Because it uses user inputs as further training data. The right prompt can get it to regurgitate it again, or parts of it.

Comments