Private AI, your history stays in your browser.

Your history lives on your device, encrypted, and nothing readable is kept on our side. The only readable text from your conversations that we ever handle is the message on its way to the model that answers it. There is no setting to hunt for: privacy comes from how the product is built.

Most AI assistants keep every conversation on their servers. That history can be read by staff reviewing for safety, handed over in response to legal requests or exposed in a breach. It can also train the next model unless you find the right setting. People tell these assistants about their health, their money, their relationships and their work. That’s a lot to leave on someone else’s computer.

Every conversation, folder, character, image and video you create is stored in your browser’s local database and encrypted with AES-256. Close the tab and come back tomorrow: it’s still there, on your machine. Search it, organize it in folders, export it as a readable file, import it on another computer, or erase everything with one click in Settings.

Local storage has one consequence worth spelling out. If you clear your browser data with no export, backup or sync, your history goes with it, exactly like a file you delete. That is the price of a history nobody else can read, and the encrypted backup and sync below exist for that reason.

To answer you, a message has to reach a language model. It travels over an encrypted connection, without your name, email address or account attached. Our included open models (NeverNo Uncensored, DeepSeek, GLM, Qwen, Mistral and others) run on routes we have set to zero retention: the provider processes the request and does not keep it.

Third-party models such as Claude, GPT, Gemini and Grok are labeled “Anonymized”, never “private”. Their makers receive the message without knowing who you are, and we opt out of training on it, but some of them keep requests for a while under their own policies. If a conversation is truly sensitive, use an included model: the label is always visible in the model picker.

If you create an account, we keep your email address, your plan, your credit balance and daily usage counters, because billing and fair limits depend on them, along with a few account records (known browsers, proof of payment, trial counters) that the Transparency page lists one by one. For visitors without an account, those counters are keyed to a hashed version of the IP address, never the address itself. Payments are handled by Stripe, and the free trial is protected by a bot check from Cloudflare.

We keep nothing readable of your messages, your images, your characters or your memory. We do not show ads, and we do not sell or share data for advertising. Delete your account and the subscription, the Stripe customer record, your encrypted backup, your synced copy, your API keys and your usage records go with it.

The encrypted backup locks your chats, characters, memory, settings and media with a passphrase only you know (600,000 rounds of PBKDF2, then AES-256-GCM) before anything leaves your browser. We store a file we cannot open, and restoring it on another device merges with what is already there instead of overwriting it.

With an account, encrypted sync brings your chats, memory, characters and projects to your other devices without a file. Our servers keep only an unreadable copy that only your passkey, your recovery key or your approved devices can open. They see how many items you sync and when, never what is in them.

Sharing works the same way. A shared conversation is encrypted in your browser and the key travels in the part of the link after the #, which browsers never send to a server. The link lasts 1, 7 or 30 days and you can revoke it at any time.

With a free account, NeverNo can remember useful facts: your first name, your city, how you like answers written, the plot of a long story. That memory is stored encrypted in your browser, and nothing readable is kept on our servers. It skips passwords, and you can read, correct or delete every fact in Settings, or simply say “forget that”.

NeverNo protects your history from us, from breaches on our side and from training. It is not an anonymity network: our servers see the connection that sends a message, as any website does. We record your IP address in none of our own tables; for an account, Supabase, which handles sign-in, keeps the IP address of each open session. Anyone who can unlock your device can open your browser too, so lock it. And the model that answers your message has to read it to answer. We’d rather tell you this plainly than promise a “zero-log” that no AI service can honestly deliver.