Lesson 8 · Beginner 9 minutes Essential

What's Safe to Share with AI

Everything you type into a chatbot leaves your device. That's usually fine — but there are a handful of things you should never hand over, and one simple habit that makes almost everything safe.

By the end, you'll know:

  • What never goes into a chat box
  • The anonymize-in-30-seconds habit
  • What actually happens to your data
  • The settings worth checking once

The Lesson

One short lesson that protects you for every lesson after it.

1

The mental model: you're sending an email to a company

It helps to stop thinking of the chat box as a private notepad. When you type into a chatbot, your text travels to a server owned by a company, is processed there, and may be stored, logged, or reviewed.

So the test is simple: would you be comfortable emailing this text to a company you don't control? If not, don't paste it.

Same rule as a new employee: you wouldn't hand a brand-new hire the payroll file on day one. You'd give them what they need to do the task — and nothing more.
2

The never list

These shouldn't go into a consumer chatbot, ever:

Personal identifiers

Full names paired with addresses, phone numbers, dates of birth, ID or passport numbers.

Financial details

Card numbers, bank account details, account balances, tax IDs.

Health information

Diagnoses, prescriptions, medical records, insurance details — especially anyone else's.

Confidential work data

Client lists, contracts, unpublished financials, internal strategy, source code you don't own the rights to.

Passwords & keys

Passwords, API keys, login credentials, recovery codes. No exceptions.

Other people's data

Anything about a customer, patient, employee, or student that they haven't agreed to share.

One exception: if your employer provides an approved AI tool with a signed data agreement, follow their rules — they may permit more. When in doubt, ask before pasting.
3

The 30-second anonymize habit

Here's the good news: you can almost always get the same help without the sensitive details. Swap the specifics for placeholders.

Don't:
"Rewrite this email to Sarah Chen at Northwind Ltd (sarah.chen@northwind.com) about their £42,000 overdue invoice #INV-8841."
Do:
"Rewrite this email to a client contact about an overdue invoice. Keep it firm but polite, under 100 words."

You get the same writing help. The model never learns who your client is, what they owe, or that the invoice exists.

Names → "a client", "Person A"
Companies → "a supplier", "Company X"
Amounts → "a large invoice"
Dates → "last month"
4

What happens to your data

Policies differ by provider and change often, so check your tool's own privacy settings. But the usual picture is:

Free tiers often train on your chats unless you opt out. Paid or business tiers typically don't by default.

Chats may be kept for a period for safety, abuse review, or legal reasons — sometimes long after you delete them.

Human reviewers may read flagged chats at some providers. Another reason not to paste what you wouldn't email.

Deleting helps but isn't a guarantee. Best habit: never put it in to begin with.

5

Five minutes of setup worth doing once

Open your chatbot's settings and check these. The names vary slightly by product, but the options are usually there:

1

Turn off "improve the model" / training if you'd rather your chats not be used for training.

2

Check chat history & retention settings and clear old conversations you no longer need.

3

Review connected apps and extensions — revoke anything you don't recognise or use.

4

Turn on two-factor login so nobody else can read your history.

Do this once, benefit forever. Five minutes now saves a genuine headache later.
6

Beyond privacy: don't outsource judgement

Safety isn't only about data. It's also about what you do with the answer — and this connects straight back to Lesson 5.

Medical, legal, financial, safety — treat AI as a starting point for questions, never the final answer. Talk to a qualified person.

Anything affecting another person — a rejection, a review, a decision — needs a human in the loop.

If your name goes on it, you own it. That's true of a colleague's draft too.

The mindset that makes it click

Give them what they need, not everything you have

When a new employee asks for an example, you don't hand over the whole filing cabinet. You give the one document that does the job.

Minimum necessary information is both the safest and the most effective brief. Less clutter, better answers, nothing leaked.

Was this lesson helpful?

Your feedback shapes what we build next.

Did this lesson help you?

What's Next