Brave Leo — privacy & data policy

Provider: Brave. PromptPrivacy score: 93/100. Last verified August 26, 2026.

What happens to your data?

When you submit queries to Brave Leo, your input is sent ephemerally to generate an answer without logging your IP address or personal details, and it is discarded from servers immediately after completion. Your chat history is stored only on your local device under encryption and is never uploaded to the cloud or used to train AI models. Even for paid subscriptions, Brave uses unlinkable tokens so your usage cannot be connected to your identity or billing information.

Does it train on your data?

Brave does not use user conversations, prompts, context, or responses to train AI models.

Can you opt out?

Yes. Conversation storage is optional and can be toggled off or cleared in settings. Free use requires no account, product analytics can be disabled, and submitting feedback or diagnostic data is entirely voluntary.

Data retention

Prompts, responses, and contextual inputs are processed ephemerally on Brave's servers and discarded immediately (with brief caching of large prompts lasting only minutes). If the user enables chat history, conversations are stored locally on the device until cleared. If a user voluntarily submits feedback via thumbs-up or thumbs-down ratings, the submitted conversation text is stored on Brave's servers for up to 1 year.

Encryption & security

Saved conversation history is encrypted and stored locally on the user's device. Brave proxies queries to strip IP addresses and identifiers. The policy does not specify enterprise-level security certifications such as SOC 2 or ISO 27001.

Is it safe for work?

Yes. Brave Leo has strong privacy-by-design standards, including zero server-side retention of prompts, no AI model training on user data, IP address stripping, and unlinkable tokens for premium tiers. However, enterprises requiring centralized administration, enterprise Data Processing Agreements (DPAs), or formal SOC 2/ISO certifications should review their specific compliance requirements.

Source policy: https://brave.com/privacy/browser/