Is Replit safe with your data?
Replit
Replit, Inc.
Partial disclosure · high confidence
Replit earns a C (55/100) because it discloses its data practices only in part.
#87
of 116 apps ranked
55
score · Coding avg 56
-1
vs category average
Replit discloses data-subject rights across six US state regimes plus the EEA and UK, and commits to a 30-day account deletion window. It relies on a legitimate interest to improve the accuracy of its machine learning technologies such as code generation, names no training opt-out, and says nothing about output ownership or specific security controls, which holds the score in the low C band.
What Replit's privacy policy says about your data
Trains on code with no opt-out
The policy claims a legitimate interest in using information to improve the accuracy of its machine learning technologies such as code generation, and names no way to opt out of that use.
Clear deletion timeline
When you request to delete your account, Replit deletes your data within 30 days. The policy gives a specific number.
Does not sell personal information
Across the California, Colorado, Connecticut, Iowa, Utah, and Virginia sections, the policy repeats that it does not sell personal information as that term is defined under each state law.
Broad data-subject rights with a named channel
EEA and UK users get access, correction, restriction, objection, anonymization or deletion, and portability. State residents submit access and deletion requests by emailing privacy@replit.com or through account settings.
What the policy is silent or vague on
- Not stated: keeping user inputs out of model training
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: your ownership of generated outputs
Replit privacy rating
Details
- Category
- Coding
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2025-02-24
- Region scored
- Global / US-default
- Assessed
- 2026-06-20
Other coding apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.