Meta launched Incognito Chat with Meta AI on 13 May 2026, introducing what the company calls a completely private way to interact with artificial intelligence on WhatsApp and the Meta AI app.¹² The feature runs on Private Processing technology, using Trusted Execution Environments — isolated hardware enclaves — to handle user prompts in a sealed computational space that Meta's own engineers, logging pipelines, and advertising infrastructure are structurally prevented from reading.³⁷

The launch arrives at a pointed moment for the industry. Rival OpenAI is currently facing lawsuits alleging it stored and misused user chat logs without adequate disclosure.¹⁰ Meta has positioned Incognito Chat as a direct answer to the broader question of whether users can trust that what they say to an AI assistant stays private — and the company's answer involves hardware-level guarantees rather than policy commitments alone.⁴

How Private Processing works

The technical architecture underpinning Incognito Chat is designed to make privacy structural rather than discretionary. When a user begins an Incognito Chat session on WhatsApp or the Meta AI app, their prompts and the AI's responses are processed inside a Trusted Execution Environment — a physically isolated region of a processor that operates independently from the rest of the system.⁷ The enclave enforces strict boundaries: data processed inside cannot be read, logged, or extracted by any software running outside it, including Meta's own server-side code, analytics tools, and ad-targeting systems.³⁷

Conversations are not saved once a session ends, and messages disappear by default — meaning there is no persistent record stored on Meta's servers or the user's device.²⁹ This is meaningfully different from how most AI chat products handle conversation history, which is typically retained to personalise future responses and, in many cases, used as training data for future model versions.⁴

Limitations of the current rollout

In its initial form, Incognito Chat is text-only — users cannot upload images or attach files during a private session.¹⁵ Meta has built safety guardrails into the feature, meaning the AI will decline to answer certain types of queries or redirect conversations that approach prohibited territory, even within a private session where Meta cannot see the content.¹ How those guardrails operate without server-side visibility into conversations is a technical detail Meta has not fully disclosed publicly.

The rollout is gradual, covering WhatsApp and the standalone Meta AI app initially, with a broader expansion across Meta's platforms expected over the coming months.⁶⁸ It is not yet available on Facebook Messenger or Instagram Direct, where Meta AI is also accessible.

The competitive context

Meta's Incognito Chat launch reflects a growing recognition across the AI industry that privacy concerns are becoming a competitive differentiator, not just a compliance issue.³⁴ WhatsApp has over two billion active users globally, and many of them interact with Meta AI through the app. Offering those users a credible private mode — backed by verifiable hardware architecture rather than a terms-of-service promise — represents a meaningful shift in how AI assistants are marketed.²⁶

The timing relative to the OpenAI lawsuit developments is unlikely to be coincidental. Concerns about AI systems retaining sensitive personal conversations, whether medical questions, financial anxieties, or relationship problems, have been a recurring theme in discussions about AI trustworthiness.¹⁰ By addressing those concerns at the hardware level, Meta is attempting to reframe the privacy debate on terms that are difficult for competitors running conventional cloud infrastructure to match easily.⁹³

What comes next

Meta has not committed to a timeline for expanding Incognito Chat's capabilities to include images or multimodal inputs, nor confirmed when it will roll out across Facebook and Instagram.¹⁸ Developers and privacy researchers will be watching to see whether Meta publishes a third-party audit of the Trusted Execution Environment implementation — a step that would be necessary to substantiate the company's claims about structural inaccessibility beyond Meta's own assurances.⁷

#trusted execution environment

Meta Launches Incognito Chat for Meta AI: Conversations Processed in Hardware Enclaves Even Meta Cannot Access