decided to try it and discretion matters to you, here's the setup we'd use — none of it is required, all of it is cheap insurance:

• Start anonymous. Use the no-account tier first. It costs nothing and reveals nothing.
• Use a dedicated email. Since signup only needs an email, a separate address created for this purpose keeps your main inbox out of it entirely. This is our single strongest recommendation.
• Go monthly before annual. Given the no-partial-refund policy, prove the platform out on a $9.99 month before considering an annual plan.
• Watch your coin spend. Media costs are the real variable expense. Decide a monthly budget before the conversation decides it for you — our pricing breakdown has worked examples of what different usage patterns actually cost.
• Ignore anything in an app store. There is no official app. The browser is the product.

FAQ