In an era where AI chatbots are under scrutiny for data misuse, Proton is setting a new benchmark. On Wednesday, the Swiss-based company, known for its privacy-driven digital tools, unveiled its newest innovation, Lumo, an AI assistant that prioritizes data protection above all else.
Lumo stands apart from typical AI chatbots by offering zero conversation logging and end-to-end encryption for chat history. Users can interact with Lumo without even creating an account. For those extra cautious, there’s also a ghost mode. It is a session-based feature that instantly deletes conversations when the window is closed.
Unlike most AI assistants integrated with tech giants in the U.S. or China, Proton proudly emphasizes that
“Lumo is based upon open-source language models and operates from Proton’s European datacenters.”
This European base is seen as a strategic advantage, offering stronger privacy compliance and independence from international surveillance norms.
The AI assistant also uses zero-access encryption, ensuring even Proton can’t view your stored conversations. All data remains encrypted and can only be decrypted locally on the user’s device. This approach is consistent across Proton’s ecosystem of products.
Available through web browsers and on both Android and iOS, Lumo is designed for broad accessibility. It allows users to upload documents for context-based answers, and Proton Drive account holders can link their cloud storage for seamless file integration.
Although Lumo is web-connected for certain queries, Proton notes it may not always surface the most up-to-date search results, reflecting its cautious stance on third-party data sourcing.
Proton is firm on not using user queries to improve its models. The company reiterated that “your queries are never sent to any third parties” and that it will not collaborate with major AI firms like OpenAI, distancing itself from approaches taken by companies like Apple.
This release isn’t Proton’s first AI venture. Last year, the company integrated an AI writing assistant into Proton Mail that also runs locally, aligning with its long-term commitment to on-device AI processing and privacy-respecting design.
With Lumo, Proton is not just entering the AI space; it’s redefining what it means to build AI responsibly.