Janitor.AI Review (2026): The Free, BYO-Key NSFW Roleplay Platform

Janitor.AI mostly doesn’t want your money. It wants your model. That’s the entire business model, and it’s also why it’s been the strange fixture in this category since 2023. While every other app in our review pile is trying to work out whether annual billing closes better than monthly, Janitor is sitting there with a free tier that actually works, an optional subscription it only added in June 2026, 2.2 million+ user-made character cards, and a default LLM you can use for free while the power users quietly pipe in their own OpenAI keys or Claude-via-proxy setups for the unfiltered experience. It is, by some distance, the most unusual product in the category.

The first character I loaded up was a noir detective card someone had uploaded in 2024 with a 3,200-token persona block (specific accent, specific tics, specific backstory), and on the free JanitorLLM the chat held together for close to two hours before I got bored. That’s a longer runway than I expected from a free default, and when the free model does run out of memory you can swap in a bigger one, because Janitor is a thin shell around whatever model you choose.

My one-line verdict: if you’re comfortable with the concept of a proxy key and you’ve used any other chat app in this category, Janitor is the one you graduate to. If you want a single monthly subscription and a friendly onboarding flow, stop reading and go back to Candy.

How the chat actually holds up

This is the weird part of reviewing Janitor: the chat quality isn’t really Janitor’s to take credit or blame for. On the free JanitorLLM default, replies are competent: coherent, in-character, reasonably varied. Better than a bad day on CrushOn, worse than a good day on Candy. Context is the catch. Janitor’s own help pages put the free tier at around 9k tokens, which covers a scene or two but not a months-long story, so on long roleplays the free model starts dropping details. janitor+ raises that about fivefold, and a model you plug in yourself brings its own context window. That’s how the power users avoid the “she forgot my character’s name on page 40” complaint that dogs half this category.

Plug in your own key (OpenAI for GPT-4-class output, Claude via one of the community proxies for the writing quality, an Aphrodite instance for the properly unfiltered stuff) and the ceiling raises to whatever model you’re paying for directly. I ran the same scene through JanitorLLM, GPT-4o, and Claude via a proxy, and the Claude output was straightforwardly the best-written of the three: better sentence rhythm, less genre-purple, more willingness to let a scene breathe without rushing toward payoff. That’s not Janitor doing anything clever. That’s Claude doing what Claude does. Janitor’s contribution is that it lets you bring Claude to a character-card interface without friction.

One in-chat example, paraphrased, that captures the house style when it’s running on a good model and a well-written card:

She didn’t look up from the case file. “You’re going to ask me about the Blackwood thing again. Fine. But you’re buying, and I’m ordering the expensive whiskey this time.”

That’s a character tracking the conversation history, referencing an earlier bit, and negotiating within scene. It reads well because the card was good and the model was Claude. Swap in a lazy card and JanitorLLM and you get something closer to “she smiled warmly and said she was glad to see you,” which is the default failure mode of the entire category.

Characters and community

Over 2.2 million cards is the number Janitor itself cites: 2,219,568 on the homepage counter as of June 2026, alongside a “15M+ users” claim, with the site still wearing its beta badge. The browse experience makes the scale believable. The quality curve is steep: the top 100 cards by interaction count are genuinely well-written, often with 2,000+ token persona blocks, sample dialogue, scene setters, the works. The long tail is the usual user-generated content swamp: one-paragraph descriptions, stock anime pictures, inconsistent grammar. You learn to browse by popularity within the first ten minutes.

The community is the other asset, and it’s split across Reddit (r/JanitorAI_Official and the unofficial subs) and Discord. This is where the proxy key culture lives: people sharing setup guides, troubleshooting when a given proxy goes down, recommending cards. It’s more technically literate than the average AI companion community by a wide margin. If you post a question about a specific model behavior you’ll get a real answer. If you post the same question on the Candy subreddit you’ll get a joke.

Model options and the proxy question

The default is JanitorLLM. Free, around 9k tokens of context, decent prose, moderate filter. For a lot of users this is the whole product, and that’s fine.

The classic upgrade path is your own key. Proxies still work, and support for Chutes and NanoGPT came back in June 2026:

• OpenAI direct: paste your API key, pick a model, pay OpenAI for the tokens. Clean, simple, filtered by OpenAI’s policies which means NSFW is limited.
• Claude via proxy: community proxies route your requests to Claude with a jailbreak prompt layer. Best writing in the category, sometimes flaky, proxies go up and down. The Discord keeps you current on which ones are live.
• Aphrodite / reverse proxies: the fully unfiltered route. Running open models or jailbroken commercial ones. Most setup overhead, fewest content restrictions.

None of this is hard if you’ve touched an API key before. All of it is intimidating if you haven’t. Janitor’s onboarding assumes you have. There’s no hand-holding flow that walks a first-timer through getting a proxy set up. You figure it out from the Discord or you don’t. The janitor+ Router (below) is Janitor’s answer to that.

What changed in 2026

On June 24, 2026 Janitor launched janitor+, its first paid subscription. Per Janitor’s announcement it gets you 5x more context than the free tier, priority access for faster replies, a monthly allowance of swipes on their best models, and a golden username with a checkmark. Janitor’s FAQ doesn’t list a price. Third-party reports put it at about $13 a month. Janitor also wrote “We will always keep a free option available for everyone,” and so far the free tier is intact.

On July 30 came the janitor+ Router, which puts third-party models inside Janitor with per-token pricing. No API key, no proxy setup. It’s aimed at exactly the people who wanted better models but bounced off the proxy guides. I haven’t tested janitor+ or the Router yet, so treat this as what Janitor offers, not a verdict on it.

The other change: there’s an official iOS and Android app, in public beta since February 7, 2026. Before that, mobile meant the browser.

Pricing

Janitor itself is still free to use. The optional janitor+ subscription exists now (see above), but the free tier is not a trial or a teaser. For a lot of users it’s still the whole product.

What you pay is whatever your model costs. OpenAI charges per token; a moderate-usage chat habit might run $5-15/month. Claude via proxy varies by which proxy (some community ones are free, some are donation-funded, some are paid). Aphrodite on your own hardware is free if you already have a GPU. The Router also charges per token, you just pay Janitor instead of setting up a provider account. Most users end up spending less on Janitor plus a key than on a single Candy annual subscription and getting access to better models in the bargain.

The catch: your spending is variable and uncapped. A runaway chat session on GPT-4 can burn $3 in an evening. If predictable pricing matters to you, this is a real downside compared to flat-rate apps.

How uncensored it actually is

Depends entirely on what you plug in. JanitorLLM has a moderate filter, closer to Candy’s than to Muah’s. OpenAI direct is tightly filtered by OpenAI’s policy. Claude via proxy with a decent jailbreak prompt is fully functional for most NSFW scenarios. Aphrodite on an open model is as unfiltered as the model you’re running.

This is the real pitch of Janitor: the filter is a property of your model choice, not of the platform. If you want hard-filter, run JanitorLLM. If you want zero-filter, run an uncensored open model. Every other app in this review forces you to accept whatever filter the platform decided on. Janitor delegates the decision to you.

Privacy

No publicly known breaches as of this writing. Chats on the default JanitorLLM run through Janitor’s infrastructure, which is the same threat model as any other hosted chat app: assume not zero-knowledge, behave accordingly. Chats that go through your own OpenAI or Claude key run through those providers under their own privacy policies, which in both cases means the prompts are visible to that provider and may be used for abuse monitoring, though not (per their current policies) for training.

If you’re running Aphrodite locally, you’re the only one who sees the chats. That’s as private as this category gets.

One new wrinkle: since June 15, 2026 Janitor has required age verification in some regions, including the UK, Australia and Brazil, because local laws demand it. If you’re in one of those countries, that’s one more piece of personal data leaving your hands.

Who should buy it

• People who’ve already used a couple of paid apps and want something with more control
• Users comfortable with API keys and proxy setups, or willing to learn
• Anyone who cares about long context and good writing and wants access to Claude-level output
• Users who want to pay per use rather than a flat subscription
• People who don’t need image gen or voice (Janitor has neither)

The verdict

Janitor.AI is the enthusiast’s pick in a category full of subscription traps. It’s free to start, better than most paid apps once you plug in a real model, and the only product in this review where you can upgrade the underlying LLM instead of the UI around it. The downsides are real: no image generation, no voice, a setup curve that assumes technical literacy, and variable API spending that can surprise you.

Would I use it? I do. It’s where I run most of my actual long-form roleplay sessions, because nothing else in this category lets me swap in Claude this easily. For the first-timer who just wants a working AI girlfriend, Candy or SpicyChat is the better answer. For anyone who’s already been through that ride and wants to keep going, Janitor is where the ceiling raises. The tradeoff is fair, and unless you opt into janitor+, the price on Janitor’s side of the ledger is still nothing.

Frequently Asked Questions

Is Janitor.AI really free?

The free tier is. Since June 2026 there’s also an optional paid subscription, janitor+, with 5x more context, faster replies and extra swipes on Janitor’s best models (third parties report about $13 a month). The default JanitorLLM, with around 9k tokens of context, still costs nothing, and Janitor says it will always keep a free option. If you bring your own model via API key or proxy, you pay that provider directly (OpenAI, Anthropic, or whoever), but Janitor itself takes no cut.

What models can you use on Janitor.AI?

The default is JanitorLLM, a free model built into the platform with around 9k tokens of context. Since July 2026 the janitor+ Router also sells third-party models inside Janitor per token, no key or proxy needed. Power users still plug in OpenAI keys for GPT-4-class output, community Claude proxies for the best writing quality, or Aphrodite / reverse proxies for fully uncensored open models. The setup for proxies isn’t hard but it’s not beginner-friendly either.

Is Janitor.AI uncensored?

The default JanitorLLM has a moderate filter. Uncensored operation depends on which model you plug in. Claude via a jailbroken proxy or an open model through Aphrodite will run essentially unfiltered scenes. OpenAI direct is tightly filtered. The big advantage over paid apps is that you control the filter by picking the model, rather than accepting whatever the platform enforces.

Does Janitor.AI generate images or voice?

No. It’s chat-only. If you want image generation, Candy.ai or DreamGF are the defaults. If you want voice, Nectar.ai or Muah.ai. Janitor is a pure text roleplay platform and it doesn’t pretend otherwise.

Is Janitor.AI safe?

No publicly known breaches, which is more than Muah.ai can say. Assume chats on JanitorLLM are not zero-knowledge, the standard caveat for any hosted chat app. If you plug in your own key, the provider you’re using (OpenAI, Anthropic, etc.) can see the prompts under their own policies.

How does Janitor.AI compare to Candy.ai?

Different products. Candy is a polished paid app with chat + image + voice, best writing on its own model, $3.99/mo annual. Janitor is a free platform that’s better than Candy once you plug Claude into it, worse than Candy out of the box, and requires more setup. For first-timers, Candy. For anyone willing to manage a proxy key, Janitor.