Muah AI: The Phone-Call Feature Is Real. So Is Everything Else.

Muah AI has the single most unique feature in the AI companion category — real-time phone calls with your companion, which nothing else offers at any price — and the single worst security record, and an honest page about it has to hold both facts at once. It's a 22,000-searches-a-month brand, people deserve the real answer, and the real answer is mostly a warning with a feature list attached.

The breach, plainly stated

In September 2024, Muah AI was breached: roughly 1.9 million email addresses exposed alongside the image-generation prompts tied to them — the most intimate data a platform like this holds. The breach is catalogued on Have I Been Pwned as a sensitive breach (searchable only by verified email owners, a designation shared with Ashley Madison). What made it notorious beyond its size: security researcher Troy Hunt documented that the exposed prompts included large volumes of child-exploitation requests — a finding covered by 404 Media and analyzed by law firm Linklaters, which noted that generating such material is a serious criminal offense in major jurisdictions — and the person who broke in described the platform's security as duct-taped. The aftermath compounded it: leaked data was used in extortion campaigns, with some victims targeted at their workplaces, and the CEO's public response attributed the breach to competitors and cited limited moderation resources. Since then the company reports tightened encryption and a one-step account deletion. The record is the record: if you had a pre-breach account, your email and prompts may still circulate, and checking Have I Been Pwned (the breach requires email verification to search) is the first errand this page assigns.

The rest of the trust file

The breach isn't the only entry. The Android app has been removed from Google Play (cycles of removal and reinstatement; current distribution is a sideloaded APK from the official site) and the iOS app is gone from the App Store. The platform was banned from Reddit's r/ChatGPT for operating a bot farm. Australia's eSafety Commissioner has published an advisory naming the platform's risks. And the "Photo X-Ray" feature — generating revealing versions of uploaded photos — carries consent implications the platform doesn't meaningfully address. Individually, any one of these appears somewhere in this category; collected on one platform, they're a pattern, and the pattern is the review.

What it actually offers, and what it costs

Fairness requires the feature list, because it's genuinely ambitious: uncensored multi-modal companionship — text, image generation (4K enhancement added late 2025), voice messages, voice cloning, community character cards — crowned by the real-time phone call, which testers confirm works and remembers the chat it interrupted, a capability with no equivalent anywhere. The known product flaws: chronic instability (crashes, characters confusing their own identities), memory drift within long sessions, and a dated interface. Pricing is unusually murky even by category standards — reported VIP rates span $9.99 to $19.99/month depending on source and date (~$69.99 annual), with UHD around $49.99 and the phone calls locked to ULTRA VIP at $99.99+/month — roughly $1,200 a year for the headline feature. Per the standing rule on this site: when sources conflict, the checkout page is the only authority.

If the phone call is what brought you here

The honest routing, by want. Voice conversation with a companion: Candy AI's voice calls and Kindroid's voice deliver most of the experience on platforms without breach histories, at a fraction of $99.99. Uncensored multi-modal on a budget: the usual trio — Candy, CrushOn, SpicyChat — covers text-plus-media with clean records. Maximum privacy for intimate use: after this page, the local-model route practically advertises itself, and the privacy rankings sort the cloud options. What none of them offer is the literal phone call — that trade, uniquely, is Muah's to sell, and the price includes everything above.

The verdict

Muah AI is the category's cautionary tale that's still open for business: genuinely pioneering features, operated with a documented disregard for the data those features generate, at prices that exceed safer rivals. Anyone who proceeds anyway should do it like a professional: dedicated email, virtual card, zero identifying details in any prompt, and the deletion button when done — the full hygiene protocol, executed without exceptions, because this is the platform that proved why the protocol exists. And anyone who was there before September 2024 has one piece of unfinished business tonight: Have I Been Pwned, your email, and whatever account cleanup the answer requires.

Related: Muah AI review