LLM Providers · AI companion chatbot · Regulatory action
Replika (Luka, Inc.)
Headline
Italy's data protection authority fined Replika's maker EUR 5 million in April 2025.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
Italy's data protection authority fined Replika's maker EUR 5 million in April 2025. It found no lawful basis for the processing, an inadequate privacy notice, and no age verification before February 2023, even though the app claimed to exclude minors. Separately, U.S. advocacy groups have asked the FTC to investigate Replika's marketing, which they say promises therapeutic benefits and uses fake testimonials. No FTC action was verified.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-10-16
Primary source. www.edpb.europa.eu/news/ai-the-italian-supervisory-authority-fines-company-behind-chatbot-replika_en — Unverified - heuristic first draft.
Terms
Arbitration
Yes. Binding AAA arbitration with a small-claims carve-out (Sec. 12.1) and an individual-only class waiver (Sec. 12.2). If the class waiver is invalid, the whole arbitration agreement is void (Sec. 12.7). Replika pays arbitration fees on claims of $75,000 or less on request (Sec. 12.5). California law; 1-year claim limitation (Sec. 13.4).
Data sharing
Privacy policy fetch failed this pass. Handling of conversation data, training use and ad sharing NOT VERIFIED. The Garante found the privacy notice deficient (Arts. 12-13).
Fees and billing
Terms (last updated Mar 30, 2026): Pro, Ultra and Platinum tiers, with prices shown only in-app and 'subject to change without prior notice'. Subscriptions auto-renew and must be cancelled 'only through the App marketplace where you originally acquired the subscription'. Apple and web purchases are final with no refund (EU and Brazil exceptions).
Contacts
Privacy contact. my@replika.ai (terms); privacy-specific contact not verified
Legal notice. Terms give 490 Post Street, Suite 526, San Francisco, CA 94102 as the DMCA agent address only; notice address for disputes is my@replika.ai. Wikipedia says the team works remotely.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
Sources
| Source | Claim | Tier | Status | Quote |
|---|---|---|---|---|
| regulator (EDPB news) · 2025-05-21 www.edpb.europa.eu/news/ai-the-italian-supervisory-authority-fines-company-behind-chatbot-replika_en | whole row | Unassigned | confirmed | “an administrative fine of 5 million €” Quote basis: not recorded. |
| advocacy group · 2025-01-31 techjusticelaw.org/2025/01/31/tjlp-young-peoples-alliance-and-encode-file-ftc-complaint-over-ai-chatbot-app-replikas-deceptive-practices-seek-ftc-investigation/ | whole row | Unassigned | confirmed | “fake testimonials from nonexistent users” Quote basis: not recorded. |
| encyclopedia (lead only) · 2026-10-16 en.wikipedia.org/wiki/Replika | whole row | Unassigned | confirmed | “Replika removed the ability for the chatbot to engage in erotic talk” Quote basis: not recorded. |
| company terms · 2026-03-30 replika.com/legal/terms | whole row | Unassigned | confirmed | “EACH OF US MAY BRING CLAIMS AGAINST THE OTHER ONLY ON AN INDIVIDUAL BASIS” Quote basis: not recorded. |
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy https://replika.com/legal/privacy | Not fetched yet | NOT CONFIRMED |
| Terms of service https://replika.com/legal/terms | Not fetched yet | NOT CONFIRMED |
| Website https://replika.com | Not fetched yet | — |
| Primary source https://www.edpb.europa.eu/news/ai-the-italian-supervisory-authority-fines-company-behind-chatbot-replika_en Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
| Action | Amount | Link |
|---|---|---|
| Garante per la protezione dei dati personali — Luka Inc. (Replika) Garante per la protezione dei dati personali (Italy), 2025 Garante Provvedimento 10 Apr. 2025 [10130115]; press release 19 May 2025. | — | proposed |
Links are proposed matches, not yet reviewed.
State statute
Headquarters on file: CA. Provisions of CCPA/CPRA on file:
| Provision | Type | Source |
|---|---|---|
| Right to Deletion Cal. Civ. Code § 1798.105 | hard | source |
| Right to Correction Cal. Civ. Code § 1798.106 | hard | source |
| Right to Know / Access Cal. Civ. Code § 1798.110 | hard | source |
| Right to Limit Use of Sensitive Personal Information Cal. Civ. Code § 1798.121; Cal. Code Regs. tit. 11, § 7027 | hard | source |
| Right to Data Portability Cal. Civ. Code § 1798.130(a)(3)(B)(iii) | hard | source |
| Privacy Policy / Privacy Notice Requirements Cal. Civ. Code § 1798.130(a)(5); Cal. Code Regs. tit. 11, § 7011 | hard | source |
| Sensitive Personal Information — Categories Cal. Civ. Code § 1798.140(ae) | hard | source |
| Service Provider and Contractor Contract Requirements Cal. Civ. Code § 1798.140(ag); Cal. Code Regs. tit. 11, § 7051 | hard | source |
| Applicability Threshold (2025 CPI-Adjusted) Cal. Civ. Code § 1798.140(d) | threshold | source |
| Privacy Risk Assessment — Mandatory for High-Risk Processing (Eff. Jan. 1, 2026) Cal. Civ. Code § 1798.185(a)(15); Cal. Code Regs. tit. 11, §§ 7150-7157 | hard | source |
| Right to Opt Out of Sale or Sharing Cal. Civ. Code §§ 1798.120, 1798.135 | hard | source |
| Sale vs. Sharing Distinction Cal. Civ. Code §§ 1798.140(ad), 1798.140(ah) | hard | source |
| Enforcement — CPPA and AG; Civil Penalties (2025 CPI-Adjusted) Cal. Civ. Code §§ 1798.155, 1798.199.90; Cal. Bus. & Prof. Code § 17206 | hard | source |
| Notice at Collection Cal. Code Regs. tit. 11, § 7012 | hard | source |
| Cybersecurity Audit — Annual Independent Audit Requirement (Eff. Jan. 1, 2026) Cal. Code Regs. tit. 11, §§ 7120-7124 | hard | source |
| Automated Decision-Making Technology (ADMT) — Notice, Opt-Out, and Access Rights Cal. Code Regs. tit. 11, §§ 7200-7222; Cal. Civ. Code § 1798.185(a)(16) | hard | source |