Lumo
Proton's hosted AI assistant with zero-access encryption of saved chats and a strict no-logs policy.
Private alternatives to ChatGPT, Google Gemini, Microsoft Copilot, Perplexity, vetted against our public criteria.
Proton's hosted AI assistant with zero-access encryption of saved chats and a strict no-logs policy.
DuckDuckGo's private AI chat that lets you talk to multiple models with no account and no training on your prompts.
Infomaniak's Swiss-hosted AI assistant that pledges no training on user data and operates under GDPR and Swiss data law.
Apple's AI. On-device where it can, with verifiable Private Cloud Compute for the rest.
No matches for those filters.
Hosted AI assistants are convenient, but the mainstream ones log your prompts, can train on what you type, and tie every conversation to your account. The services here are the hosted middle ground: prompts still go to a server, but to companies that contractually do not train on your chats and collect as little as possible. For chat that never leaves your machine at all, see Local AI.
Since the prompt does leave your device, the provider’s commitments are what protect you. The meaningful ones are a clear no-training pledge, minimal logging, and no advertising profile built from your questions. A provider in a strong privacy jurisdiction helps, as does an open-source client you can inspect. This tier will not match running a model yourself for secrecy, but it is a real step down in exposure from the big assistants.
The mainstream assistants are built to learn from usage and to keep you signed into a company’s wider product line. Turning off chat history trims what you can see in the interface, not necessarily what the model trained on or what the account ties together behind it. The incentive runs the other way from your privacy, so the fix is a provider whose business does not depend on harvesting your conversations.
Point your everyday questions at one of these and use it the way you used the mainstream tool. For anything sensitive, drop down to a local model where the text never leaves your computer. The honest trade is that the largest hosted models still lead on the hardest problems, so you may keep one mainstream account for those and simply stop feeding it the rest of your life.