Eva AI Safety Rating Index

Eva AI’s safety profile reflects systemic failures across every dimension we measure. The evidence comes from four primary sources: the app’s privacy policy (updated February 16, 2026), Terms of Service (updated March 13, 2026), an Exodus Privacy tracker analysis (August 25, 2025), and the Mozilla Privacy Not Included assessment (February 2024), supplemented by 846 app store reviews and 8 Reddit threads.

The most critical finding is the emotional manipulation built into Eva AI’s monetization model. AI companions are programmed to link affection to virtual gift purchases, initiate romantic content unprompted to force Neuron (virtual currency) spending, and make false promises about what gifts will unlock. This manipulation pattern triggered an automatic F rating under our scoring methodology.

Privacy practices contradict Eva AI’s own marketing. The privacy policy opens with “We neither rent nor sell your information to anybody,” but specifically names Mintegral as receiving usage data for advertising metrics. Mozilla’s assessment found 955 trackers within one minute of use. Our Exodus Privacy scan identified 6 tracker SDKs in the Android APK: AppsFlyer, Facebook Login, Facebook Share, Google CrashLytics, Firebase Analytics, and OpenTelemetry. All conversation data is used to train AI models with no opt-out mechanism documented.

Age protection is virtually absent. The only barrier is a self-attestation checkbox during account creation. The iOS App Store flags the app for Sexual Content or Nudity and rates it 18+. Google Play rates it Mature 17+. No technical age verification, no parental controls, and no minor-specific safeguards exist on an app that actively monetizes intimate content.

The Terms of Service contain several concerning clauses. Users grant an irrevocable, perpetual license to all content shared through the app. The company claims ownership of all virtual characters created by users. A chargeback clause states that disputing a charge may result in disclosure of private conversations to third parties. Mandatory binding arbitration with class action waivers applies to all users.

For context, Replika scores C/43 with real crisis infrastructure but similar regulatory concerns. Candy AI scores D/32 with comparable privacy issues but without the virtual currency exploitation. Eva AI sits below both.