AIToday
Large Language ModelsAI Business & IndustryWIRED AIPublished: Sep 22, 2026, 19:01 JST

Signal creator's Confer: private AI at $34.99 a month

Signal creator's Confer: private AI at $34.99 a month

3 Key Points

  1. What happened

    Moxie Marlinspike, who created Signal, launched Confer, an AI chatbot using Nvidia-based trusted execution environments and passkey authentication to cryptographically prevent its own servers from logging chats. It charges $34.99 a month after roughly 20 to 25 free queries a day.

  2. Why it matters

    Marlinspike says that price is the real cost of running AI without subsidies from data collection or advertising, so privacy may simply cost more than the $20 a month charged by the cheapest paid tiers of Claude and ChatGPT.

  3. What to watch

    Whether privately run AI can sustain itself without data-driven profits is unproven, computer science professor Matt Green notes, so the test is whether such services keep their protection promises over time.

WHO IT HITSPrivacy-conscious consumers weighing chatbot subscriptions, and enterprise IT teams that already rely on zero data retention contracts most individual users cannot get, are the ones who must decide whether paying $34.99 a month is worth it.

Not sure about something? Ask the AI

Summaries like this, in your inbox every morning.

Context & Analysis

The big three chatbots—OpenAI's ChatGPT, Anthropic's Claude, and Google's Gemini—are set by default to collect and store conversations, with no restrictions in many cases on how that data is shared or sold, used to train the tools, or handed over under legal process. The strongest contractual exception is zero data retention, or ZDR, but it is available only for paid enterprise and developer accounts, not average users. Even then it has exceptions: Anthropic does not offer ZDR for its most sophisticated "Mythos-class" models like Fable 5.1, OpenAI announced last month that its ZDR implementations will analyze user activity prior to deletion, and Google warns that it logs some Gemini prompts for abuse monitoring even with ZDR enabled.

For consumers, most privacy-focused services rely on promises rather than technical guarantees. Proton's Lumo simply promises not to log conversations, while Venice.ai and Duck.ai act as proxies that relay requests to other services such as Claude or ChatGPT, which can still collect the messages. Matt Green of Johns Hopkins points out that even stripped of identifying metadata, messages can often contain identifiable information, because asking about local coffee shops reveals where you live.

A stronger approach is the trusted execution environment, a hardware setup most often using Nvidia's Confidential Computing, in which queries are processed on isolated hardware and the server can cryptographically prove the rest of the system has no access. Confer uses that setup along with passkey authentication and open-source code. Meta uses a TEE for an Incognito version of Meta AI in WhatsApp, and Apple's Private Cloud Compute enforces its promise not to read conversations with Apple Intelligence. Local tools such as Ollama, LMStudio, or LocalAI keep data on your computer but, as Green warns, are far less capable. Whether privacy-first AI can sustain itself without data-driven profits remains unclear, and the outcome hinges on whether users will pay $34.99 a month rather than $20, and whether providers keep their promises if they cannot.

FAQ
How much does Confer cost?
Confer uses a freemium model, with roughly 20 to 25 free queries a day, then $34.99 a month for its cheapest tier.
How does Confer keep chats private?
It runs queries in Nvidia-based trusted execution environments, where isolated hardware processes them and the server can cryptographically prove the rest of the system cannot access that segregated enclave.
Why can't AI chats be end-to-end encrypted like Signal?
Currently, working AI models can only process unencrypted prompts, so true end-to-end encryption is not yet possible for chatbots.

Get the latest Large Language Models news every morning

For example, today's edition would include:

  • Meta's Muse AI agent tops charts; shares jump 11%Yahoo Finance AI · 1h ago
  • Alibaba unveils new AI chip, model 4x larger than Qwen 3.8 MaxJapan Times Tech · 1h ago
  • Anthropic builds San Francisco biology lab where Claude guides robotsTHE DECODER · 1h ago

AI-summarized, only the topics you pick — one digest a day via Email, LINE, or Slack.

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. Q&As are published on this page for other readers too.

Related Articles

Next articleXiaomi open-sources MiMo-V2.6, publishes the bill