Private Claude Chat

Claude is the smartest model out there. It's also the one most people don't realize is keeping a copy of every word.

What Claude.ai actually does with your chats

Claude is an excellent product. Anthropic is, as AI labs go, one of the more thoughtful ones about safety and policy. But "thoughtful" is not the same as "private." Here's where your data actually goes every time you type something into the consumer Claude.ai web app or desktop app:

• Your message is stored. By default, indefinitely, on Anthropic's servers, attached to your account.
• On Free, Pro, and Team plans, it can be used to train future models unless you've turned that off in your privacy settings. The default is on.
• It can be subpoenaed. If a court orders Anthropic to produce records, your chats are records.
• It's accessible to anyone who breaches your account. Compromised password, SIM swap, malware on your device. Once they're in, the entire history is in.

None of this is hidden. Anthropic spells it out in their privacy center. The problem isn't that they're doing something dishonest. The problem is that the gap between "this is technically disclosed in a settings page" and "the average user understands what they've signed up for" is enormous.

Privacy by plan

Anthropic's privacy posture is wildly different depending on which Claude product you're paying for. Worth knowing where you actually sit.

That row at the bottom matters. The developer version is a fundamentally different deal than the website. We'll come back to it.

The Incognito catch

Anthropic shipped an Incognito mode for Claude.ai in 2025. It's a real feature. It's also genuinely misunderstood.

Here's what Incognito mode does:

• Doesn't save the chat to your visible history.
• Doesn't use the chat for training, even on plans where training is on by default.
• Doesn't pull from your previous chats or memory.

Here's what Incognito mode does not do:

• It doesn't stop Anthropic from receiving your messages. They still run the model.
• It doesn't delete the chat from Anthropic's servers immediately. Anthropic retains incognito chats temporarily by default for safety screening and abuse detection.
• It doesn't make the chat unsubpoenaable during that window.
• It doesn't encrypt the chat in transit or at rest in a way that locks Anthropic out.

There's a developer version of Claude with totally different rules

Anthropic sells Claude two ways. One is the website almost everyone uses (Claude.ai). The other is the path developers and businesses use to plug Claude into their own apps. The privacy rules on that path are completely different.

On that path, Anthropic's defaults flip:

• Operational logs auto-delete after a short window. Anthropic keeps a short-term log for abuse detection, then it's gone.
• Conversations are never used for training. Not by default, not opt-in, not at all. It's part of the contract, not a setting you have to find.
• No saved chat history. The developer version doesn't have a "your past conversations" feature. Each message is independent. Where the history lives is up to whatever app the developer built.

That's the standard Private Claude is built to. You get the same Claude you'd use on Claude.ai, but with those stricter privacy rules baked in, nothing stored and nothing trained on.

The full list of what's flagged

Every major AI provider (Anthropic, OpenAI, Google) runs automated safety classifiers on every prompt. This is universal and unavoidable. The good news: the categories these classifiers look for are narrow, specific, and published. Here's the complete list of what Anthropic flags, drawn directly from Anthropic's published Usage Policy:

• Child sexual abuse material (CSAM) and any sexual content involving minors
• Non-consensual sexual content depicting real people
• Weapons of mass destruction: chemical, biological, radiological, nuclear
• Manufacturing instructions for explosives or conventional weapons
• Cyberweapons, malware creation, instructions for exploiting software vulnerabilities
• Attacks on critical infrastructure (power grids, water systems, financial systems, healthcare systems)
• Incitement to violence, terrorism, or genocide
• Human trafficking, exploitation, and forced labor
• Fraud, scams, and large-scale deception schemes
• Doxxing, stalking, and unauthorized surveillance of individuals
• Election manipulation and coordinated political disinformation
• Discrimination in high-stakes decisions (employment, housing, credit, healthcare access)
• Unauthorized impersonation of real people
• Generating defamatory content about identifiable individuals
• Unauthorized practice of regulated professions (medicine, law, financial advice) without proper disclaimers

Private Claude in 90 seconds

Here's what's different when you run a sensitive question through Private Claude instead of Claude.ai:

1. Nothing to set up. You sign in and start typing. There's no key to paste, no console to visit, no configuration. One flat price covers everything.
2. The conversation lives only in your browser tab. Nothing is saved to our servers. Nothing is saved to your device. Close the tab and the conversation is gone. We don't keep chat history because chat history is the thing that creates risk.
3. The message goes directly to Anthropic. Claude itself sees it because Anthropic runs the model. Anthropic's operational logs hold the request briefly for abuse detection, then auto-delete. They don't train on it, and there's no saved chat history at Anthropic. So shortly after the conversation, there's no permanent record of it anywhere.
4. Nothing to subpoena. Nothing to breach. Nothing to expose. Months later, if you ever go looking for that conversation, there's nothing anywhere for anyone to find. Not in our database, because we don't have one. Not in your account, because you don't have a saved history. Not at Anthropic, because the operational logs auto-deleted shortly after the chat.

That's the whole architecture. There's no clever cryptography trick, because we don't need one. The privacy guarantee is structural: the data doesn't exist after you close the tab.

Honest tradeoffs

Private Claude is not the right tool for everyone. Here's where it costs you something.

The free tier is for trying, not for living on. You get 20 messages to try, no card. That's enough for two or three real conversations. Once you hit the cap, you upgrade or stop. There's no recurring free quota.

Paid tiers are flat and generous. Basic ($17) is unlimited Haiku plus 500 Sonnet messages a month. Pro ($37) is unlimited Sonnet plus 250 Opus. There's no usage bill and no metering. One flat price covers everything.

This isn't a replacement for ChatGPT or Claude Pro. It's an addition. Most Private Claude users keep their main ChatGPT or Claude.ai subscription for everyday work and add Private Claude for the conversations they wouldn't put in their main account. The work email and the private journal aren't the same thing. ChatGPT for one. Private Claude for the other. Private Claude is $17 a month for Basic, one flat price with everything included, so you add a designated private space without a usage bill on top.

You don't get chat history. By design. When you close the tab, the conversation ends. No saved threads. No scroll-back to last week's chat. No exporting old conversations on the free tier. If you need to keep an answer, copy it before you close the tab. This is the privacy tradeoff: history is risk, and we don't store it.

You won't get features Anthropic ships first to Claude.ai. Claude.ai sometimes gets new features (like a new model, or a new tool integration) ahead of API availability. You'll usually get them within a week or two. If you need bleeding-edge first-day-of-release access, Claude.ai Pro is going to be a half-step ahead.

Anthropic still runs the model. Private Claude does not give you privacy from Anthropic's model servers. If your threat model is "Anthropic itself is the adversary," you need a self-hosted open-source model, not Private Claude. We cover the self-hosted option here.

Who this is for

You're probably a Private Claude user if any of these are true:

• You use Claude for sensitive personal stuff (health, money, relationships, work conflicts) and the idea of those chats sitting in a database for years bothers you.
• You want to try before you pay. The free tier is 20 messages, no card.
• You want a designated private space, not a replacement for your main AI. Private Claude is $17 a month. Most people add it alongside their existing ChatGPT or Claude.ai subscription rather than swap it in.
• You want a chat interface, not a developer tool. Open API consoles and API calls are not your thing.
• You don't want to run a local model. You like Claude specifically because it's the best, and a self-hosted Llama is a real downgrade.

You're probably not a Private Claude user if:

• You only use Claude for low-stakes work and you don't care about privacy.
• You need on-device, fully air-gapped AI. Use Ollama or LM Studio with Llama or Mistral.
• You need a BAA for HIPAA-covered work. We have a Business plan for that, but the standard product isn't BAA-backed.