Evenfall vs Proton Lumo: two privacy-first AI chats, compared honestly

This is the honest headline: Lumo protects your chats with cryptography; Evenfall protects them with policy.

Lumo stores your conversation history with zero-access encryption, meaning it's encrypted at rest under a key tied to your account. Proton — the company — cannot decrypt and read your chats, and neither can a rogue employee, a subpoena to the database, or a breach of stored history. Combined with open-source app code, live web search with citations, no logging, and Swiss/EU jurisdiction, that's the strongest cryptographic privacy posture in consumer AI chat as of 2026. (Lumo runs open-weight models rather than its own from-scratch ones, and how 'open' it is has drawn some debate — but the encryption claim is real.)

Evenfall takes a different approach. Its privacy guarantees are real and enforced — no training on your chats, no ads, no behavioural tracking, and deletion that removes the actual database row rather than hiding it — with data encrypted in transit and at rest. Lumo's edge is cryptographic: if your threat model requires that the provider be technically unable to read your messages, Lumo is purpose-built for that. Evenfall focuses instead on a fast, synced, full-history experience with anonymous billing. See /principles for exactly what Evenfall promises.

Lumo runs its own Lite and Max models built on open-weight technology, with no third-party frontier models and no picker — a deliberate trade-off for transparency and control.

Evenfall takes the opposite approach. It runs a fast frontier model selected from a model picker, with more options added over time, so you can reach for a top-tier model rather than being fixed to one open-weight tier. On top of that:

• Real-time conversational voice mode on Pro (~1 hour/month). Lumo offers voice input (dictation) in its mobile app but no real-time voice conversation as of 2026.
• Streaming responses with markdown and syntax-highlighted code blocks with copy buttons.
• Per-conversation custom instructions, plus reusable assistants (saved persona/instructions) for paid users.
• Folders and pinned conversations, auto-titled chats, and a keyboard-first flow.

If your priority is a polished, fast, everyday ChatGPT-style workspace with a choice of frontier models and hands-free voice, Evenfall is built for that. If your priority is auditable, self-hosted open-weight models and native mobile apps, Lumo wins. Compare plans at /pricing.

Both products let you stay fairly anonymous, but in different ways.

Lumo lets you use the free tier with no account at all, even over Tor — excellent for a quick, unattributable question. Its paid Lumo Plus, however, ties to a Proton account and the usual card or (via Proton) Bitcoin flow. Note that Lumo Plus is a separate paid upgrade — the Proton Unlimited bundle includes only the free version of Lumo.

Evenfall's angle is anonymous paid access. Sign-in is a passwordless email one-time code or Google. For payment, alongside monthly Stripe subscriptions you can buy a crypto one-time 30-day pass through NOWPayments: no card, no bank, no recurring subscription, and no name on the invoice. When you do use a card, Stripe handles it end-to-end — card details never touch Evenfall's servers.

Neither approach is strictly 'more private' than the other; they optimise for different moments. Lumo is stronger for anonymous free use; Evenfall is stronger for anonymous paid use without a subscription trail. More privacy-AI matchups at /compare.