Meta AI Incognito Chat: What It Hides and What to Verify

Meta says Incognito Chat gives people a more private way to use Meta AI on WhatsApp and the standalone Meta AI app. Conversations are processed in a secure environment that Meta says it cannot access, are not saved, and disappear by default when the session ends.

That makes Incognito Chat a better fit for sensitive personal questions than a normal AI chat. But it does not settle every privacy or compliance question.

The feature relies on Meta’s server-side Private Processing system, and the transparency mechanism meant to help outsiders verify that system has faced scrutiny.

Meta launched Incognito Chat on May 13 and said it would roll out over the following months. As of August 19, Meta’s public launch page still describes it as rolling out over the coming months, so availability may still vary.

Private Processing uses trusted execution environments, or TEEs, to isolate AI requests while they are processed. Meta says requests are encrypted between the device and the selected TEE, third-party routing helps hide the requester’s IP address, and the system does not retain access to messages after a session ends.

Closing the app or locking the phone ends an Incognito session and removes its context. Meta says the conversations are not saved, and messages disappear by default.

Those protections sit alongside other WhatsApp privacy features, including Strict Account Settings, but Incognito Chat is specifically designed to shield AI prompts and responses from Meta while they are processed.

Meta also says Private Processing should be independently verifiable through Cloudflare-hosted transparency logs. Security firm Secorizon reported in May that 30 of 40 namespaces it examined remained at their initial epoch and 10 were uninitialized.

That questions whether the external verification layer was working as intended at the time; it does not show that Meta could read Incognito Chat content.

What Incognito Chat does not protect and what to verify

Private processing does not control what happens after information reaches the device. Users can still copy, screenshot, or preserve AI output. Questions about WhatsApp data stored locally on devices illustrate why server-side privacy is only one part of protecting sensitive information.

Meta’s public Incognito Chat announcement does not separately state a model-training policy for these conversations or describe enterprise controls such as audit logging, DLP integration, and legal holds. Businesses handling regulated or confidential information should get those answers in writing before changing existing AI-use policies.

For individuals, Incognito Chat is most useful when avoiding a stored AI conversation is valuable. Organizations should confirm availability, retention and metadata handling, training terms, and administrative controls before approving sensitive use.

Meta is continuing to expand AI features inside WhatsApp, so Incognito Chat is best treated as one privacy control rather than a blanket guarantee for every business use case.

Also read: WhatsApp is testing usernames that let people chat without sharing phone numbers, adding another privacy option to the platform.