AI Dating Assistant App "FlirtAI" Leaks 160,000 Private Chat Screenshots, Raising Privacy Concerns

AI Dating Assistant App Exposes User Data

In a concerning development for AI-assisted communication tools, the dating advice app "FlirtAI" has been found to have leaked over 160,000 screenshots of private chats. Researchers at Cybernews discovered an unprotected Google Cloud Storage bucket owned by Buddy Network GmbH, the company behind FlirtAI, containing these sensitive user data 1

1

.

How FlirtAI Works

FlirtAI, which markets itself as the "#1 AI Flirt Assistant Keyboard" on the App Store, is designed to help users craft "charming, personalized, and instant" messages for their dating app matches. The app encourages users to upload screenshots of their private conversations from various dating and chat platforms, including popular services like Tinder, Bumble, Hinge, WhatsApp, and Instagram 2

2

.

Privacy Concerns and Data Collection

The app's privacy policy states that by uploading screenshots, users imply that all parties involved have consented to the use of FlirtAI. However, this assumption seems unrealistic, as it would negate the purpose of using an AI assistant for private conversations. The policy also mentions that the app collects "prompts and text detected inside the uploaded screenshots" 2

2

.

Potential Risks and Vulnerabilities

The data breach exposes users to various risks:

1. Social Engineering Attacks: Leaked conversations could be used for phishing attempts or other social engineering tactics.
2. Impersonation Risks: With access to dating profiles and conversation history, malicious actors could potentially impersonate users.
3. Emotional Impact: The exposure of private, flirtatious conversations could have significant emotional consequences, especially for vulnerable teenagers who appear to be primary users of the app 1

   1

   .

Teenage Users and Data Sensitivity

Cybernews researchers noted that a large number of the leaked screenshots appeared to be from teenage users. This raises additional concerns, as data from minors is considered more sensitive and subject to stricter regulations regarding collection and processing practices 1

1

.

Conflicting Age Restrictions

FlirtAI's privacy policy contains contradictory information about age restrictions. One section states that minors may not use the app, while another allows teens over 13 to use it with parental permission 2

2

. This inconsistency adds to the concerns about the app's data handling practices and user protection measures.

Broader Implications for AI-Assisted Communication

This incident highlights the potential risks associated with AI-powered communication tools. Researchers at Common Sense Media have warned that AI companions may not be safe for teens, as they can lead to emotional dependency. Additionally, studies from MIT suggest that relying on AI for writing tasks could potentially impair cognitive abilities 2

2

.

Company Response and Future Measures

After being notified by the Cybernews team, Buddy Network GmbH closed the exposed storage bucket. However, the incident raises questions about the company's data security practices and the need for stricter regulations in the AI-assisted communication sector 1

1

2

2

.

As AI continues to play a larger role in our daily communications, this leak serves as a stark reminder of the importance of robust data protection measures and the potential consequences of entrusting sensitive information to AI-powered applications.