WhatsApp on Wednesday launched Incognito Chat, a private mode for talking to Meta AI that the company says keeps prompts and responses inaccessible to Meta itself. The feature runs all inference inside a Trusted Execution Environment and rolls out across WhatsApp and the standalone Meta AI app over the next few months. With more than 3 billion users worldwide, WhatsApp is putting a privacy-preserving chatbot in front of what may be the largest single audience ever exposed to one.
Incognito Chat is built on Private Processing, the secure cloud architecture WhatsApp introduced last year to run AI features without breaking end-to-end encryption. The same plumbing already powers message summaries and composition tools, but those used smaller models. Incognito Chat instead routes queries to Muse Spark, Meta's latest model released last month, which raises the compute demand inside the secure enclave.
Sessions are ephemeral by default. Conversations disappear when the user closes the chat, exits the app, or locks the phone, and Meta AI loses context once the session ends. WhatsApp says it can only see that an account used the feature, not the contents of the exchange.
Key facts
- 01Meta launched Incognito Chat on May 13, 2026, rolling out to WhatsApp and the Meta AI app over the next few months.
- 02The feature runs on WhatsApp's Private Processing infrastructure, which debuted last year, and uses the Muse Spark model released last month.
- 03WhatsApp has more than 3 billion users globally, making Incognito Chat many users' first private AI interaction.
- 04All inference happens inside a Trusted Execution Environment; sessions disappear when users close the app or lock their phone.
- 05Meta also previewed Side Chat, which lets users query Meta AI privately about an ongoing conversation without other participants seeing it.
"Incognito Chat handles all AI inference in a Trusted Execution Environment that ensures your messages are not accessible to us," Mark Zuckerberg wrote in a Wednesday post. "The conversations on your phone also disappear when you exit the session. This is different from other disappearing AI products where your conversations logs often remain on other companies' servers for many months."
“Incognito Chat is kind of like we're running a giant phone for AI and we don't have the passcode.”— Jaeden Schafer
WhatsApp head Will Cathcart framed the design as a compromise between on-device privacy and the scale advantages of cloud inference. "With AI, from a privacy standpoint, you'd want to run everything on your own phone, but the benefit of these models is using larger and larger compute to make them work," Cathcart said. "Incognito Chat is kind of like we're running a giant phone for AI and we don't have the passcode."
Alongside Incognito Chat, Meta previewed Side Chat with Meta AI, which lets users privately query the assistant about an ongoing WhatsApp conversation without other participants seeing the exchange. Today, asking Meta AI inside a group thread surfaces the answer to everyone; Side Chat keeps the question and reply on the asker's side. "It's sensitive information, and you should't have to screenshot a conversation and upload it to a regular chatbot to be able to ask a question about what a friend is talking about or get an AI summary of what's been said in a big group chat," Cathcart said.
Incognito Chat is text-only at launch, with image and voice support in development, Cathcart said. An optional web-search feature is on by default and can be turned off; it queries the web in an anonymized way for current information. WhatsApp is also exploring an opt-in retention mode for users who want conversation history persisted within Private Processing.
Alice Newton-Rex, VP of Product at WhatsApp, said the use cases driving the design are intimate ones. "People are starting to use AI for everything, including some of their most private thoughts, whether that's tackling financial or health questions, or for advice on how to respond to a tricky message from a friend or a colleague," she said. "We think it's really important to give people the ability to ask these questions as privately as possible."
Meta invites third-party audits and vulnerability reports on Private Processing and says Incognito Chat will be subject to outside oversight so reviewers can verify the code Meta ships. Matt Green, a Johns Hopkins cryptographer who provided input on the Private Processing design, said the system appears sound. "I have confidence that if you want to talk to an AI without anyone else seeing your conversation, including Meta, this will do the job," Green said. He has also noted previously that any secure cloud-based solution carries trade-offs, because the enclave itself becomes a high-value target for attackers.
The launch comes alongside a separate move that cuts the other way: this week Meta eliminated opt-in end-to-end encryption from Instagram Direct Messages, after years of promising default end-to-end encryption on Instagram chat. Zuckerberg, meanwhile, said he is "proud that [Meta Superintelligence Labs] is the first lab to deliver private AI." Competitors including ChatGPT and Claude offer incognito modes, and DuckDuckGo and Proton run privacy-first chatbots, but those mostly decouple identity from content rather than blocking the provider from reading prompts.
The competitive angle is distribution. ChatGPT and Claude have hundreds of millions of users between them; WhatsApp has 3 billion. If even a fraction adopt Incognito Chat for health, financial, or relationship questions, Meta becomes the default surface for private AI queries at a scale OpenAI and Anthropic cannot match through their own apps. The Muse Spark dependency also gives Meta a reason to keep investing in proprietary models rather than relying on outside providers for the most sensitive workloads.
Incognito Chat is also a hedge against a legal vector that is getting more attention: lawyers have argued that user conversations with chatbots could be discoverable in litigation. A product that does not retain logs, by design, sidesteps much of that exposure. Whether the architecture holds up under adversarial scrutiny is the open question, but Meta has chosen to compete on the one axis where ChatGPT and Claude cannot easily follow without rebuilding their own infrastructure from the silicon up.
Working on something we should cover, or seeing a story we missed? Send leads, documents, or feedback to hello@aichatdaily.com. For sensitive tips, see our secure tips page for Signal and PGP options.
Spotted an error? Email hello@aichatdaily.com with the URL and the issue, or read our full corrections policy.
