· privacy-tools

Mullvad vs ExpressVPN

Neither policy says whether your data trains AI models. Both are UNCLEAR, and the search terms tried are on each entry.

Grades read the plan most people are on. Each company's full entry has every plan, every clause and the archived copy it was read from.

Mullvad

Mullvad's two policies together run to 18,000 characters and never mention AI, machine learning or training. What they do say is that no profiling takes place at all.

Verdict

By default: The policy does not say
The way out: Nothing to opt out of on the record
Last checked: 30 Aug 2026

Read the full verdict →

ExpressVPN

ExpressVPN sells not keeping records. Its privacy policy makes no mention of AI, machine learning or model training either way.

Verdict

By default: The policy does not say
The way out: Nothing to opt out of on the record
Last checked: 30 Aug 2026

Read the full verdict →

Mullvad: every plan

Mullvad · what each plan can refuse · checked 30 Aug 2026

1 PLAN

Plan

Exposure

Trains

Opt-out path

Retention

De-identified

Human review

All accounts

UNCLEAR

Not established, see below

Not stated

—

Not established

EVERY CELL ABOVE IS SOURCED FROM A QUOTED CLAUSE OR A DOCUMENTED SEARCH · SEE THE EVIDENCE ABOVE

EXPOSURE IS SCORED 0–100 ON ONE AXIS, HOW HARD IT IS TO STOP THIS PLAN TRAINING ON YOU. THE GRADE IS THE BAND IT FALLS IN: A 0–10 · B 11–25 · C 26–45 · D 46–60 · E 61–80 · F 81–100. HOW THE SCORE IS SET

All accountsUNCLEAR

OPT-OUT: Not established
RETENTION: Not stated
EXPOSURE: —
DE-IDENTIFIED: —
HUMAN REVIEW: Not established

ExpressVPN: every plan

ExpressVPN · what each plan can refuse · checked 30 Aug 2026