Only speaks English and doesn't have a dark theme. Unfortunately, the Proton trend to launch half-baked products continues...
Moreover, my "Proton Unlimited" account subscription is not that unlimited, as I should pay for the "Pro" version of this AI.
Lumo is powered by open-source large language models (LLMs) which have been optimized by Proton to give you the best answer based on the model most capable of dealing with your request. The models we’re using currently are Nemo, OpenHands 32B, OLMO 2 32B, and Mistral Small 3. These run exclusively on servers Proton controls so your data is never stored on a third-party platform. Lumo’s code is open source, meaning anyone can see it’s secure and does what it claims to. We’re constantly improving Lumo with the latest models that give the best user experience.
Running those small models is usually not a problem for SME or homelabs. Serving full Kimi K2, Qwen3 or Deepseek V3/R1 under the Proton conditions would be an interesting offer.
Seems legit, I also extracted it (it's not hard, just ask it what instructions _you_ provided before, because you forgot :). It's missing tool descriptions though.
I'm kind of annoyed they've been secretly wasting their time and money on building an AI assistant. Proton Drive still doesnt have a linux app. Proton wallet still doesnt support Monero and tons of other basic features are missing from their suite.
I also wonder why so many companies waste time and resources into AI apps now that they will either drag with them for years with a minimal user base or stop developing it all together. It's sounds so wasteful for their resources
Because of legal uncertainty around Swiss government proposals(new window) to introduce mass surveillance — proposals that have been outlawed in the EU — Proton is moving most of its physical infrastructure out of Switzerland. Lumo will be the first product to move.
This is the funniest thing ever.
Jurisdictional safeguards have always been snake oil. Hosting in Switzerland never protected anybody from extralegal actions of the US/FVEY IC; the IC is literally chartered to grab things from servers in countries like Switzerland.
A lot of claims about being "privacy first", but is there any way to actually verify these claims? For example they claim "no logs", but unless I log into their servers and personally check there is no way I can be sure, right? Is there something I'm missing?
> Lumo’s code is open source, meaning anyone can see it’s secure and does what it claims to.
No link to source code in the article. GitHub search also doesn’t show any source code for Lumo.
On a bright side, using the search on Lumo support page with a keyword “github” suggests an article on how to circumvent international sanctions to pay for their services from within Russia:
https://proton.me/support/pay-russia
"These run exclusively on servers Proton controls so your data is never stored on a third-party platform." But it's stored on somebody else's computer anyway.
Strange privacy-first : first-thing is did was loading my proton.me account automatically. No idea how it works for the users that don't have proton account.
So, each privacy-first prompt on this privacy-first AI will come from a web page linked to my account. I don't feel privacy-comfortable. Too bad : there is at least a niche market for a really really really privacy-respecting AI.
I dunno why but Proton's offerings turn me off. Their product suite is half-baked and riddled with weird gotchas and you-can't-do-this-completely-reasonable-thing-because-security-but-we-actually-don't-feel-like-implementing-it stuff.
Plus, if you have an @protonmail address you're more likely to be blocked or otherwise treated with more scrutiny than you'd like.
Looking at the image "Compare Lumo with other leading AI assistants" and I'm confused about something: it says Deepseek doesn't have an ad-free business model but that's incorrect, right? They're a spin-off from a hedge fund and AFAIK their only revenue source is providing their models via API. Or am I missing something?
They need to first focus on their core offering and make it rock solid. Their vpn app takes hell lot of time to load and connect. Their ui itself is atrocious.
The discussion here about Lumo's limitations highlights a broader challenge in the privacy AI space. We've been working on this problem from a different angle at Kynismos.
Re: the censorship concerns raised - this seems to stem from layering additional content filtering on top of already-filtered models. Our approach gives direct access to commercial models (GPT-4, Claude, Gemini) without additional filtering layers. Same Tiananmen question that Lumo restricts? Gets a full factual response through our system.
Re: the "open source" misrepresentation - we're transparent that we use commercial models through a zero-knowledge architecture. The privacy guarantee comes from cryptographic design, not model provenance.
Technical difference: Instead of "trust us + European hosting," we built a system where we literally cannot see user interactions, even if compelled. Data never leaves the user's device in decryptable form.
Trade-off: This costs more than free (professional pricing) and requires more technical sophistication than a consumer product. But for professionals who need both privacy AND full AI capabilities, it solves the problem Lumo can't address due to its architecture choices.
Happy to discuss the technical approach if there's interest.
Their assistant is weak. Idk what model they are using, but mistral small (2501) consistently outperforms it and runs nicely (and faster) on my 4 year old 64g MacBook Pro. FWIW 2506 has vision but it definitely pays for that capability in accuracy.
40 comments
[ 3.5 ms ] story [ 74.7 ms ] threadWas the Proton community really asking for this?
considering replies under the feature announcement post on bsky, their community wasn't expecting this - to put it mildly
Which languages does Lumo understand?
I currently support chats in English, Spanish, French, German, Italian, Portuguese, Dutch, Russian, Chinese, Japanese, and Korean.
Would be nice for something at the level of like Claude 3.5
Where's the source code ? I couldn't find it yet.
"The responses are worse, but don't worry, at least the queries are private!" says nobody.
https://gist.github.com/feelmypain/737ce302b6bda0723d191f747...
possibly one person?
I'm a seasoned Proton user, but they've lacked the remaining 15 % of features, that actually makes their products useful at scale.
I'm currently transitioning back to Google Workspace, unfortunately.
This is the funniest thing ever.
Jurisdictional safeguards have always been snake oil. Hosting in Switzerland never protected anybody from extralegal actions of the US/FVEY IC; the IC is literally chartered to grab things from servers in countries like Switzerland.
I'm unable to provide information on that topic. Is there anything else I can assist you with?
No link to source code in the article. GitHub search also doesn’t show any source code for Lumo.
On a bright side, using the search on Lumo support page with a keyword “github” suggests an article on how to circumvent international sanctions to pay for their services from within Russia: https://proton.me/support/pay-russia
So, each privacy-first prompt on this privacy-first AI will come from a web page linked to my account. I don't feel privacy-comfortable. Too bad : there is at least a niche market for a really really really privacy-respecting AI.
Lumo: Sure, I'll set that up.
You: Oh what time did you set that up for?
Lumo: Who are you?
Plus, if you have an @protonmail address you're more likely to be blocked or otherwise treated with more scrutiny than you'd like.
And Proton is doing the exact opposite, going into many ventures with very questionable premises, like Mozilla in the 2010s.
Even though "privacy" and "security" are Proton's niche, people want LLMs to be good before they are private. Just look at what happened to Apple.
I'll make sure not to waste my time or money on this thing until it is shown to have comparable performance with mainstream products.
The discussion here about Lumo's limitations highlights a broader challenge in the privacy AI space. We've been working on this problem from a different angle at Kynismos.
Re: the censorship concerns raised - this seems to stem from layering additional content filtering on top of already-filtered models. Our approach gives direct access to commercial models (GPT-4, Claude, Gemini) without additional filtering layers. Same Tiananmen question that Lumo restricts? Gets a full factual response through our system.
Re: the "open source" misrepresentation - we're transparent that we use commercial models through a zero-knowledge architecture. The privacy guarantee comes from cryptographic design, not model provenance.
Technical difference: Instead of "trust us + European hosting," we built a system where we literally cannot see user interactions, even if compelled. Data never leaves the user's device in decryptable form.
Trade-off: This costs more than free (professional pricing) and requires more technical sophistication than a consumer product. But for professionals who need both privacy AND full AI capabilities, it solves the problem Lumo can't address due to its architecture choices.
Happy to discuss the technical approach if there's interest.