Codeway
By default, your conversations can train the models, and deletion is conditional by design: safety flags override it and copies travel past the company you typed to. What was absorbed into a trained model does not come back out.
Reported incidents
300 million chatbot messages left open in a misconfigured database
2026-01-29Affected Chat & Ask AI app
On 29 January 2026 404 Media reported that Chat & Ask AI, a chatbot app from the developer Codeway that claims more than 50 million users, had left users' conversations reachable through a misconfigured Google Firebase backend. An independent researcher said he could reach about 300 million messages tied to more than 25 million users, including full chat histories, timestamps and model settings. The messages included questions about suicide and drug manufacture. The app passes chats to models from OpenAI, Anthropic and Google. Malwarebytes reported that Codeway fixed the problem across its apps within hours of being told.
People affected typically ask Codeway to confirm whether their information was included, and which categories.
The verified route
DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.