Turning Off AI Training Doesn’t Make Your Chats Private

You typed something into a chatbot late at night that you would not repeat on a phone call. Later you found the settings page, switched off training, and felt a little safer. That instinct is sound. It is also only part of the answer.

One switch, three questions

A chat leaves three separate footprints, and each follows its own rules.

1. Training. Will your chat be used to teach future models? This is the switch you can see.
2. Retention. How long does a copy stay on the company’s systems, even after you press delete?
3. Review. Can a person read it, and why?

Turning off training answers the first question. The other two keep running on their own terms. Here is what four services say, as of 24 October 2026.

Microsoft’s new Copilot app, from August 2026, lists no training switch and says chats in the app do not train its foundation models. The pages we read give no retention period for it. The full tracker covers eight products.

Figures come from each company’s own help pages. They change, so check the date on the page before you rely on a number.

Where “off” stops

Delete is not instant. ChatGPT and Claude both describe a window of up to 30 days before a deleted chat leaves their systems. Gemini keeps chats for 72 hours even with activity off, so it can respond to you and protect its service.

Feedback reopens the door. Tap thumbs up or down in ChatGPT and OpenAI says the whole conversation may be used to improve its models, even if you opted out. Google says the last 24 hours of your chats come along with feedback when Keep Activity is off. Anthropic keeps feedback data for five years.

Some chats are read by people. Google says a subset of Gemini chats goes to human reviewers, including staff at service providers. Microsoft’s FAQ for the older Copilot app says some conversations get human review, and it offers no way to opt out.

The rules can change without you. In May 2025 a US court ordered OpenAI to keep chat output that would normally be deleted, including chats users had deleted, in a lawsuit brought by The New York Times. The order ended in September 2025, about four and a half months later. OpenAI says it still holds limited user data from April to September 2025 under legal hold. In January 2026 a judge also upheld an order for OpenAI to produce 20 million de-identified chat logs in the same case. The dates and sources are in the change log.

Your own setting was never the only rule in force.

The usual fixes protect against the wrong thing

A chat leaves a copy on someone else’s system. So do most of the places we keep things we would rather nobody found.

• Phone cloud albums sync first and ask later. A photo can reach the cloud before you decide it should have stayed on the phone.
• A cloud drive is an account on someone else’s server, under terms they can change. Your access lasts as long as the arrangement does.
• A single external drive is yours, but it is one copy. One spill, one fall, or one tidy-up by someone who did not know what it was, and it is gone.
• A home NAS guards against losing files. It does little against a visitor, a repair call or a break-in.
• A bank safe deposit box ties your access to the bank’s hours and rules.
• A hiding place at home is exactly as secret as your household.

A backup answers a question about loss. Your worry is being found. Those are different problems, and most of these tools were built for the first.

What holds up: people and process

The most dependable protection is not a setting or a clever tool. It is handing the thing to someone trustworthy, under a process you can check.

A process worth trusting is dull and specific:

• Every item gets its own number.
• It is sealed with a numbered, tamper-evident seal.
• Two people check it in, and the check is photographed.
• It stays offline, in the care of a named person.
• On a schedule, someone looks at the seal and the casing and photographs them, without opening anything.
• Anything deeper happens only with your written permission.

Technology is the foundation, not the pitch. Whatever you store should be encrypted before it leaves your hands, with the key staying with you. That is the floor.

Ask any provider you are considering five questions:

1. Who handles my item, and is every handling logged?
2. Does anyone ever see what is inside?
3. Is it ever connected to a network?
4. Can I check its seal and condition without it being opened?
5. What happens to my item if the company closes?

What to do this week

1. Turn off training, and remember it is one of three questions.
2. Use temporary or incognito chats for anything you would not want kept. They still leave copies for a short while.
3. Do not type what you cannot afford to have read.
4. For material that must be kept but must not be found, keep it out of every account.

A setting is a promise someone can edit. A numbered, sealed item is something you can check.