Muah AI Review

First: the name

You'll see this written half a dozen ways — Moa AI, Mua AI, Mwah AI, Miah, Muwah. The site is muah.ai.

That isn't an accident of typing. A thread on r/ChatGPT documented a promotional campaign using deliberately varied spellings, with one poster noting:

It's alternatively spelled Mua, Miah, Mwah, Mwuah, and so on. The first part of their technique relies on avoiding automod filters.”

What you actually get inside Muah AI

So if you arrived here after seeing the name somewhere unexpected, start this Muah AI review knowing that.

The whole logged-in experience lives at one URL — /chatroom/. That name is misleading, so let's clear it up first.

It is not a group chat and it is not a public room. It's the app. Inside it you get Character Slots, which let you swap between saved companions and their chat histories. “Multi-chat” on the feature list means exactly that — switching, not combining.

If you've read that Muah has group chat, that's wrong.

What's genuinely in there:

The sampling controls nobody else exposes

Here's where Muah earns its Chat score, and it's a real differentiator.

It exposes the sampling parameters. AI Core Temperature sits right there in the interface at a default of 0.80, alongside Frequency and Presence controls.

Almost nobody else in this category does this. Candy AI doesn't. Secrets AI doesn't. You get what the product decides you get. Muah hands you the dials.

One long-term user summed it up:

Muah is the only NSFW service to let you play with Core Temp, Frequency and Presence, which gives you wide variability in AI Core behavior.”

That's a legitimate compliment and it's why the app has a committed core of users who won't move.

💡 What to actually do with them: raise Frequency penalty when replies start recycling the same phrases, which they will. Drop Core Temp toward 0.6 when you want her consistent, push toward 1.0 when a scene has gone flat. Presence is the one that stops her circling the same two topics.

And the counterweight, from a user two months in:

After several days of continuous chatting, the AI's communication is constantly shifting in a sexual direction. Personality settings have no…”

Consistent with what I found. The drift is real and the sliders only partly hold it back.

Uncensored mode is the lower-quality mode

This is a small thing in the interface that tells you a lot.

The NSFW toggle is a checkbox labelled Sensitive scenes, and the helper text reads:

Check this Box if you want to generate sensitive scenes. Reduces the quality but zero censorship.“

Read that again. The uncensored path is, in the product's own words, the worse-looking one. Presumably a separate, weaker unfiltered model sits behind that checkbox.

Every rival in this category claims uncensored generation at full quality. Muah is at least honest that there's a trade — but the trade means the thing you came for renders worse than the thing you didn't.

No image model is named. No resolution is stated beyond the marketing words “4K Enhance” and “UHD”. Video has no published length, resolution, cost or generation time. The Extend button implies clips are short.

Muah AI Pricing

Three tiers, all quoted as annual billing. I could not find a monthly-only price anywhere on the site.

There is no currency. No coins, no tokens, no credits, no per-photo or per-minute cost. Everything is tier-gated. After four reviews of token economies that's genuinely refreshing, and it's the reason Value isn't lower than 3.5.

But look at where the features sit. Voice — a standard feature on $10-a-month apps — is behind $499 a year. Phone calls are behind $999 a year. That is the most aggressive price point in the mainstream companion category by a wide margin, and there's no published call-length cap or quality claim to justify it.

⚠️ Treat “GPT5” as marketing. It's a tier name on their own checkout. There's no independent confirmation of what model runs behind it.

Instead of credits there's XP. You level up, and you're paid progression for promoting the product: +50 XP for sharing a photo to social media, +500 XP for sharing a video. Worth knowing what the reward loop is actually training you to do.

The 2024 breach — what happened, precisely

I'm going to be careful here, because this gets exaggerated in both directions.

The intrusion was September 2024. Disclosure came on 8 October 2024, when 404 Media published and Have I Been Pwned loaded the data. Most write-ups call it “the October breach” — that's the disclosure date, not the incident.

What was taken: Have I Been Pwned records 1.9 million email addresses, alongside AI prompts and stated sexual fetishes. It is flagged as a sensitive breach, meaning it isn't publicly searchable — you have to prove control of an address to see it.

How: the attacker described the site as “basically a handful of open-source projects duct-taped together” and said they found vulnerabilities “relatively quickly.” Neither party disclosed the specific flaw.

The serious part. 404 Media's reporting established that the leaked prompt data contained user-written prompts describing child sexual abuse. To be precise about what that does and doesn't mean: what leaked were text prompts written by users, tied to email addresses.

It is not a finding that the platform generated and distributed such material at scale, and no outlet published a verified per-prompt count.

What made it genuinely damaging was Troy Hunt's verification that the exposed addresses were not disposable throwaways — they were real, identifiable people, linked to what they'd typed.

The aftermath. Within days the data was being used in extortion attempts, and legal commentary at the time flagged reports of it being used to pressure employees into compromising their employers' systems. So it stopped being only a personal problem.

The company's response. An administrator posting as Harvard Han attributed the breach to “a targeted attack by competitors within the uncensored AI industry” and said the platform moderates underage content. He also stated the company's philosophy directly:

AI technology should be for everyone, and its use case to be decided by each mature, individual adult. So that means we don't actively censor or filter.“

Separately, when users reported an underage character on Discord, a moderator reportedly told them to post it elsewhere rather than acting on it.

What Muah AI changed after the breach

This is the part that decides the Trust score, and the honest answer is: very little that anyone can verify.

The privacy policy is still dated “Effective: May 17, 2022.” That date precedes the domain's own registration in May 2023. It contains no mention of the breach, no notification commitment, and no description of any security changes made since.

It specifies no data-retention period. It grants a right to deletion but gives no procedure and no timeframe.

The terms of service name no company. No entity, no registration number, no address. The only location claim on the entire site is a two-word footer string: “California Based.” The only contact is an email address.

The governing-law clause doesn't work. It says disputes are governed by “the laws of United States” and resolved by arbitration “in accordance with the rules of United States.” There is no such body of consumer contract law and no such arbitration provider. No state, no venue, no arbitral institution is named.

Practically, that means a paying customer has no identified counterparty, no address to serve, and no forum.

The one visible change is a line on the homepage: “NOT ALLOWED: Any child prompt = SUSPENSION!!!”

I'll take that at face value as a genuine hardening of policy. It's also, two years on, the only publicly documented consequence.

And the site still labels itself “Version: BETA-Websitex” in its own footer.

Trust, billing and cancelling — 2.0 🔒

Refunds: “Consumer subscription purchases under Muah AI are NOT refundable.” There's a discretionary carve-out — support “can issue one-time exception partial refund or even full refund” on good faith. That's goodwill, not a policy.

Cancellation: by email, in settings, or through your payment provider. That's a reasonable set of exits.

The Statement Test — unresolved. No descriptor published. No payment processor named anywhere, in any document. The checkout opens in a new tab and you find out who's charging you when it charges you.

Crypto: not mentioned either way.

Age gate: click-through only. “You must be at least eighteen years old to join.” No verification of any kind — against SpicyChat‘s real ID checks in the UK and 26 US states, that's a meaningful gap for a platform whose breach involved prompts about minors.

Apps: there is no official app. Muah's own community runs a standing notice that App Store and Play listings using the name are impersonators — and when I checked the App Store ID that still shows up in search results, Apple's own lookup returned nothing. The listing is gone.

So: treat any Muah AI mobile app as not theirs, and ignore any app-store rating you see quoted for it.

Trustpilot: 3.9 out of 5 — from four reviews. That's too small to mean anything and I'd rather say so than quote it as a score.

Muah AI vs the field

Against Candy AI. Candy costs less to enter, includes voice and phone calls in a normal subscription, publishes its company and its retention policy, and has a working refund route. It's also the better media product by a distance. This is the swap for most people.

Against Secrets AI. Secrets gives you 8,000 credits a month at $9.17, 4K video, real voice calls at under 6p a minute, and a public wiki listing what everything costs. The only thing Muah has that Secrets doesn't is the sampling sliders.

Against GirlfriendGPT. Both take a relaxed view of filtering. GirlfriendGPT has 25,000 characters, a proper tag system and batch image generation. Its terms are ungenerous, but at least there's a named company in them.

Muah AI FAQ

Verdict

Muah AI is a capable product attached to an organisation that will not tell you who it is.

The capability is real. Chat, photos, video, voice, calls and music in one place, with no credit meter, and a set of sampling controls that no mainstream competitor exposes. For a certain kind of user — someone who understands temperature and frequency penalties and wants to tune a companion rather than accept one — that combination doesn't exist elsewhere, and $69.99 a year for the entry tier is cheap.

The organisation is the problem, and it isn't a matter of opinion. There is no company name on the site. No address. No registration. No payment processor named. No retention period. No deletion procedure. A governing-law clause that names neither a state nor an arbitral body. A production site that calls itself a beta.

And behind all of that, a September 2024 breach that put 1.9 million real email addresses next to what those people had typed — and a privacy policy that, two years later, is still dated 2022 and still says nothing about it.

I don't think Muah is a scam. I think it's a small team that built something interesting, got badly compromised, and never did the unglamorous work afterwards.

Which means the honest recommendation is straightforward. If you want an uncensored companion with voice and calls at a normal price, from a company you can name, Candy AI at 7.8 does everything this does for a fraction of the money. If you want depth and control, Secrets AI at 7.9 is the better tool.

Use Muah only if the sampling sliders are the entire reason you're here — and if you do, use an email address that isn't tied to anything else.

Our Recommendations

• CrushOn AI Review
• SpicyChat Review
• Lovescape Review
• OhChat Review