Lumo privacy
Proton’s mission is to build an internet where privacy and security are the default, and Lumo is no exception. We built Lumo to be the AI assistant that keeps your conversations confidential. In this article, we explain what that means and how Lumo protects your data.
Open-source language models
Lumo is powered by open-source large language models (LLMs) which have been optimized by Proton to give you the best answer based on the model most capable of dealing with your request. The models we’re using currently are Nemo, OpenHands 32B, OLMO 2 32B, and Mistral Small 3. These run exclusively on servers Proton controls so your data is never stored on a third-party platform.
Lumo’s code is open source, meaning anyone can see it’s secure and does what it claims to. We’re constantly improving Lumo with the latest models that give the best user experience.
Web search
By default, Lumo only uses the knowledge contained in the models to respond to your queries, which is only current up to a certain date. If you want more recent information included in Lumo’s responses, you can optionally enable web search. We have selected search engines based on privacy, performance, efficiency, and reliability.
Privacy and security features
We designed Lumo to preserve your data privacy, so you can be sure Proton does not have access to your chat history and never shares your data with anyone. Other AI assistants, including Google’s Gemini, allow employees to read conversations and train the language models with your data. Lumo never keeps your data or uses it to train LLMs.
No-logs policy
When you chat with Lumo, your questions are sent to our servers using TLS encryption. After Lumo processes your query and generates a response, the data is erased. The only record of the conversation is on your device if you’re using a Free or Plus plan. If you’re using Lumo as a Guest, your conversation is erased at the end of each session. Our no-logs policy ensures wekeep no logs of what you ask, or what Lumo replies. Your chats can’t be seen, shared, or used to profile you.
Zero-access encrypted chat history
Like other Proton services, encryption is the foundation of our security model. If you’re using Lumo with a Free or Plus plan, your chat histories are available to search and review later. They’re stored on your device and synced to Proton servers using zero-access encryption. Meaning only you can see your data by logging in to your Proton Account.
No data sharing
Many AI assistants share and sell your data with third parties or with other subsidiaries within their business. Lumo never shares your data. After each chat, your logs are erased.
No training
Lumo doesn’t use your chats to train the AI models. We run the models on servers we control and never send your data to any third parties.
European jurisdiction
Lumo is built and based in Europe. European legal jurisdiction offers robust privacy protection outside of US-based services that can be forced to log users’ activity for surveillance, including Big Tech.
Frequently asked questions
How does Lumo protect my privacy?
Lumo uses zero-access encryption to secure your chats, operates under a strict no-logs policy, and runs on servers exclusively controlled by Proton. Your data is never shared, logged, or used to train AI models.
What kind of encryption does Lumo use?
Lumo uses zero-access encryption for stored chat history and TLS encryption for data transmission. In addition, we asymmetrically encrypt your prompts so only the Lumo GPU servers are able to decrypt them. This ensures your queries and responses are secure during transit and that your saved chats are only accessible to you.
How does Lumo compare to other AI assistants in terms of privacy?
Unlike other AI assistants, Lumo doesn’t log or retain your data, doesn’t use your chats for training, and never shares data with third parties. This is a significant difference from other AI assistants that store and analyze user data or use it to improve their AI models.
Does Lumo store any metadata about my chats?
No. Lumo doesn’t store metadata such as timestamps, IP addresses, or chat context. The only record of your chats is saved locally and encrypted if you are a Free or Plus user.
Will Lumo’s privacy features change if new models are introduced?
No. Proton is committed to maintaining the same high privacy standards, regardless of which models are used. Any future updates will ensure your data remains private and secure.
How does Lumo ensure fairness and prevent bias?
The AI models used in Lumo are carefully selected for their transparency and robustness. Proton actively monitors and updates the system to minimize bias and ensure responsible AI behavior.