Private chat
A chat that not even we can read.
Press «Private» in the message box. What you write is encrypted on your phone or in your browser and only decrypted inside a secure enclave, where the AI reads it and replies.
What you write
Private chat
Secure enclave verified: only it can read what you write.
What you write here is encrypted on your phone and only read inside the secure enclave. Not even Recato can read it.
Help me write to my boss: I will be on sick leave for three weeks and I don't want to say why.
Here are a few options you can copy and adapt:
Dear [Boss's name],
I'm writing to let you know that I will be on sick leave for approximately three weeks, starting [date]. My doctor has confirmed this period of absence, and I expect to return on [date].
Type here…
Send
What reaches us
Encrypted request
751 bytes
That is all that passes through our servers. We see which account it comes from, its size and the time, to deduct it from your balance. Without the key, which only your device and the secure enclave have, the rest cannot be read.
1 · The option
«Private», in the message box
It is on Recato's home screen, next to the paperclip, the microphone and the bookmark, with a padlock. In the Android and Apple apps, and on your computer.
How can I help?
Ask anything…
2 · When you press it
It opens the private screen, which first checks the secure enclave
The screen is the same in the app, in the browser extension and on the privada.recato.ai page. For now, it is text only.
Private chat
Checking the secure enclave…
What you write here is encrypted on your phone and only read inside the secure enclave. Not even Recato can read it.
Type here…
Send
Private chat
Secure enclave verified: only it can read what you write.
What you write here is encrypted on your phone and only read inside the secure enclave. Not even Recato can read it.
Help me write to my boss: I will be on sick leave for three weeks and I don't want to say why.
Here are a few options you can copy and adapt:
Dear [Boss's name],
I'm writing to let you know that I will be on sick leave for approximately three weeks, starting [date]. My doctor has confirmed this period of absence, and I expect to return on [date].
Type here…
Send
Private chat
Secure enclave verified: only it can read what you write.
This page comes from Recato's server: without the extension (or the app) you cannot confirm it is the published one. How to check
What you write here is encrypted in this browser and only read inside the secure enclave. Not even Recato can read it.
Type here…
Send
Private chat
Secure enclave verified: only it can read what you write.
Page checked by the extension: it is published version 1.0.1.
What you write here is encrypted in this browser and only read inside the secure enclave. Not even Recato can read it.
Type here…
Send
3 · Why not even we can read it
Encrypted on your device, read only in the secure enclave
On your phone or browser
What you write is encrypted before it leaves. The key is agreed only between your device and the secure enclave: our servers never receive it.
On our servers
They act as the postman: they pass on the encrypted bytes and count the size and the tokens, to deduct them from your balance. If you close the screen in the middle of a response, they keep it encrypted until you come back, for 7 days at most. The server logs keep not a single word of the chat. If the AI needs to search the web, it first warns you that this makes the chat less private and asks whether you want to (for each search or, if you choose, once per chat): only the phrases you allow go through them to the search engine, and they are not kept.
In the secure enclave
The AI runs on an isolated computer in the European Union, whose memory the processor itself encrypts: not even whoever runs the machine can read it. Inside, it decrypts, replies and encrypts again.
The proof, before sending
Your device asks the secure enclave for a certificate, signed by the chip maker, that says which program is running inside, and compares it with the published one. If it does not match, nothing is sent: that is the «Checking the secure enclave…» on the first screen.
4 · Checking
You don't have to take our word for it
The code that encrypts is public
It is published, with the fingerprints of every version. Anyone who builds it gets exactly the same files.
github.com/Forsnaps/recato-private-chatIn the app, the code comes inside
It is not downloaded from our servers each time: it only changes with a new version in the store, which anyone can compare with the published one.
On your computer, the extension checks
The Recato extension for Chrome and Firefox brings the screen with it and checks the privada.recato.ai page: green if it is the published version, red if it was swapped. Without the extension it still works, but with no proof, and the page says so.
Kept with a key we do not have
Keeping them is optional. The key stays in your phone's security chip or in your browser; on another device, only the 25-character recovery code opens your chats. We do not have that code and cannot recover it.
5 · On our side
What we see and what we don't
We see
- That your account opened a private chat, and when.
- The size of each request and the tokens used, to deduct them from your balance.
- When the screen's code fails, the type of the error and where in the code it happened, so we can fix it.
- The chats you keep, but only as encrypted bytes.
- The response that waits for you if you close the screen midway, but only as encrypted bytes and for 7 days at most.
We don't see
- What you write, nor the answers.
- The titles of your saved chats.
- The key and the recovery code.
6 · For now
What the private chat does not do yet
- It only applies to the private chat. Your other chats are kept on our servers, as the privacy policy says.
- Text, images, documents and web search: it reads and makes Word, Excel, PowerPoint and PDF documents (scanned ones included), but no voice, mail or tasks. Each search only goes out with your permission (each time or for the whole chat), and only the search phrase goes out.
- The proof exists in the Android and Apple apps, and on your computer with the extension. On the privada.recato.ai page without the extension, the chat is still encrypted, but with no proof.