GenAgent Trust Hub
Menu

Leonardo.Ai

DTier DMedium risk · 34/100
  • Your data trains their AI unless you switch it off in settings.
  • Your data is used for personalized ads, including by third-party ad companies.
  • Data is shared with partners and affiliates; you can opt out.
  • Staff may review your content; the policy does not describe an opt-out.

Free generations are public and used to train models; paid private mode opts out, while ads and a broad license still apply.

Highest riskMedium riskLow risk

Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.

Privacy policy · January 19, 2026 ↗Terms · January 19, 2026 ↗23 min read · college graduate level26 lines verified word for word

Collected

What is collected

Account info, prompts and media, device IDs, cookies, location, and data from partners.

Read the exact line

Privacy policy

“We may also collect personal information in content you submit or upload to the Service (such as text prompts, images, photos, videos and other media and the metadata about your content)”

Training

How it is used

They run the app, show ads, and train AI on your content unless you use paid private mode.

Read the exact line

Privacy policy

“We may analyse your Content and related data in your account to improve the Service, and to train our algorithms, models, and AI products and services using machine learning”

Sharing

Who may see it

Staff, vendors, ad partners, and other users if your generations are public.

Read the exact line

Privacy policy

“If you are using a free subscription, all Content you generate is publicly available by default. It may be viewed by other users, appears in search results, and can be indexed by search engines.”

Kept

How long it is kept

They keep it while your account is active and for legal needs; deletion is by request.

Read the exact line

Privacy policy

“We will retain your personal information for as long as your account is active or as needed to provide you with the Service or for as long as we have a valid purpose to do so.”

Controls

Your controls

Paid private mode skips training; you can email privacy@leonardo.ai to access or delete data.

Read the exact line

Privacy policy

“If you don’t want your Content to be used for machine learning, you can generate Content privately with any paid subscription plan.”

Fine print

The fine print

Subscriptions auto-renew; is capped.

Read the exact line

Terms of service

“at the end of each Subscription Period, provided you have paid all Subscription Fees owing, your Subscription will be automatically renewed for the same Subscription Period.”

Expand “Read the exact line” to see the source alongside the explanation.

What you can turn off

The controls and opt-outs their own documents describe, and where they say to find them.

  1. Use paid private mode so generations are not trained on

    Paid subscription; private mode as described in the privacy policy and terms

  2. Opt out of sale or sharing of personal information

    “Do not sell or share my personal information” banner, or email privacy@leonardo.ai

  3. Request access or deletion of your data

    Email privacy@leonardo.ai

  4. Cancel auto-renewing subscription

    Through your Account; ends at the close of the current Subscription Period

If a switch is not where they say, the deletion request above still applies.

Line by line

The lines that matter most, worst first.

1 · How it is used

On a free plan, Leonardo owns the images and videos the AI makes, not you.

Read the exact line

Terms of service

“If you are on one of our free Subscriptions (Free Subscriber), as between the Parties, ownership of all Intellectual Property Rights in any Output you, or your Authorised Users, create while using the Platform will vest in us upon creation”

For example, a picture you generate for free could be used by Leonardo as if it were theirs.

2 · How it is used

Public generations can be used forever, including to train models and for commercial purposes.

Read the exact line

Terms of service

“You grant us a non-exclusive, , , , worldwide and transferable right and licence to use, reproduce, modify, copy, process, adapt, publish, transmit, create derivative works of, publicly display and distribute any Public Content”

For example, a public character design could show up in ads or future model training.

3 · How it is used

Free images are public and can be found by anyone, including Google.

Read the exact line

Privacy policy

“If you are using a free subscription, all Content you generate is publicly available by default. It may be viewed by other users, appears in search results, and can be indexed by search engines.”

For example, a prompt-based portrait could appear in search results with your username.

4 · How it is used

Ad networks can get your email, location, and how you use the site to target ads.

Read the exact line

Privacy policy

“We may share certain information with our third-party advertising partners, such as your email address, location, cookie information and information relating to your use of our Service”

For example, Facebook or Google could match your email and show Leonardo ads elsewhere.

5 · What is collected

They can collect exact or rough location from you, your IP, or partners.

Read the exact line

Privacy policy

“We may collect your precise or approximate location: • from you, when you provide, correct or confirm your location (e.g., when you purchase products from us); • by inferring your location from your IP address; and • from our third party partners”

For example, a partner might pass your location even if you never typed an address.

6 · The fine print

If something goes wrong, they usually only owe what you paid them, or AU$1,000 if you are free.

Read the exact line

Terms of service

“Our to you for any arising from or in connection with these Terms will be limited to the amount of any Subscription Fees paid by you to us in respect of the supply of the relevant Services to which the relates, or if you do not have a Subscription, to AU$1,000.”

For example, if a leak of your images caused harm, their payout might be capped at your last subscription fee.

7 · How it is used

Training is on unless you pay and use private mode.

Read the exact line

Privacy policy

“If you don’t want your Content to be used for machine learning, you can generate Content privately with any paid subscription plan. Private Content isn’t accessible to others and won’t be used by Leonardo.Ai for model training.”

For example, a free prompt of your face could be used to train their image models.

8 · How it is used

People at Leonardo may look at your prompts and images to fix bugs or improve the product.

Read the exact line

Privacy policy

“For troubleshooting, error resolution and service improvement: We may need to review your Content or information to support your request for help, correct general errors with the Service or improve our services.”

For example, a staffer might open a generation you thought was private while debugging.

9 · The fine print

After a year of no use they can wipe your account and your files, after an email notice.

Read the exact line

Terms of service

“If you have not used your Account for an extended period of time (12 months or more of inactivity), we may close and permanently delete your Account. You acknowledge and agree that this means you will lose any Content you generated.”

For example, unused gallery images could disappear after 12 months of inactivity.

10 · How it is used

Paid private generations are not supposed to be used for training.

Read the exact line

Terms of service

“We will not use, retain, analyse, or process your Private Content for any other purpose, including training AI models or developing new products without your express written consent.”

For example, a private paid product mockup should not go into their next model.

Words to know

Legal words from the lines above, in plain English.

personal data
Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
prompt
What you type or say to an AI to get a response. For example, asking a chatbot to write a birthday message is a prompt, and it may be stored.
retention
How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
inputs and outputs
Inputs are what you type, say or upload to an AI; outputs are what it gives back to you. For example, the question you ask a chatbot is an input and its answer is an output, and both may be stored.
worldwide license
You let the company use your content anywhere on earth, usually for free and for as long as it likes. For example, a video you post can be shown in ads in any country without asking you again.
irrevocable
Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
perpetual
Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
royalty-free
The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
third parties
Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
cookies
Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
limitation of liability
A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
model training
Using your content and conversations as examples to teach an AI system, which can then echo them in future answers. For example, a story you write in a chatbot may be studied by the company to make the next version of the bot.
How we got here · grade D · score 34/100 · 15 of 15 policy answers backed by a verified quote · 0 not stated
  • What does the app collect beyond what it needs to work?

    They collect account details, your prompts and media, usage logs, cookies, device IDs, precise or approximate location, and data from partners and the public internet.

  • Does it record your voice, face or body, and what happens to that?

    They collect photos, images and videos you upload or generate, and that content can be used to train models unless it is paid private content.

  • Are your chats and uploads used to train AI models, and is that off by default?

    Content is used for machine learning unless you generate it privately on a paid plan. Free content is public and used for training.

  • Can employees or contractors read your conversations, and when?

    They say they may review your content for help, errors, safety, and service improvement, and they use vendors for data labelling. No review opt-out is described.

  • Are you profiled or tracked for advertising?

    They partner with Facebook, Instagram, Google and other ad networks and may share email, location, cookies and usage data to personalize ads.

  • Do they sell or share your data, and can you opt out?

    They share with group companies, vendors and ad partners. US users can opt out of “sale” or “sharing” by banner or email. They say they do not sell or rent data for those ad partners’ own marketing.

  • What rights do they take over what you type and what the AI makes?

    Free users’ outputs are owned by Leonardo and public by default. Paid users own content, but public content gets a perpetual transferable license including training.

  • How long do they keep your data after you delete it, and can you delete it in the app?

    They keep data while the account is active or they have a purpose. Deletion is by contacting them, not a stated in-app 30-day wipe.

  • Does it build a lasting memory or profile of you, and can you see, edit or turn it off?

    They combine what you provide, automatic data and other sources to customize the service and recommend content. No memory view or off switch is described.

  • Do they commit to basic security, and have they leaked data?

    They describe commercially reasonable technical and organisational measures and unique passwords, but no independent audit or bug-bounty program.

  • Is there a real age gate, and are teens protected?

    You must be at least 13. Under 18 you need a parent or guardian. There is no described age-check beyond that statement.

  • Will they tell you when the rules change, and is the policy specific?

    Both documents are dated 19 January 2026. They say they will notify you of material changes, but retention and some purposes stay general.

  • Can they close your account without warning, and can you get your data out first?

    They can immediately ban you for licence breaches. Other terminations often have 14 days’ notice. Inactive accounts can be deleted after 12 months with email notice, and you lose content.

  • If something goes wrong, who pays?

    Generated content is “as is.” Their total liability is capped at fees paid or AU$1,000 for free users, plus they exclude consequential loss.

  • Do subscriptions renew on their own, and can you get a refund?

    Subscriptions auto-renew. Cancel in your account and it ends at the close of the current period, so you keep paying until then. Pro-rata refunds appear mainly if they change terms or discontinue the service.

The privacy policy is 5,081 words at a college graduate level (Flesch reading ease 39.5); the terms are 6,044 words at a college level.

Your privacy
has an agent now

Be in control of your online privacy in the AI Era with confidence.

Gen

From Gen, the Company BehindNorton