{
  "slug": "lumo",
  "category": "ai-assistants",
  "name": "Lumo",
  "description": "AI assistant from Proton that runs open-weight models on Proton's servers, with no logs of chats and zero-access encrypted chat history.",
  "website": "https://proton.me/lumo",
  "source": "https://github.com/ProtonMail/WebClients",
  "license": "GPL-3.0",
  "platforms": [
    "web",
    "android",
    "ios"
  ],
  "jurisdiction": {
    "code": "CH",
    "name": "Switzerland",
    "eyes": null,
    "eu": false,
    "gdpr": true,
    "cloud_act": null
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "C",
  "score": 73,
  "coverage": 100,
  "summary": "Lumo scores 73 out of 100 (grade C) on the AI assistants criteria. It meets 7 of 12 criteria: no ads or data sales, transparency report, tells users about requests, TLS configuration, security headers, no training on your data and limited chat retention. It partly meets open source, no trackers or telemetry, independent audit and no account needed. It does not meet runs locally. It is based in Switzerland: Not in the Five, Nine or Fourteen Eyes; GDPR-style data protection law. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade A+.",
  "url": "https://privacyratings.com/ai-assistants/lumo/",
  "markdown": "https://privacyratings.com/ai-assistants/lumo/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://github.com/ProtonMail/WebClients/blob/main/LICENSE",
      "note": "Apps are open source under GPL-3.0. The server is not."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://reports.exodus-privacy.eu.org/en/reports/me.proton.android.lumo/latest/",
      "note": "Website analytics are self-hosted, and the Android app includes Sentry crash reporting."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://proton.me/lumo/pricing",
      "note": "Funded by paid plans, with no ads."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://proton.me/blog/soc-2",
      "note": "Proton completed a SOC 2 Type II audit, but the report is not public."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://proton.me/legal/transparency",
      "note": "Publishes yearly counts of legal orders received, complied with and contested."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://proton.me/legal/law-enforcement",
      "note": "Targeted users are notified of data requests, with delays only when Swiss law, a court order or a risk to life requires it."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://www.ssllabs.com/ssltest/analyze.html?d=lumo.proton.me&hideResults=on",
      "note": "Grade A+"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=lumo.proton.me",
      "note": "Grade A+ (115/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    },
    "no_training": {
      "title": "No training on your data",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://proton.me/support/lumo-privacy",
      "note": "Chats are not used to train models, except anonymized feedback that users choose to share for one model."
    },
    "runs_locally": {
      "title": "Runs locally",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "Hosted only."
    },
    "chat_retention": {
      "title": "Limited chat retention",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://proton.me/support/lumo-privacy",
      "note": "Chats are erased from servers after each response. Saved history is zero-access encrypted and only readable by the user."
    },
    "no_account_needed": {
      "title": "No account needed",
      "weight": 1,
      "answer": "partial",
      "evidence": "https://proton.me/lumo",
      "note": "Guest access works without an account, with usage limits."
    }
  },
  "tests": {
    "ssllabs": "A+",
    "observatory": "A+",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [],
    "tested_at": "2026-10-01T06:39:10.075Z"
  },
  "last_modified": "2026-10-01T06:56:31Z"
}