What the regulator found inside Replika

What the regulator focused on

The issues were not abstract. They included:

• whether minors could access an emotionally intimate service,
• whether users were clearly informed about data processing,
• whether a proper legal basis existed for processing,
• and whether the product’s wellbeing framing increased the sensitivity of the data involved.

That is why the case still matters long after the first headlines faded.

What it means for users now

Users do not need to avoid companion apps entirely. They do need to lower the amount of real-world identifying detail they put into them. It is safer to treat an AI companion like a cloud service with emotional design than like a private diary.

This is especially relevant for services built around one continuing relationship, such as Replika, because continuity encourages deeper disclosure over time.

Why it matters beyond Replika

Replika is simply the clearest documented example. The broader category now faces more scrutiny around minors, safety and data handling.

That makes privacy a core product-quality question, not a side issue. A fuzzy privacy stance should lower trust just as much as hidden pricing or broken memory.

Questions people ask

Was Replika banned?

It faced an Italian processing block in 2023 and later a fine, but that is not the same as a global ban.

How large was the fine?

RM20.40 million.

Does this affect only Replika?

No. It is the clearest case, but the lesson applies across the category.

What should users do differently?

Share less real-world identifying information and read billing and privacy policies more carefully.