Mistral AI · Mistral AI Privacy Policy

Memory Feature and Sensitive Health Data Storage

High severity
Share 𝕏 Share in Share 🔒 PDF

What it is

Le Chat's Memory feature stores details from your conversations to personalise future responses, and if you mention health or other sensitive information, this may be saved as a 'Memory' — requiring your explicit consent for that sensitive data.

Consumer impact (what this means for users)

If you mention health conditions, medications, or other sensitive details in Le Chat conversations, this information may be stored as a personalised Memory that affects future AI responses, and you must actively manage or delete these Memories in settings to prevent ongoing retention.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Delete Your Data
    Log into Le Chat, go to your account settings, find the Memory section, and delete individual Memories or turn off the Memory feature entirely to prevent storage of sensitive personal details from your conversations.

Cross-platform context

See how other platforms handle Memory Feature and Sensitive Health Data Storage and similar clauses.

Compare across platforms →
Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Sensitive health information you casually mention in a chat could be stored and referenced in future conversations without you being fully aware, raising significant privacy risks.

View original clause language
To enhance your experience on Le Chat via the Memory feature by providing you more relevant and personalized answers based on your past interactions with Le Chat. [...] Your Input (prompts). If you include sensitive data in your Input, such as health details, this data may be stored as a Memory to provide you with more relevant and personalized answers. [...] Our legitimate interest to provide you with an enhanced and personalized service. Your explicit consent for any sensitive data explicitly included in your input and saved as a Memory.

Institutional analysis (Compliance & legal intelligence)

(1) REGULATORY FRAMEWORK: This provision directly implicates GDPR Art. 9 (processing of special categories of personal data), which requires explicit consent (Art. 9(2)(a)) or another enumerated condition for processing health data. The policy claims to rely on 'explicit consent' for sensitive data saved as Memories, but the mechanism — derived from what a user types in a chat interface — may not meet the GDPR standard for freely given, specific, informed, and unambiguous explicit consent. French CNIL guidance on health data processing is particularly stringent. UK GDPR Schedule 1 DPA 2018 applies for UK users. (2)

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

  • FTC
    The FTC has authority over unfair or deceptive practices involving sensitive health data collection and has issued specific guidance on health data privacy, making it relevant to the Memory feature's implicit storage of health information from chat inputs.
    File a complaint →

Provision details

Document information
Document
Mistral AI Privacy Policy
Entity
Mistral AI
Document last updated
April 29, 2026
Tracking information
First tracked
April 30, 2026
Last verified
April 30, 2026
Record ID
CA-P-004352
Document ID
CA-D-00443
Evidence Provenance
Source URL
Wayback Machine
SHA-256
73a02ec10fcf1627015be32bbcec27aa65278073cf29aaf0a9823340b9de2a08
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: Mistral AI | Document: Mistral AI Privacy Policy | Record: CA-P-004352
Captured: 2026-04-30 08:58:00 UTC | SHA-256: 73a02ec10fcf1627…
URL: https://conductatlas.com/platform/mistral-ai/mistral-ai-privacy-policy/memory-feature-and-sensitive-health-data-storage/
Accessed: May 2, 2026
Classification
Severity
High
Categories

Other provisions in this document