Protect your privacy when using AI

Avoid pasting passwords, account numbers, identity documents, private messages, medical records or confidential work material. A name combined with a workplace, location or event can also identify someone.

Replace details with labels such as [CLIENT], [DATE] or [AMOUNT]. Use a fictional example when the real one is not necessary. Do not share someone else’s personal information without a clear reason and permission.

AI providers have different privacy terms, settings and data practices, and these can change. Read the current information for the specific service and account you are using. Do not assume a setting from one service applies to another.

The Office of the Privacy Commissioner of Canada describes privacy-protective principles for generative AI, including limits on collecting and using personal information. For personal use, the simple habit is to share less and check first.

HelloAIKit’s public helpers run in your browser and do not send what you type to HelloAIKit. When you copy a prompt into a third-party AI service, that service receives the material you paste; its own privacy terms apply.

If you accidentally shared sensitive information, follow the provider’s current account guidance and your organization’s incident process. A privacy checker can catch some patterns, but it cannot identify every sensitive detail.