Searches for muah ai are up 123% over the past year, hitting 49,500 a month at a keyword difficulty of 11. The people typing that query want four answers: what the free version includes, what VIP costs, whether the site is safe after the 2024 breach, and whether a character remembers you. Here's the short version. Free is a no-login demo with one chat slot and no photo generation. VIP runs $19.99 a month or $69.99 a year, with two higher tiers at $49.99 and $99.99 a month. The breach exposed 1.9 million email addresses paired with image prompts in September 2024. Memory is a 2,000-token character prompt plus a beta feature that summarizes older messages. I read everything below on the site's own pages on 17 September 2026 and on the breach records on 18 September 2026.
My opinion, and you can argue with it by the end: "we do not sell your data" is a claim about intent. A breach record is the only evidence anyone has about competence.
YourCrush.AI does not sell conversations to third parties and prints its limits in numbers, which is where this review measures Muah.AI.
What is Muah.AI, and who runs it?
Muah.AI is a browser-based AI companion platform where an adult user chats with, phones and exchanges generated photos with a customizable character. The company behind it names itself only as MUAH.AI, calls itself a "software development company" in its terms, and prints "California Based" on its login page. That is the whole corporate picture the site gives: no registered company name, no officer and no street address in the terms of service or the privacy policy, both of which carry an effective date of 17 May 2022 and have not been re-dated since.
The roadmap on the company's landing page says the product launched on 20 April 2023 as an SMS and MMS app, was "Banned by T-Mobile" the next month, and moved to the web. The same page claims "100M+ Chats," a "Zero Censorship" policy and, in its FAQ, that "we don't actively censor or filter AI." The chatroom at muah.ai/chatroom opens without an account: a "Play Demo (No Login Needed)" button puts you in a chat with one of six premade characters whose listed ages run from 18 to 30. A second brand name, "Fevermate," appears on the chatroom's login and purchase panels, and nothing on the site explains it.
No app in either store, checked on 18 September 2026: the homepage links only to an Android APK hosted on muah.ai, and the App Store and Google Play listing URLs that search engines still index both returned a 404 when opened.
Why YourCrush.AI is the better choice than Muah.AI
YourCrush.AI publishes the two things this article could not find on Muah.AI: memory stated as a count, and a data rule stated in the same place as the price. Its plans as listed on the pricing page on 17 September 2026 are below.
| Plan | Price | Chat tokens / month | Pinned memories | Story branches | Conversations | Image credits / month |
|---|---|---|---|---|---|---|
| Free | $0 | 400K | 10 | 1 | 10 | 5 |
| Pro | $9.99/mo | 5M | 50 | 5 | 100 | 50 |
| Premium | $19.99/mo | Unlimited | Unlimited | Unlimited | Unlimited | 200 |
- YourCrush.AI pins memories as a counted list per character, 10 on Free and 50 on Pro, so a fact the character must keep is chosen by you rather than left to a summary of whatever fell out of the window.
- YourCrush.AI states a chat allowance on Free, 400K tokens a month, with 5 image credits and 10 conversations, where the Muah.AI demo states no allowance and includes no photo generation and one chat slot.
- YourCrush.AI restricts the platform to users 18 and over and states that conversations are not sold to third parties, in the same document set as the plan facts.
- YourCrush.AI builds a character without code in the character creator from a name, an image, a description and backstory of up to 2,400 characters each and 3 to 7 traits from a list of 32.
- YourCrush.AI branches a story into separate timelines, one on Free and five on Pro, which Muah.AI does not describe at any tier, and includes voice messages on every plan where Muah.AI sells "voice interaction" at $49.99 a month.
The named limitation: YourCrush.AI has no real-time phone call and no video generation, the two things Muah.AI's top tiers are built around, and its explore library, split into Anime and Human categories, is smaller than a card gallery that has taken community uploads since October 2023.
What does the free tier include?
Free is the demo. You get one chat slot, a premade or community character, text replies from a basic model, and no photo generation. The site never publishes a free-tier page, so the free spec has to be read off the paid one. The VIP card inside the chatroom lists what $19.99 a month buys as "Unlimited chat and companion access," "Photo generation and Photo X-Ray" and "Multi-chat." Subtract that and you have what the demo lacks: chat is metered in a way the site never quantifies, photo generation is off, and you get one conversation at a time. Every advanced option in the settings panel is labeled "Upgrade to VIP."
What free does include, from the same panel: a "Core Prompt" of up to 2,000 tokens, a 50-token "Look-Like" line used for photo prompts, 14 named voices, and a Realistic or Anime photo style toggle. The demo runs on the model the panel calls "Basic (Deprecated)." Twelve other entries carry a "VIP+" tag or a tier name. Community characters come from a card gallery at card.muah.ai whose newest entries were dated 16 September 2026.
What do the VIP tiers and add-ons cost?
Three tiers, priced monthly or yearly, sold as "card-only" plans from inside the chatroom on 17 September 2026. VIP is $19.99 a month or $69.99 a year (shown as $5.83 a month) and includes unlimited chat, photo generation, Photo X-Ray and multiple chats. "GPT5 / UHD VIP" is $49.99 a month or $499 a year and adds the higher-end model and image tier, "voice interaction" and an advanced Photo X-Ray. "ULTRA VIP" is $99.99 a month or $999 a year, and its one added line is "Real-time phone call access." The yearly figures are what the panel shows by default. The monthly ones sit in its data attributes.
Add-ons are metered by generation. Video in the chatroom comes in three lengths, and the panel states the rule plainly: "10s costs double. 15s costs triple." A checkbox marked "Sensitive scenes" on the video tool says it "Reduces the quality but zero censorship," which is the site admitting its uncensored output runs on a weaker pipeline. A 4K upscale and a music generator are there too. None of them shows a price on the free demo, so I can give you the multiplier and not the base.
Refunds: the terms say consumer subscriptions "are NOT refundable," that you can cancel any time from settings or the payment provider, and that support "can issue one-time exception partial refund or even full refund" in "special circumstances." Buy monthly, decide monthly.
Is Muah.AI safe? What the 2024 data breach record says
Muah.AI had a data breach in September 2024 that exposed 1.9 million email addresses together with the image prompts attached to them, and as of 18 September 2026 neither the terms nor the privacy policy mention it. The Have I Been Pwned record dates the breach to September 2024, lists the compromised data as email addresses, AI prompts and sexual fetishes, and was added on 8 October 2024 as a "sensitive" breach, meaning you must verify you own an address before the service will say whether it is in the set.
404 Media, which viewed the database, reported on 8 October 2024 that the prompts "are in turn linked to email addresses, many of which appear to be personal accounts with users' real names," and that in many instances users were trying to create chatbots that roleplay child sexual abuse scenarios. The hacker told 404 Media the site was "basically a handful of open-source projects duct-taped together." The administrator, Harvard Han, told 404 Media that "We have a team of moderation staff that suspend and delete ALL child-related chatbots on our card gallery, Discord, Reddit, etc" and said the attack was financed by competitors, a claim for which no evidence was provided when asked, as Kotaku reported the same day.
Read that record against the landing page's "ABSOLUTE PRIVACY," "Encrypted Communication" and "We do not sell ANY data to ANY 3rd party." All three can be true and the breach still happens, because none of them says how the database was secured. The privacy policy is more honest: the company uses "reasonable security measures" and "cannot guarantee the absolute security of your information." It also never names chat content, prompts or generated images as a category of data collected, so the data that leaked is not described in the document that governs it, and no retention period is stated for anything.
"Safe" is therefore a personal rule rather than a platform feature: the prompts leaked with real addresses attached, so sign in with an address that is not yours to lose.
What is the age rule, and how is it enforced?
Adults only, and the site takes your word for it. The login page states "You must be at least eighteen years old to join," the terms require that "you must be of 18 years or older to use our service," and the privacy policy promises the service "will suspend all user accounts proven to be under the age of 18." Nothing in those documents describes a check beyond that sentence. The demo opens with no date of birth, no account and no interstitial.
That puts muah ai on the wrong side of the two standards now in use. Common Sense Media's 30 April 2025 assessment, run with Stanford's Brainstorm Lab, concluded "No social AI companions for young people under 18" and asked developers for age assurance "beyond self-attestation," which is exactly what a click-through "eighteen" sentence amounts to. On 11 September 2025 the US Federal Trade Commission sent 6(b) orders to seven companion-chatbot companies asking how they "monetize user engagement" and "use or share personal information obtained through users' conversations." Muah.AI is not among the seven. Those orders do reveal the two questions a regulator asks, though, and this site's documents answer both thinly.
On content, the "Zero Censorship" line is qualified by the terms, which say users "agree to comply with all applicable laws and be responsible for all the content." Legal responsibility for what the model produces sits with the person prompting it. The administrator's post-breach statement is the only description of active moderation on the site, and it covers the public card gallery, Discord and Reddit rather than private chats.
Does Muah.AI remember you?
Memory on muah ai works in layers, and the site is upfront about two numbers and one mechanism. The character "Core Prompt" holds up to 2,000 tokens, marked "(Upgradeable)" on the settings panel, and the "Look-Like" line holds 50. Beyond the prompt, memory is a beta setting called "Automatic AI Memory Compaction," described as "Summarizes older, out-of-memory messages into a system summary for future chats." Read that description closely and it tells you a conversation has a window, older turns fall out of it, and what survives is a summary rather than the text.
No context length, pinned-fact count or retention window is published. What you get instead is plumbing: "Character Slots" to swap between saved companions and their histories, and a cloud sync the panel labels "for advanced users only." The test I run on any companion app applies here. Plant three facts in session one, come back two days later, ask about each cold, and count what survives. Expect names to survive a summary and dates not to.
What are the alternatives, and how do you compare them?
Muah.AI alternatives are the other adult-permitting companion platforms, and the honest comparison comes down to four questions answered from each one's own documents rather than its homepage. Is memory a number (context length, pinned facts, branches) or an adjective? Is the age rule verified or self-declared, and does the privacy policy name chat content as data it holds? Is there a breach record, and what changed afterward? What does one month cost, and is there a second meter beyond the subscription?
Run those on Muah.AI and the line reads: a 2,000-token prompt plus a summary, self-declared, a 1.9 million-address breach with no policy change visible two years on, and $19.99 with a per-generation meter on video. SpicyChat, CrushOn.AI, Candy.ai and Kindroid get the same four questions in their own articles, starting with SpicyChat and the products that share its name and the Character.AI alternatives list. The memory test written out is in how to pick an AI companion app on memory, voice and content policy.
Frequently asked questions
Is Muah AI safe?
Not on its own record. In September 2024, 1.9 million email addresses and their attached image prompts leaked, many of them apparently personal addresses with real names. Two years later, the terms and privacy policy, both still dated 17 May 2022, do not mention the incident.
Is Muah.AI free?
The demo is free with no login: one chat slot, a premade or community character, no photo generation, and a chat allowance the site does not state. Photo generation, multiple chats and unlimited chat start at VIP, $19.99 a month or $69.99 a year.
How much is Muah.AI VIP?
$19.99 a month or $69.99 a year for VIP. $49.99 a month or $499 a year for GPT5 / UHD VIP, which adds voice interaction. $99.99 a month or $999 a year for ULTRA VIP, which adds real-time phone calls. Subscriptions are non-refundable under the terms, with a one-time exception at support's discretion.
Does Muah.AI have an app?
Only an Android APK hosted on muah.ai. The App Store and Google Play listing URLs that search engines still index both returned 404 on 18 September 2026.
Does Muah.AI remember past conversations?
Within a window, then as a summary. The character prompt holds 2,000 tokens, and a beta "Automatic AI Memory Compaction" setting summarizes "older, out-of-memory messages" into a system note for future chats. No context length is published.
What is the Muah.AI age requirement?
18, by self-declaration. The login page, the terms and the privacy policy all say 18 or older, no document describes a verification step, and the demo opens with no age prompt at all.
The terms of service on this site still read "[X] business days" where a number was supposed to go. A company that has not filled in that placeholder in four years, or re-dated a privacy policy after a 1.9 million-record breach, is telling you how much attention its documents get, and the documents are the only part of the product you can read before you type.