On the one test that can be checked rather than believed, whether the file is uploaded at all, the most private of these three services is WhatsAnalyze on its local route, and it is not Portraitor. Portraitor transmits the text with every name, number and address replaced on your own device. LoveGraft uploads the file whole, and publishes a list of who can reach it.<\/p>\n\n\n\n
The question people ask themselves before handing over two years of messages is not usually how long a company keeps them. It is who can read them while they exist. All three of these services answer that in writing, which is the useful part, because a published answer can be read, compared and held against the company later. Everything below was read from each company’s own live pages on 21 October 2026.<\/p>\n\n\n\n
Line the three up on that single question and they do not sit on a spectrum of adjectives. They sit on a spectrum of how many parties exist who could read the conversation at all. WhatsAnalyze on its local route answers nobody, because nothing is sent. Portraitor answers one artificial intelligence provider, which receives text with the identifiers already stripped out on your device. LoveGraft answers with a list, and names every entry on it.<\/p>\n\n\n\n
The order matters less than the reason for it. A policy promise and a structural fact are different kinds of thing, and only one of them survives a change of management.<\/p>\n\n\n\n
Its home page<\/a> says everything is read in your browser and nothing is uploaded, and its own FAQ puts it more plainly still: all chat processing occurs locally in your browser, no data is ever sent to a server, and you can inspect the open source code on GitHub to verify it. That last clause is the part that cannot be matched by writing a better policy. A claim you can read the source for is a different class of claim.<\/p>\n\n\n\n It is honest about its own edges too. The footer notes that if you create a share link, encrypted data is saved. Its AI analyser page<\/a> offers a choice of where the model runs: a compact open model entirely in your browser, which is free and needs no account, or a stronger cloud model, which is part of its subscription. On the cloud route its page states that names become Person A and Person B, that phone numbers, emails and links are removed before anything is sent, that real names are restored only on your screen, and that you can see exactly what is sent before you start. None of the others offers that last one. The head to head is in Portraitor vs WhatsAnalyze<\/a>, which covers what you give up in exchange.<\/p>\n\n\n\n LoveGraft uploads the file. Its privacy policy<\/a> says so in its second section, and then does something most of this category never does, which is to write down the consequences. Uploaded chat files and stored reports are held in the United States, on Google Cloud, and the analysis itself runs there. Access to a stored report is limited to LoveGraft administrators and to you. Three AI providers are named rather than described: Google’s Gemini models read the chat and write the report, xAI’s Grok models take over if Google’s service fails, and Anthropic’s Claude models check each possible red flag against the messages it came from. It says those accounts are configured so the data is not used for training, and that data may be held up to 30 days for abuse and safety purposes.<\/p>\n\n\n\n The retention is published line by line. The uploaded chat file is kept up to 2 days, or 7 days for uploads sent through its WhatsApp bot. Intermediate analysis data is kept 2 days, the finished report 90 days, and a shareable result link 24 hours, with the policy noting that anyone you give that link to can read the report. A report saved to an account stays until you delete it. Portraitor vs LoveGraft<\/a> goes through those figures and what they mean for a single upload.<\/p>\n\n\n\n Then there is the sentence that does the real work. Its policy says US law does not offer the same data protection rights as UK or EU law, and that in some circumstances US authorities can compel disclosure, and it tells you not to use the Service if you are not comfortable with that. That is LoveGraft being straight with a reader in a way we would rather more of this category copied. It is also a sentence that only has force because there is a file sitting somewhere to compel.<\/p>\n\n\n\n Portraitor’s privacy policy<\/a> says that before any part of your conversation is transmitted, your browser removes names, email addresses, telephone numbers, postal addresses and credentials and replaces them with anonymous placeholders, entirely on your own device, and that if the process does not complete successfully no data is transmitted and the payment is refunded automatically. The list that matches each placeholder back to a real detail never leaves your device, which is why the policy can say that neither Portraitor nor the analysis provider learns who anyone in the conversation is. Photographs, videos and voice recordings are never opened and never transmitted. Does chat analysis remove names<\/a> sets out what the masking covers.<\/p>\n\n\n\n On who can reach it afterwards, the policy is specific. Conversation text is never written to the database, the backups or the logs. No administrative function can read a conversation or a portrait. There are no user accounts: a single portrait is bought as a guest, and a Pass is an anonymous code not associated with a name or an email address. Your portrait history is held in your own browser rather than on a server. The clearest statement of the whole position is in the section on disclosure required by law, which says that the most Portraitor is able to produce to a court is payment records identifying no one, Pass records containing nothing identifying, and fault records with network addresses in irreversible form, because it holds no conversation, no portrait and no email address. The same section on a change of ownership says that nothing else exists to transfer.<\/p>\n\n\n\n Two limits belong in the same breath, because a page that leaves them out is selling rather than comparing. The policy itself says masking removes who is speaking and does not remove what was discussed, and it names health, beliefs, relationships and sexuality as examples of subject matter that travels inside the anonymised text with no name attached. And the analysis provider does retain submitted content for a limited period in order to monitor misuse of its own service, which the policy says Portraitor is unable to disable. Is my chat used to train AI<\/a> takes that apart properly.<\/p>\n\n\n\n Portraitor runs Google Analytics on its website, and its own policy states that it sets cookies to measure how the site is used. The policy also says the Global Privacy Control and Do Not Track signals are honoured, so the analytics cookies are not set at all if your browser sends either, that no advertising pixel or session recording software is used, and that the iPhone app contains no analytics, no advertising and no tracking. It is a narrow exposure and it is still a real one. LoveGraft’s policy says it uses minimal, essential cookies and privacy respecting analytics. WhatsAnalyze on its local route needs no server in the loop at all.<\/p>\n\n\n\n Two more credits where they are due. WhatsAnalyze is free on that route and its code is public, which makes its central claim checkable rather than merely stated, and that is the strongest position on this page. LoveGraft publishes a section headed Chats Involve Other People which states, at length, that the other person has not agreed to anything and that the obligation to get their consent is yours. Portraitor asks you to confirm permission before you pay, which is one step rather than a section. Pretending otherwise would make every other claim here worth less.<\/p>\n\n\n\n If what you want is counts, who talks most, peak hours and a word cloud, and you want nothing to leave the machine, use WhatsAnalyze on its local route and stop reading. If what you want is a relationship score with a red flag list, and you accept that the file is uploaded and held for a couple of days in the United States, LoveGraft has published exactly what that costs you in exposure, which is more than most of this category will tell you. If what you want is a written portrait of one person in the conversation, and you want the names and numbers gone before anything is sent anywhere, that is the thing Portraitor is built to do. The alternatives roundup<\/a> sorts the same five services by the question you are asking instead, and is it safe to upload your chat history<\/a> goes through the general case. Whichever you pick, pick it on a sentence you can go and read on the company’s own site, not on an adjective. You can see what Portraitor<\/a> sends before you pay for anything.<\/p>\n\n\n\n For a closer look at how a chat analyser handles an iMessage conversation, see how a chat analyser handles an iMessage conversation<\/a>.<\/p>\n\n\n\n WhatsAnalyze on its local route, on the only test that can be checked instead of believed. Its home page and FAQ say the chat is processed entirely in your browser, that no data is ever sent to a server, and that the source code is published so you can verify it. Portraitor sends masked text to one provider. LoveGraft uploads the file and names who can reach it.<\/p>\n<\/details>\n\n\n\n That depends entirely on what the company is holding, and this is not legal advice. LoveGraft’s policy says US law does not offer the same data protection rights as UK or EU law and that in some circumstances US authorities can compel disclosure. Portraitor’s policy says the most it is able to produce is payment records identifying no one, Pass records containing nothing identifying and fault records in irreversible form, because it holds no conversation, no portrait and no email address. On WhatsAnalyze’s local route there is nothing held anywhere to ask for. What a court could get from a chat analysis service<\/a> goes through the three kinds of record Portraitor does hold, one at a time.<\/p>\n<\/details>\n\n\n\n No, and Portraitor’s own policy says so. It states that masking removes who is speaking and does not remove what was discussed, and it names health, beliefs, relationships and sexuality as examples of subject matter that travels inside the anonymised text with no name attached. The identifiers are gone. The subject matter is not.<\/p>\n<\/details>\n\n\n\n Partly, and differently in each case. Portraitor’s policy says the other participants’ names, email addresses and telephone numbers are removed on your device by the same process, and that the list matching placeholders to real details never leaves it. LoveGraft publishes a section stating that the other person has not agreed to anything and that obtaining their consent is your obligation. On WhatsAnalyze’s local route their messages are not sent either.<\/p>\n<\/details>\n\n\n\n Read the sentence, not the adjective: all three of these companies publish the answer, and they do not publish the same answer.<\/p>\n","protected":false},"excerpt":{"rendered":" Three chat analysers answer one question in writing: who can read your conversation besides you. WhatsAnalyze says nobody, Portraitor says one masked provider, LoveGraft publishes the list.<\/p>\n","protected":false},"author":6,"featured_media":295,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"pp_title_highlight":"","pp_meta_title":"","pp_meta_description":"The most private chat analyser, judged on who can reach your chat: WhatsAnalyze, Portraitor and LoveGraft compared from their own live policies.","pp_sidebar_cta":"{\"variant\": \"light\", \"heading\": \"The names go first\", \"bodyHtml\": \"Names, numbers and addresses are replaced in your browser before anything is sent. The conversation is not kept.\", \"label\": \"See how Portraitor works →\"}","pp_sources":"[{\"html\": \"WhatsAnalyze, home page and FAQ<\/cite>, read 21 October 2026.\", \"href\": \"https:\/\/whatsanalyze.com\/\"}, {\"html\": \"WhatsAnalyze, AI Chat Analyzer<\/cite>, read 21 October 2026.\", \"href\": \"https:\/\/whatsanalyze.com\/tools\/ai-chat-analyzer\/\"}, {\"html\": \"LoveGraft, Privacy Policy<\/cite>, read 21 October 2026.\", \"href\": \"https:\/\/lovegraft.com\/privacy\"}, {\"html\": \"LoveGraft, home page<\/cite>, read 21 October 2026.\", \"href\": \"https:\/\/lovegraft.com\/\"}, {\"html\": \"Portraitor, Privacy Policy version 1.3<\/cite>, read 21 October 2026.\", \"href\": \"https:\/\/portraitor.ai\/privacy\"}, {\"html\": \"Portraitor, home page<\/cite>, read 21 October 2026.\", \"href\": \"https:\/\/portraitor.ai\/\"}]","pp_endcard":"{\"h3\": \"See what is sent before you pay\", \"body\": \"Portraitor masks the identifiers on your own device, then sends only the masked text. It keeps no conversation and no portrait.\", \"label\": \"Try Portraitor →\"}","pp_howto":"","footnotes":""},"categories":[2],"tags":[],"class_list":["post-294","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-guides"],"_links":{"self":[{"href":"https:\/\/portraitor.ai\/blog\/wp-json\/wp\/v2\/posts\/294","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/portraitor.ai\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/portraitor.ai\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/portraitor.ai\/blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/portraitor.ai\/blog\/wp-json\/wp\/v2\/comments?post=294"}],"version-history":[{"count":3,"href":"https:\/\/portraitor.ai\/blog\/wp-json\/wp\/v2\/posts\/294\/revisions"}],"predecessor-version":[{"id":569,"href":"https:\/\/portraitor.ai\/blog\/wp-json\/wp\/v2\/posts\/294\/revisions\/569"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/portraitor.ai\/blog\/wp-json\/wp\/v2\/media\/295"}],"wp:attachment":[{"href":"https:\/\/portraitor.ai\/blog\/wp-json\/wp\/v2\/media?parent=294"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/portraitor.ai\/blog\/wp-json\/wp\/v2\/categories?post=294"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/portraitor.ai\/blog\/wp-json\/wp\/v2\/tags?post=294"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}LoveGraft answers with a list, and the list is unusually frank<\/h2>\n\n\n\n
Portraitor answers with a stranger who does not know who you are<\/h2>\n\n\n\n
The one place Portraitor sits behind both of them<\/h2>\n\n\n\n
Which of the three to use, including when it is not us<\/h2>\n\n\n\n
Frequently asked questions<\/h2>\n\n\n\n
Which chat analyser is the most private?<\/summary>\n
Can a court get my chat from a chat analyser?<\/summary>\n
Does masking make my conversation anonymous?<\/summary>\n
Is the other person in my chat protected by any of this?<\/summary>\n