What "Delete" Really Means in AI Chat Apps
When you delete a conversation in an AI chat app, "delete" can mean very different things. Many services use a soft delete that only hides the record while the data stays in the database; others hard-delete the row but keep it in backups and logs for a retention window, commonly 30 days. Deletion promises also carve out exceptions for abuse monitoring and legal holds — as the New York Times v. OpenAI case showed, a court order can freeze "deleted" chats instead of purging them. To know what really happens, read the retention section of the privacy policy and ask whether the delete is a flag or a physical removal.
"Delete" is a design decision, not a fixed meaning
There is no universal definition of "delete" in software. When you click delete on a conversation, an engineer somewhere decided what that button does — and the range of possible answers is wide. Understanding that range is the difference between "this is gone" and "this is hidden from me but still on their servers."
The two ends of the spectrum are soft delete and hard delete.
A soft delete typically flips a flag — a deleted_at timestamp or an is_deleted column. The row stays in the database. It disappears from your view, but it remains queryable by staff, and it often lingers in exports, search indexes, analytics tables, and caches. As several engineering write-ups put it bluntly: legally, a soft delete is not deletion — it is concealment. Companies like it because it makes "undo," abuse investigations, and analytics easy.
A hard delete physically removes the row. It is gone from the live database and from search indexes, and it eventually ages out of backups as they rotate. This is what most people think the delete button does.
Retention windows: the "30 days" you keep seeing
Even services that genuinely delete your data rarely do it the instant you click. A retention window is the gap between "removed from your account" and "purged from our systems."
Thirty days is the most common window, and it shows up almost everywhere as of 2026:
- OpenAI (ChatGPT): deleting a chat or your account removes it from your account immediately and schedules permanent deletion "within 30 days," unless already de-identified or held for security or legal reasons. Temporary Chats follow the same 30-day purge. Important caveat: as of 2026 that 30-day clock is effectively paused for many users by a court preservation order in the New York Times litigation (see below).
- Anthropic (Claude): deleted conversations leave your history immediately but remain on back-end systems for up to 30 days. Notably, content flagged for policy violations is kept far longer — Anthropic's policy cites up to 2 years for flagged inputs/outputs and up to 7 years for the associated trust-and-safety classification scores. (Opting into model training also extends ordinary retention well beyond 30 days.)
These windows are not sinister on their own — they exist for backups, fraud reversal, and operational recovery. But "deleted" and "purged" are different states, and the window is where your data actually lives.
Backups, and why they complicate everything
A backup is a complete point-in-time snapshot. Surgically removing one person's records from a snapshot is often impractical without restoring the whole thing. Under the GDPR's right to erasure, regulators generally accept a pragmatic approach: remove the live data now, and let the erasure take effect in backups as they rotate out on their normal cycle. So even after a true hard delete, a copy can persist in cold backups until that rotation completes. This is normal — but it means "instantly and completely gone from every system" is rarely literally true for any server-side product.
The two things people miss: abuse monitoring and legal holds
Abuse monitoring / trust and safety. Most providers reserve the right to retain content that is flagged, regardless of your deletion. Anthropic's longer flagged-content retention is one example; nearly every consumer AI policy carves out "security and legal obligations" from its deletion promise.
Legal holds. This is the one users almost never anticipate. In the New York Times v. OpenAI litigation, a court preservation order (issued in May 2025) required OpenAI to preserve output logs that would otherwise have been deleted — freezing "deleted" chats instead of purging them. In November 2025 the court went further and ordered OpenAI to hand over roughly 20 million anonymized ChatGPT logs to the plaintiffs; OpenAI is contesting it. The lesson: a company's own deletion policy can be overridden by a judge, and that risk grows with US jurisdiction and pending litigation.
Questions to ask before you trust a delete button
- Is this a soft delete or a hard delete? Does the row physically leave the database?
- What's the retention window between "removed from my account" and "permanently purged"?
- What survives deletion — extracted memories, embeddings, logs, analytics?
- Is content retained separately for abuse/safety review?
- Is the service under any legal hold or preservation order right now?
- Where to check: the privacy policy's "data retention" section, the deletion/erasure help article, and any published legal or transparency notices.
Where Evenfall sits
Evenfall is a privacy-focused AI chat app, and deletion is one of its deliberate design choices. When you delete a conversation, Evenfall performs a real database-row hard delete — no soft-delete flag, no shadow archive, no recovery window. Account deletion is immediate. Evenfall also does not train on your conversations, run ads, or use behavioural tracking.
Evenfall's privacy is enforced by policy — no training, no ads, no tracking, and real hard-delete — with data encrypted in transit and at rest. Like any hosted service, it isn't immune to lawful legal process. Evenfall's honest edge is the combination most rivals don't offer together: no training, no ads or tracking, real hard-delete, anonymous crypto billing, and a fast full-history chat UX. See how it compares on our compare pages.
frequently asked
Does deleting an AI chat actually remove my data?
It depends on the service. A soft delete only hides the record while it stays in the database and remains readable by staff. A hard delete physically removes the row. Even with a true hard delete, most services keep the data in backups and logs for a retention window — often around 30 days — before it is fully purged. Check the privacy policy's data-retention section to find out which one you're getting.
What is a 30-day deletion window?
It's the gap between when data leaves your account and when it's permanently erased from a provider's systems. As of 2026, OpenAI and Anthropic both cite roughly 30 days for deleted consumer chats, largely because backups and operational systems need time to rotate the data out. During that window the content still exists on their servers, just outside your view — and exceptions for safety or legal reasons can extend it.
Can a company be forced to keep chats I deleted?
Yes. A court can issue a preservation order or legal hold that overrides a company's own deletion policy. In New York Times v. OpenAI, a 2025 preservation order required OpenAI to keep logs that would otherwise have been deleted, and in November 2025 the court ordered OpenAI to hand over about 20 million anonymized chat logs to the plaintiffs. Most privacy policies also reserve the right to retain flagged content for abuse and safety review.
How is Evenfall's deletion different?
When you delete a conversation, Evenfall performs a real database-row hard delete — no soft-delete flag, no shadow archive, no recovery window — and account deletion is immediate. It also doesn't train on your chats or run ads and tracking. Evenfall's privacy is enforced by policy with data encrypted in transit and at rest; like any hosted service it can still be subject to lawful legal process.
What should I ask to check a delete policy?
Ask whether the delete is a soft flag or a physical row removal; what the retention window is between removal and permanent purge; what survives deletion, such as extracted memories, embeddings, or logs; whether flagged content is kept for abuse review; and whether the service is under any current legal hold. The answers live in the privacy policy's retention section and the deletion help article.
try private AI chat
Evenfall is a private, ad-free AI chat app that doesn't train on your conversations and deletes them for real. Free tier, no card required.
start free