Robinhood
- The policy allows AI training; it does not describe an opt-out.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
They collect SSN, biometrics, chats, and location; may train AI on chats; ads partners.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
- Uses your content for AI training with no opt-out
Collected
They collect SSN, selfies, bank and credit data, chats, device IDs, and sometimes contacts, photos, and precise location.
Read the exact line
Privacy policy
“Identity Data, such as your name, date of birth, marital status, social security number, selfies/photographs/videos, government-issued identification documents”
Training
They use data to run accounts, market to you, personalize ads, and may train AI on chatbot chats.
Read the exact line
Privacy policy
“some of your data, including but not limited to your inputs and conversations with our chatbots and AI features, may be used to train, test, improve, or enhance our AI functionalities”
Sharing
Vendors, affiliates, banks, companies you invest in, and ad partners can get your information.
Read the exact line
Privacy policy
“we may share personal data such as your hashed email address or your device ID with marketing partners to help us market Robinhood products to you”
Kept
They may keep data for the whole relationship plus up to five years after it ends.
Read the exact line
Privacy policy
“we may retain certain data for the duration of your relationship with us and for a period of up to 5 years after the relationship ends”
Controls
You can limit affiliate and marketing sharing, cookies, location, and Social profile visibility.
Read the exact line
Privacy policy
“If You disable these permissions, we will no longer share personal information with marketing partners to more effectively market our services”
Fine print
They can close access anytime; you them; is $50.
Read the exact line
Terms of service
“We may terminate your access to all or any part of the Services at any time, with or without cause, with or without notice, effective immediately”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Turn off marketing-partner data sharing
Account → Menu or Settings → Security and Privacy → Manage your data → Your privacy choices
Limit affiliate sharing
Contact privacy@robinhood.com (and review GLBA notices)
Deactivate or delete Robinhood Social
Account → Menu or Settings → Robinhood Social → Deactivate or delete your account
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
What you type to their chatbots can be used to train their AI. They only mention extra consent if a law requires it.
Read the exact line
Privacy policy
“some of your data, including but not limited to your inputs and conversations with our chatbots and AI features, may be used to train, test, improve, or enhance our AI functionalities from time to time.”
For example, a question you ask the in-app chatbot about your trades could be used to improve their models.
They turn your selfie into biometric face data and send related data to vendors.
Read the exact line
Privacy policy
“We extract facial geometry data from selfies/photographs/videos to verify your identity and detect/prevent fraud.”
For example, a selfie you take to open an account can become facial geometry stored for fraud checks.
Anything you submit gets a lasting license they can to others.
Read the exact line
Terms of service
“you hereby do and shall grant us a worldwide, non-exclusive, , , fully paid, and transferable license to use such information as set forth in our Privacy Policy”
For example, content you send in support or the app can be used under that license even after you leave.
If someone sues them over your use of the app, you may have to pay their legal bills.
Read the exact line
Terms of service
“You shall , and us, our affiliates, payment card networks and payment processors, and each of our partners”
For example, a dispute over something you posted or a payment you made could leave you covering their lawyers.
If they mess up, they say they will not pay more than fifty dollars in direct damages.
Read the exact line
Terms of service
“FOR ANY DIRECT DAMAGES IN EXCESS OF (IN THE AGGREGATE) $50.00.”
For example, if a banking-app outage costs you far more than $50, this clause tries to cap what they owe.
They can shut you out without warning and may destroy some of your information.
Read the exact line
Terms of service
“We may terminate your access to all or any part of the Services at any time, with or without cause, with or without notice, effective immediately”
For example, you could lose app access overnight and not get a chance to export everything first.
They and ad partners track you across sites and devices to target ads.
Read the exact line
Privacy policy
“The information that is collected may be collected over time and combined with information collected on different websites and online services and across your devices, including to deliver targeted advertising to you”
For example, clicking a Robinhood ad elsewhere can be combined with app activity to show more ads.
Closing the account does not wipe everything; they can keep records for years.
Read the exact line
Privacy policy
“we may retain certain data for the duration of your relationship with us and for a period of up to 5 years after the relationship ends in order to comply with our obligations as a regulated financial institution.”
For example, trade and identity records can sit on file for five years after you leave.
You can turn off some sharing used to market Robinhood on other sites.
Read the exact line
Privacy policy
“Account holders have certain choices about the sharing of their personal information with marketing partners for Robinhood’s marketing purposes.”
For example, you can use privacy choices so they stop sending hashed email to ad partners.
Words to know
Legal words from the lines above, in plain English.
- inputs and outputs
- Inputs are what you type, say or upload to an AI; outputs are what it gives back to you. For example, the question you ask a chatbot is an input and its answer is an output, and both may be stored.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- retention
- How long a company keeps your data before deleting it. For example, a policy might keep your messages for 30 days after you delete them, or for as long as it likes.
- worldwide license
- You let the company use your content anywhere on earth, usually for free and for as long as it likes. For example, a video you post can be shown in ads in any country without asking you again.
- perpetual
- Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- sublicensable
- The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- targeted advertising
- Ads chosen for you based on what you have done across other apps and websites, not just this one. For example, you look at shoes in one app and see shoe ads in a totally different app the next day.
How we got here · grade F · score 23/100 · 15 of 15 policy answers backed by a verified quote · 3 not stated
What does the app collect beyond what it needs to work?
They collect far more than login and chats: SSN, IDs, selfies, bank and credit data, contacts and photos with permission, precise location, and partner data.
Does it record your voice, face or body, and what happens to that?
They extract facial geometry from selfies and say vendors may collect biometric data from your photo and voice for ID and fraud checks.
Are your chats and uploads used to train AI models, and is that off by default?
Chatbot inputs and conversations may be used to train or improve AI. They mention consent only where law requires it, not an in-app off switch.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They and third-party partners use cookies, pixels, and device IDs for targeted ads across sites and devices, including Google Ads.
Do they sell or share your data, and can you opt out?
They share with vendors, affiliates, banks, and marketing partners, and treat some sharing as a sale under state law, with opt-outs for marketing and affiliates.
What rights do they take over what you type and what the AI makes?
By submitting content you grant a worldwide, perpetual, sublicensable, transferable license as described in the privacy policy.
How long do they keep your data after you delete it, and can you delete it in the app?
They keep data as long as needed and may keep it up to five years after the relationship ends, longer if law or claims require. Social has in-app delete, but financial records stay.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They infer interests and preferences and personalize services and Social feeds. They do not describe a user-facing memory you can edit or turn off.
Do they commit to basic security, and have they leaked data?
Not stated in the documents.
Is there a real age gate, and are teens protected?
Banking terms require you to be 18. The privacy statement says they do not knowingly collect from under 13 except authorized credit-card users with a parent’s representation.
Will they tell you when the rules change, and is the policy specific?
Policies are dated. Privacy says they update the effective date and sometimes give extra notice. Terms say continued use after posting is acceptance.
Can they close your account without warning, and can you get your data out first?
They may terminate access at any time, with or without cause or notice, which may destroy some information associated with you.
If something goes wrong, who pays?
Services are as-is, direct damages are capped at $50, and you must indemnify them for claims from your use.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 5,321 words at a professional or legal expert level (Flesch reading ease 0); the terms are 7,997 words at a college level.
