Is Janitor.AI legit?

What is Janitor.AI?

Janitor.AI is a free character-chat platform with 2.2M+ user-created characters and a 15M+ user base as of June 2026 (the site still labels itself a beta), a default in-house LLM called JanitorLLM (around 9k tokens of context on the free tier), and support for bringing your own LLM: OpenAI, Anthropic (Claude via proxy), Aphrodite, and others. It launched in June 2023 and reportedly crossed a million users in its first week. An official iOS and Android app has been in public beta since February 2026. Our full Janitor.AI review has the product detail.

Janitor doesn't charge for the core product. Until June 2026 all the money spent around Janitor went to external LLM providers (OpenAI, Anthropic) or to proxy hosts. Now Janitor sells janitor+, an optional subscription with 5x more context, faster replies and extra swipes on its best models, plus the janitor+ Router, which charges per token for third-party models. If you stay on the free tier, the legitimacy question barely comes up. There's no card to be charged, no subscription to cancel and no refund dispute to win. The things that usually make an adult-tech app feel scammy (deceptive billing, subscription lock-in) don't apply there. If you buy janitor+, check how it bills and how to cancel before you subscribe.

Who owns it?

Janitor.AI is operated by JanitorAI Inc., founded by Jan Zoltkowski in 2023. The company profile on Crunchbase lists it as US-based (San Francisco by one source, Boulder by another). The exact HQ is unclear, but it is a named US entity with a named founder. According to the site's own terms of use, payment processing services (when present, for tipping or premium features) are provided by JanitorAI Inc. and its affiliates including Dulova Investments Limited, registered in Nicosia, Cyprus (HE 477877).

That's more corporate transparency than Muah.ai provides, about the same as DreamGF, and less than EverAI (Candy.ai). Good enough for a product most people use for free. The bar on corporate identity is lower when the user isn't handing over money, and most Janitor users still aren't.

Track record

Three years of operation. No public data breach: Have I Been Pwned has no Janitor.AI entry. The community is active on Reddit (r/JanitorAI_Official) and Discord. The company has shipped steadily, released the in-house JanitorLLM model, maintained the character library against spam and duplicate-flooding at a scale most competitors don't attempt.

The one meaningful incident in Janitor's history is a commercial one, with no security angle. Sometime after launch, a subset of users powering their explicit characters via their own OpenAI API keys triggered an OpenAI cease-and-desist. OpenAI briefly blocked API access from Janitor-adjacent infrastructure, which pushed Janitor to accelerate its own JanitorLLM. This is a legitimate part of Janitor's history but it's not a breach or a scam. It's the kind of policy-enforcement event every adult-tech adjacent company eventually has with a mainstream AI provider.

User reviews and sentiment

Reddit sentiment on r/JanitorAI_Official is generally positive but contains a steady background of complaints about Proxy Error 429 (the rate-limit error you see when community-provided reverse proxies are overloaded). Power users rotate between proxies, maintain their own OpenRouter keys, or switch to direct-key setups. Users who expect a plug-and-play experience find the BYO-key workflow frustrating. Users who want to tinker love it.

Common praise points:

• Free core product. No bait-and-switch paywall. janitor+ sells 5x more context, but the free tier stays, and Janitor says it always will.
• Character library scale. 2.2M+ characters is larger than any paid marketplace's library, by orders of magnitude.
• Model flexibility. Plug in the model you want: OpenAI, Claude via proxy, OpenRouter aggregators, local Aphrodite.
• Community. Active Discord, responsive mods.

Common complaints:

• Proxy reliability. Community proxies rate-limit or go down, and errors 429 and 401 are a recurring nuisance.
• Default model quality. JanitorLLM is fine for casual use but noticeably below OpenAI/Claude output for long-session roleplay.
• No images, no voice. Pure text-chat. Competitors like Candy and Muah have integrated generators.

Red flags and concerns

Specific to Janitor, the concerns aren't about the company taking your money, since the free tier costs nothing and the paid one is opt-in. They're about operational risk:

• Community-hosted reverse proxies. When someone shares a free proxy in Discord, your chats pass through their infrastructure. A malicious proxy host could log prompts, steal API keys, or inject malicious responses. Evomi's proxy explainer and OneRep's safety writeup both flag this. Use your own key with a paid provider (OpenAI, Anthropic, OpenRouter) if you care about privacy at all.
• OpenAI TOS concerns. OpenAI's usage policies prohibit explicit sexual content generation. Using your OpenAI key on Janitor for NSFW characters is a TOS violation on OpenAI's side and has resulted in individual key bans. Your money isn't at risk. Your OpenAI account is.
• Dulova Investments payment entity. If you pay for something on Janitor (janitor+, the Router, tipping), the terms name a Cyprus entity among the payment processors. That's a longer remedy path than a US-based processor would be if something went wrong.
• Age verification in some countries. Janitor asks users in some regions to verify their age, because local laws require it: Australia and Brazil since April 24, 2026, and the UK since June 15, 2026. That means Janitor gets more personal data from you there than an email address.
• Content moderation is uneven. With 2.2M+ community-made characters, quality and compliance vary. Most users will never notice, but it's there.

Billing and payment safety

The core platform is free. The only Janitor.AI subscription is janitor+, launched June 2026 and optional. If you pay for the LLM powering your chats (OpenAI, OpenRouter, a Claude proxy), you pay those providers directly, on their billing rails, with their descriptors. OpenAI shows as "OPENAI" on your statement, which is not discreet. OpenRouter shows as "OPENROUTER", ditto. If discreet billing is part of what you need, Janitor's BYO-key architecture works against you.

For free-tier and BYO-key users this is still the cleanest payment story in the category. You pay the upstream provider, on their rails, with their refund policy. No middle-man to dispute with. We can't confirm what janitor+ shows up as on a card statement, so check your first charge.

Privacy posture

Janitor's own privacy policy is category-standard for a US-based platform. Chat content may be stored for service operation and abuse detection, and there's no end-to-end encryption claim. The bigger privacy consideration is the proxy situation covered above, because your chats are only as private as the proxy host you route them through. If you use your own key directly (no proxy), data flow is Janitor → provider (OpenAI/Anthropic), both of whom are subject to their own, typically mature, privacy practices.

Compared to the paid AI companion apps, Janitor is neither best-in-class (it doesn't claim E2E encryption, as OurDream's homepage does) nor markedly worse (it hasn't been breached like Muah). Used badly, it can put your chats on someone else's server. Used well, it carries about the same risk as using ChatGPT directly.

The verdict in detail

Janitor.AI is legit. The hardest-to-fake test for trust is "are users getting scammed out of money", and Janitor's core product costs nothing, so for free users the answer is trivially no. janitor+ and the Router are opt-in. The company exists, the founder is named, the jurisdiction is clear, and the three-year track record has no breach and no financial-fraud complaints. For anyone exploring the AI companion category on a budget, Janitor is the rational first step.

We give it a "Legit" rating rather than "Mostly legit" because the core product costs nothing, and the only billing surfaces (janitor+, the Router and tipping) are opt-in. The caveats above (proxy safety, OpenAI TOS, community-moderation quirks) are real, but they're matters of operational hygiene, and none of them is a reason to avoid the platform. Use your own OpenAI or OpenRouter key, don't route through random community proxies, and Janitor is one of the safest companion platforms to spend time on.

FAQ

Is Janitor.AI going to charge me?

Not unless you sign up for something. The platform is free to use. Since June 2026 Janitor sells an optional subscription, janitor+, and since July a per-token model Router for janitor+ subscribers, but both are opt-in. If you plug in a paid LLM provider's API key (OpenAI, OpenRouter, etc.), those providers charge you directly, on their rails, not Janitor's.

Can I get my OpenAI account banned for using Janitor?

Yes, if you use your OpenAI key for explicit content. OpenAI's usage policies forbid it. OpenRouter and several Anthropic proxies are more lenient. Read the upstream provider's policy before pointing your key at NSFW characters.

Are community proxies safe?

No. Assume they log everything. Use a paid provider's direct API key instead. OpenRouter is the easiest since it aggregates many models under one key.

Has Janitor.AI been hacked?

Not that we can find. Have I Been Pwned has no Janitor.AI entry as of 7 November 2026.

Is the default JanitorLLM any good?

Fine for casual roleplay, worse than GPT-4-class or Claude-class models for long sustained sessions. The BYO-key path exists precisely because power users want better output.

Should I use Janitor or pay for Candy / Muah / DreamGF?

If you want free, text-only, infinite character library, and are willing to manage API keys, go with Janitor. If you want images, voice, and a polished app with no tinkering, pay for one of the reviewed products. Both answers are defensible.