Secure AI on the web is deliberately limited. It keeps no history, no memories, no notes and no files. It holds no encryption key. A conversation lives in the tab you opened it in, and is gone when you start the next one.
That is a decision, not an unfinished feature.
What a native app can promise
A native app ships as a signed binary. The code that runs on your device is the code we published, unchanged until the next update, and the operating system checks that signature before it runs.
Keys live in dedicated hardware — the Secure Enclave on iPhone, the Keystore on Android — where the app can ask them to sign and decrypt but can never read them out. The app runs in a sandbox that other software on the device cannot see into.
What a browser cannot
The web offers none of those guarantees, to us or to anyone else.
- •A browser re-downloads and re-executes fresh code on every single visit, which means a site’s security is only ever as strong as its most recent deploy.
- •There is no hardware-backed key storage. Anything a page holds is software-only.
- •A tab shares its environment with extensions, other tabs and developer tools that can read what’s on the page.
This is a property of the platform, not a flaw in any particular product. It is equally true of every AI assistant with a web client. The usual response is to accept it quietly and store everything in the browser anyway.
The other path
We took the other path. Rather than make the web client as safe as we could and hope that was enough, we made it hold nothing worth taking.
A compromised web session exposes the conversation on the screen. It does not expose your history, your memories, or your life.
Where the product actually lives
Everything the product is actually for — conversations that persist, memories it builds about you, notes, tasks, projects, files, keys held in hardware — lives in the iPhone and Android apps. That is where we put the work, and it is where we will keep putting it.
The web app remains free, instant and account-optional. Use it to ask a question. Install the app for everything else.
Try Secure AI free
Frontier AI chat — encrypted by default, with your identity stripped before any request reaches the provider.