Masked Chat

Frequently Asked Questions

Everything about how masked.chat keeps your identity private — how the masking works, what we can and can't see, accounts and sync, pricing, and compliance.

Privacy & how it works

How does masked.chat actually protect my privacy?

Before your message ever leaves your device, masked.chat detects and replaces all personally identifiable information (PII) — names, emails, phone numbers, addresses, and more — with neutral placeholders. This masking happens locally on your device, so neither the AI model you're talking to nor masked.chat's own servers can see your real data. Your identity stays in an encrypted vault that never leaves your control.

What technology detects my PII?

We use a combination of context-aware rule-based detection and a lightweight local LLM running on your device. This hybrid approach catches both structured data (like phone numbers and emails) and more nuanced contextual PII (like a name embedded naturally in a sentence). Because detection runs locally, your data is never sent anywhere just to be analyzed.

What is the identity vault?

The identity vault is a secure, encrypted store that holds the mapping between your real PII and the masked placeholders. It allows AI responses to be "unmasked" back into meaningful answers on your side — for example, replacing a placeholder like [PERSON_1] with the actual name you typed. The vault is local by default. If you create an account, an encrypted copy is synced to our servers solely to enable cross-device continuity — we cannot decrypt it.

Does masked.chat work with any AI model?

Yes. masked.chat sits as a privacy layer between you and the underlying AI model, so it is model-agnostic. Whether you are using a major provider or another supported model, the masking process applies the same way. The AI receives only the anonymized version of your input and never has access to your real identity.

Account & data

Do I need an account to use masked.chat?

No. You can use masked.chat without creating an account, and your vault stays entirely local to your device. Creating an account is optional and unlocks cross-device continuity: we store an encrypted version of your vault on our servers so you can pick up seamlessly on another device. We cannot read the contents of that encrypted vault.

Can masked.chat see my private data?

No — and this is a core design principle, not just a policy promise. Because masking happens locally on your device before anything is transmitted, masked.chat's servers never receive your real PII. Even the encrypted vault synced to our servers for account holders is opaque to us. Privacy protection is built into the architecture, not just stated in our terms of service.

How does cross-device sync work?

When you create an account, masked.chat encrypts your identity vault and stores a copy on our servers. When you sign in on a new device, that encrypted vault is downloaded and decrypted locally. The decryption key stays on your device — our servers hold only the ciphertext, so sync is convenient without being a privacy risk.

What's the difference between my account password and my vault password?

Your account password is what you use to sign in to masked.chat — a normal login credential, and one we can reset for you if you lose it. Your vault password is different: it's the key that unlocks your identity vault, the encrypted mapping between your real PII and its masked placeholders. The two are completely independent — changing one never affects the other, and we have no access to your vault password at all.

What happens if I forget my vault password?

There's no way to recover it, and no way for us to reset it — this is by design. Your vault password never leaves your device, which means masked.chat has no way to see it, store it, or restore it for you. If we could recover it, we could also access your vault, which would break the privacy-by-design promise the whole product is built on.

If you forget your vault password, your only option is to delete your existing vault and create a new one. Everything in the old vault — every masked-to-real PII mapping — is lost permanently and cannot be brought back. Please store your vault password somewhere safe, like a password manager.

What is the vault PIN?

For convenience, you can optionally set a 6-digit PIN to unlock your vault instead of typing your full vault password each time. The PIN is a shortcut, not a substitute: after a long enough period, masked.chat will ask for your full vault password again to re-confirm you still have it. Forgetting your vault password isn't solved by having a PIN — vault recovery still isn't possible either way.

Can I delete my account?

Yes. Go to Settings → Account and choose Delete account. This permanently removes your account, identity vault, and chat history, and can't be undone.

What happens when I delete my account?

Deleting your account is permanent and immediate. It removes your masked.chat account, your identity vault, and your entire chat history — all of it, from our servers and any synced devices. There is no recovery window and no way for us to restore your data afterward, so make sure it's what you want before confirming.

Does deleting my account also delete my local data?

Account deletion removes everything stored on our servers. Any data still cached locally on a given device (like an offline copy of your vault) should be cleared separately on that device, since masked.chat can't reach devices that aren't currently signed in.

Can I get my account back after deleting it?

No. Because your identity vault is encrypted and only your vault password could ever unlock it, and account deletion erases that encrypted vault entirely, there's nothing left for us to restore — even if you contact support right after.

Pricing

What does masked.chat cost?

masked.chat offers a free tier for core privacy shielding, plus two paid plans for users who need more:

  • Pro: Everything in the free plan, plus extended usage limits for frequent daily use and access to all available AI models.
  • Premium: Everything in Pro, plus a significantly higher monthly cap for heavy workloads, early access to new features and our latest Lab models, and priority support.

Both plans are flat monthly fees — no usage metering, no surprise charges. You can also top up your balance anytime with one-time credit packs. Current prices are on the pricing page.

Trust & compliance

Is masked.chat compliant with privacy regulations like GDPR?

masked.chat's privacy-by-design architecture aligns strongly with the principles of GDPR, CCPA, and similar frameworks — particularly data minimisation and purpose limitation. Because PII never leaves your device in plain text, the exposure surface for regulatory risk is fundamentally reduced compared to using AI models directly. If you have specific compliance requirements for your organisation, please reach out to discuss enterprise options.

Is masked.chat suitable for professional or sensitive use cases?

Yes. masked.chat was designed with high-stakes data environments in mind — our founding team has deep expertise in highly regulated industries where compliance and privacy standards are non-negotiable. Professionals in finance, legal, healthcare, and HR can use AI tools more confidently knowing that client names, sensitive identifiers, and other private details are masked before reaching any external model.