# Lumo privacy rating

AI assistant from Proton that runs open-weight models on Proton's servers, with no logs of chats and zero-access encrypted chat history.

## Summary

Lumo scores 73 out of 100 (grade C) on the AI assistants criteria. It meets 7 of 12 criteria: no ads or data sales, transparency report, tells users about requests, TLS configuration, security headers, no training on your data and limited chat retention. It partly meets open source, no trackers or telemetry, independent audit and no account needed. It does not meet runs locally. It is based in Switzerland: Not in the Five, Nine or Fourteen Eyes; GDPR-style data protection law. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.

- Website: https://proton.me/lumo
- Source code: https://github.com/ProtonMail/WebClients
- License: GPL-3.0
- Jurisdiction: Switzerland. Not in the Five, Nine or Fourteen Eyes. GDPR-style data protection law.
- Platforms: Web, Android, iOS
- Home page trackers: none found
- Category: [AI assistants](https://privacyratings.com/ai-assistants/)
- Also rated: [Proton Mail](https://privacyratings.com/email-providers/protonmail/) (Email providers), [Proton Pass](https://privacyratings.com/password-managers/protonpass/) (Password managers), [Proton Authenticator](https://privacyratings.com/two-factor-authentication/proton-authenticator/) (Two-factor authentication), [Proton VPN](https://privacyratings.com/vpns/protonvpn/) (VPN providers), [Proton Calendar](https://privacyratings.com/calendars/proton-calendar/) (Calendars), [Proton Docs](https://privacyratings.com/office-suites/proton-docs/) (Office suites), [Proton Drive](https://privacyratings.com/cloud-storage/proton-drive/) (Encrypted cloud storage)
- Grade: C (73/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Partial | Apps are open source under GPL-3.0. The server is not. | https://github.com/ProtonMail/WebClients/blob/main/LICENSE |
| No trackers or telemetry | Partial | Website analytics are self-hosted, and the Android app includes Sentry crash reporting. | https://reports.exodus-privacy.eu.org/en/reports/me.proton.android.lumo/latest/ |
| No ads or data sales | Yes | Funded by paid plans, with no ads. | https://proton.me/lumo/pricing |
| Independent audit | Partial | Proton completed a SOC 2 Type II audit, but the report is not public. | https://proton.me/blog/soc-2 |
| Transparency report | Yes | Publishes yearly counts of legal orders received, complied with and contested. | https://proton.me/legal/transparency |
| Tells users about requests | Yes | Targeted users are notified of data requests, with delays only when Swiss law, a court order or a risk to life requires it. | https://proton.me/legal/law-enforcement |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=lumo.proton.me&hideResults=on |
| Security headers | Yes | Grade A+ (115/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=lumo.proton.me |
| Modern web standards | Not tested yet | Not tested yet. |  |
| No training on your data | Yes | Chats are not used to train models, except anonymized feedback that users choose to share for one model. | https://proton.me/support/lumo-privacy |
| Runs locally | No | Hosted only. |  |
| Limited chat retention | Yes | Chats are erased from servers after each response. Saved history is zero-access encrypted and only readable by the user. | https://proton.me/support/lumo-privacy |
| No account needed | Partial | Guest access works without an account, with usage limits. | https://proton.me/lumo |

Source: https://privacyratings.com/ai-assistants/lumo/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/ai-assistants/lumo.md