Is Garfield AI safe with your data?
Garfield AI
Garfield Law Ltd
Partial disclosure · high confidence
Garfield AI earns a C (56/100) because it discloses its data practices only in part.
#46
of 216 apps ranked
56
score · Legal avg 43
+13
vs category average
Garfield AI commits in writing that client data is not used to train AI models and sets out named retention periods for each record type, but it says little about security controls, breach notification or protections for children.
What Garfield AI's privacy policy and terms of service say about your data
No training on your data
AI processing runs server-side in UK and EU data centres under contractual terms that prohibit using client data to train AI models, with prompts and outputs configured not to be retained beyond processing.
Retention spelled out by record type
Claim records are kept fifteen years from last activity, identity-verification records six years, accounting records seven years, application and error logs 90 days, and security and audit logs 24 months.
Named transfer safeguards and sub-processors
Recipient categories are listed with the providers behind them, and transfers outside the UK rely on named mechanisms such as the UK Extension to the EU-US Data Privacy Framework or the International Data Transfer Agreement.
Security and child-safety detail is thin
Storage is described only as "appropriately secured systems" with no encryption or access controls named, there is no breach-notification commitment, and the policy sets no age gate.
What the policy is silent or vague on
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: your ownership of generated outputs
- Not stated: protections for children's data
Garfield AI privacy rating
Details
- Category
- Legal
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-08-12
- Region scored
- Global / US-default
- Last assessed
- 2026-10-13
Documents examined
Other legal apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.