Are Janitor AI Personas Private? What Others Can See

Do not assume your Janitor AI persona is private just because you have not published a chat. Janitor’s public guidance reviewed for this article does not establish a blanket visibility rule for saved personas. It does document a specific exposure path: if you publish a chat, readers can see persona labels, and you can share persona information. The language model also receives persona descriptions during a multi-persona chat.

This is a narrower question than whether Janitor AI chats are private. A persona is the identity and description you use to speak in a conversation. A bot is the character you talk to. A chat is the exchange between them. A privacy claim about one does not automatically apply to the others.

Sources below were reviewed on November 7, 2026. They describe Janitor’s published guidance, not a test of every current signed-in account or a guarantee about future settings.

Janitor has not documented a blanket private-by-default persona rule

The short version: The official pages reviewed here explain how to create and switch personas, but do not say that all saved personas are private by default or specify every place another user might see one.

Janitor’s persona editing and switching guide describes a Main Persona in account settings and additional personas under “My Personas.” It explains where to edit their descriptions and how to pick one for a chat. That tells you how personas work as an account feature. It does not, on its own, establish a privacy default or a complete audience list for persona names, images and descriptions.

There is one detail worth checking if you use your real photo: the guide says your Main Persona uses your profile picture, and changing that picture changes both the persona and the profile. It does not tell us exactly who can see either image in every context. Still, using a recognizable picture for a fictional identity deserves a second look before you share anything publicly.

Do not confuse “I can manage this under My Personas” with “only I can ever see this.” The documentation supports the first statement. It does not prove the second. If the current signed-in interface offers a visibility choice for a persona, read the wording for that persona rather than assuming every persona has the same setting. If the interface leaves the audience unclear, ask Janitor support before adding identifying details.

Publishing a chat can reveal persona labels and information

The short version: Janitor’s public-chats announcement says a published chat labels each persona and can share persona information. This is a documented way persona details can reach other people.

Janitor says the publisher can turn a chat into a public snapshot. Readers can read it, react, comment and fork it. In the same announcement, Janitor says that when you publish a chat, you can share persona information; readers see each persona labeled. It also says a person who forks the chat gets a persona switcher containing the original personas alongside their own.

That is more than a risk that a name appears in a message. If a persona description contains a real hometown, workplace or social handle, sharing its information could expose something you did not mean to publish. Even without sharing a full description, a label or a line of dialogue can identify you if you wrote it that way. Treat the public snapshot as content someone else can read and save, not as a private conversation with a public bot.

The announcement does not specify precisely which persona fields are included with every published chat, or whether sharing persona information is enabled by default. Do not turn “can share” into “always shares” or “never shares.” Before publishing, inspect the current signed-in flow and its preview for persona labels, descriptions, images and any sharing choices. If the preview does not resolve what strangers or forkers receive, keep the chat unpublished until you have an answer.

Janitor says publishers can unpublish a chat, but that does not establish that screenshots or copies made while it was public disappear. The safer time to remove personal details is before posting.

A public bot is not the same thing as your persona or chat

The short version: The character’s listing, your selected persona and your conversation have different roles. No single “public” label answers all their privacy questions.

Suppose you select a persona to talk to a character other people can find. The character’s public listing tells you that others can find the character. It does not prove that they can browse your saved personas or read your conversation. Janitor’s public-chats announcement separately describes the action of publishing a chat and says published chats can appear on character pages. Those are distinct from merely using the character.

The reverse mistake matters too. Keeping a bot unlisted or choosing a private conversation should not be treated as proof that your persona description is inaccessible to the service or to a model processing that conversation. Janitor’s announcement explicitly says the language model receives persona descriptions when multiple personas are used in a chat. That is a processing path, not public access by another reader.

For the broader distinction between chat-sharing, service access and any external model endpoint, see the Janitor AI privacy guide. It covers those issues in depth; the specific concern here is what happens to the identity you write into a persona.

Check the audience before adding identifying details

The short version: Review each persona, the active chat and any publish preview in your signed-in account. If a control or disclosure is unclear, treat the audience as unverified.

Start with the actual persona you plan to use. Look at its name, picture and description. Pay special attention to a Main Persona that shares your profile picture, as Janitor’s persona guide describes. Decide whether any of those details would bother you if they appeared next to a public chat.

Next, check the conversation separately. Has it been published, shared by link, captured in a screenshot or exported? If you plan to publish it, inspect what the current publishing flow shows about persona information and what a reader or fork recipient would receive. Janitor’s announcement gives the reason for this check, but cannot stand in for the current account interface.

Finally, consider who processes the description even if you never post the chat. Janitor says the model receives persona descriptions in multi-persona conversations. Its privacy policy describes service providers performing platform functions, while its safety page says it does not sell personal data or share private conversations for advertising or commercial purposes. Neither statement proves zero processing access to persona text. If you use an external model endpoint, check that provider’s terms too.

You can keep a persona useful for roleplay without tying it to your offline identity. A fictional name and invented details are easier to share intentionally than a real address or a recognizable photo. If minimizing cloud model exposure is important, compare offline AI companion setups, then verify the active route and any fallback in the app you choose. Local storage alone is not an encryption promise.

Official sources and what they do not establish

The short version: Janitor documents persona editing, model context and publication, but these sources do not establish a universal saved-persona visibility default.

• FAQ: How to Edit & Swap Personas - persona creation, account locations and the Main Persona’s shared profile picture; reviewed November 7, 2026.
• Public chats are here - multi-persona model context, public snapshots, persona labels and optional sharing of persona information with readers and forkers; reviewed November 7, 2026.
• Janitor AI Privacy Policy and Safety at Janitor - platform data handling and the narrower advertising-related commitment; reviewed November 7, 2026. Neither gives a blanket persona visibility rule.

The useful answer is conditional: saved-persona privacy is not established by these public documents, but published chats have documented ways to expose persona details. Check the particular persona and the current publishing controls before assuming anyone else can or cannot see it.

Questions people ask

Back to the blog