Enveliq：运行在本地电脑上的私有邮件助手

Turn email into clarity.

A private email assistant that runs on your own computer.
It reads your inbox for you, tells you what needs a reply, and keeps everything else out of your way.

Install it · What you get · Install options · Questions · All guides

Why Enveliq?

Email piles up. Most of it does not matter, but a few messages do: the bill due on Friday, the school form, the parcel that has not arrived, the question someone is waiting for you to answer. Finding those few means opening every message.

Enveliq does that sorting for you, calmly and in plain words, and it does it on your own computer, not in somebody else's cloud.

Know what needs you. Each email gets a short summary and a clear label. Things that need action are pulled to the top. The rest can wait.
Nothing falls through the cracks. Enveliq keeps a list of tasks it found in your email, parcels on their way, and emails where you are still waiting for an answer.
Calm by design. Plain words, no clutter and big, clear buttons. It was designed to be easy on anyone who finds a full inbox stressful.
Private by design. Your email is never copied into Enveliq. It stores only short, encrypted summaries, on your own machine. There is no account with us, no tracking and no ads. How that works
For the whole household. Everyone gets their own sign-in and their own private view. Nobody, administrators included, can read another person's mail.
You choose the AI. Use a cloud AI service, or run one on your own network so that nothing leaves your home.

What you get


Summaries	A one or two line summary of every email, written by the AI you choose and always labelled as AI.
Needs action	Emails that want something from you float to the top.
Tasks	Things to do, found in your email, with due dates. You can send them to your calendar or to-do list.
Shipping	Your online orders followed from the emails you get, with a simple "Did it arrive?"
Subscriptions	Renewals and free trials followed from your email, with a reminder a few days before so a free trial never turns into a charge by surprise.
Trips	Flights, stays and hire cars followed from your booking emails, put together into trips, and added to your calendar if you like.
Waiting for reply	Reminds you of emails you sent that nobody has answered.
Attachments	Summaries of PDFs and other attachments, and a safe preview. The files themselves are never kept.
Writing help	Optional. The AI suggests a reply, or checks one you wrote. It only suggests: you decide what is sent.
Reminders	Gentle nudges by browser notification, email or Home Assistant.
Messages	A small private chat between the people in your household.
Be careful flag	A calm note on an email that looks like a scam, and a plain line saying whether your email provider could confirm who sent it, so you do not have to judge.
Unsubscribe	One button to leave a mailing list, when the sender allows it.
Many mailboxes	Gmail, Outlook and Microsoft 365, iCloud, Yahoo, Fastmail, Proton Mail (through Proton Bridge) and any other IMAP service. Replies work with alias services such as Proton Pass and SimpleLogin.

The pictures use made-up example data.

Install

You do not need to know Linux or Docker. Every guide below tells you exactly what to click or type, one small step at a time. Plan on about 15 to 30 minutes.

The short version (Windows, Mac or Linux, with Docker installed):

Download install/docker-compose.yml.
Open it in any text editor and change the three lines marked <-- CHANGE THIS (what to put).
Start it with docker compose up -d, then open http://localhost:8765.

Pick the guide that matches what you have:

What you have	Guide
A Windows PC or a Mac	Docker Desktop (the easiest way to try it)
A Linux computer or server	Docker Compose on Linux
A Raspberry Pi	Raspberry Pi and ARM
A Proxmox server	Proxmox
Arcane	Arcane
Portainer	Portainer
Dockge	Dockge
A Synology NAS	Synology
Unraid	Unraid
TrueNAS SCALE	TrueNAS

Not sure? Start at Install Enveliq, which also lists what you need. Something not working? See Troubleshooting.

After you install

First-time setup: the one-time code, your administrator account and two-factor sign-in.
Connect your email.
Turn on AI summaries.
Open Enveliq on your phone from anywhere, privately, with Tailscale or your own web address.
Add the other people in your home.
Update, back up and uninstall.

Your privacy

Raw emails and attachments are never stored. Enveliq keeps only short summaries and structured results, encrypted.
Everything is locked in an encrypted vault (AES-256-GCM, with the key protected by Argon2id) on your own machine.
One person's mail is never visible to another person, and administrators run Enveliq without reading anyone's mail.
Email is treated as untrusted. The AI is told that email text is only data, is given no tools, and never decides or calculates anything. Anything the AI wrote is labelled as AI.
Strong sign-in. Passwords use Argon2id, with authenticator-app and passkey two-factor, recovery codes and single sign-on (Authentik, Authelia, Keycloak or any OpenID Connect service).
No telemetry, no third-party requests. The pages load nothing from other websites, and the author receives no data.

The full details are in SECURITY.md and the plain-language privacy notes.

Questions

Is it free?

Yes. Enveliq is free, open-source software under the AGPL-3.0 licence. You may need to pay for an AI service if you choose a cloud one; running a model on your own network costs nothing.

Do I need an AI account?

Enveliq works best with an AI model to write the summaries. You can use a cloud service (OpenAI, Anthropic, Google Gemini and others) or a model on your own network. You can install first and add the AI later. See AI summaries.

Can the AI see my email?

The AI you choose reads an email in order to write its summary. With a cloud AI service, that email text goes to that service, under its own privacy terms. If that matters to you, use a model running on your own network and nothing leaves your home. Enveliq itself keeps only the summary.

Can it send or delete my email?

It can send a reply, but only when you press Send. It never sends, deletes or changes anything on its own, and the AI cannot do any of those things.

Do I have to open it to the internet?

No, and by default you should not. You can use it on one computer, on your home network, or privately from anywhere with a free Tailscale account. Never forward a port on your router to Enveliq.

What if I forget my password or lose my phone?

Two-factor sign-in gives you ten one-time recovery codes. Keep them somewhere safe. See First-time setup and Troubleshooting.

Which computers does it run on?

Any computer that can run Docker: Windows, Mac, Linux, a NAS, a mini PC, a Proxmox server or a Raspberry Pi 4 or 5. The ready-made images are for ordinary 64-bit Intel or AMD computers; ARM computers build their own, which the Raspberry Pi guide shows.

How do I get help, or report a problem?

Start with Troubleshooting. If that does not solve it, open an issue on this page. Please do not paste real email, passwords or keys into an issue. To report a security problem, see SECURITY.md.

More guides

All the guides are listed, by what you want to do, in the documentation index. Some popular ones: Opening Enveliq from outside your home · Single sign-on · Outlook and Microsoft 365 · Proton Mail · Calendar and to-do lists · Reminders · Writing help · The Be careful flag · Snooze · Search · Subscriptions · Trips · Backup and restore · The demo · Undo · Checks before sending.

Version history

What changed recently (latest five versions)

Unreleased: A quick check before a new email goes. If a new email has no subject, or the words say something is attached but nothing is, Enveliq now asks once before sending. It never blocks you: Send anyway always sends. The check happens in the page, so it works the same for every mailbox. See docs/SEND_CHECKS.md.
v0.80: Five seconds to undo Reviewed, Archive and Bin, everywhere. Pressing Reviewed, Archive or Bin now waits five seconds before it touches your mailbox, on every screen and for several ticked emails at once. The email leaves your list straight away and a bar at the bottom says what you did, with an Undo button. This used to be so only on a phone. See docs/UNDO.md.
v0.79: The public status page says less. Before anyone signs in, Enveliq's status page now says only what the sign-in, setup and unlock pages need. It no longer shows the version, the encryption settings or the public address, and it says whether Enveliq unlocks itself from a key file only while the vault is closed. Signed-in people see the version in the inbox; administrators see the technical detail. This came from a read-only security probe of the live site.
v0.78: Licence changed to AGPL-3.0. Enveliq is now released under the GNU Affero General Public Licence, version 3, instead of MIT. Using, changing and sharing it stays free. The one new rule: if you change it and let other people use your version over a network, you share your changes under the same licence. The Terms of use page says so in plain words.
v0.77: Help links go to the Enveliq website. The "Open the guide" links in Settings, Administration, the setup guide and the plain-http warning now open the guides on the Enveliq website (enveliq.app) instead of the project's GitHub pages, so they are easier to read and need no GitHub account.
v0.72: Search everywhere. The search box now also tells you what it found in the other places Enveliq keeps things for you: emails in Reviewed, Archived and Snoozed, your tasks, the orders you are following and your waiting notes. A box called Also found elsewhere shows a few matches, each saying where it is, and pressing one takes you there. It uses only what Enveliq already keeps for you, so nothing new is saved. Also fixed: your tasks now show as soon as the page opens, not a minute later. See docs/SEARCH.md.

The full list is in docs/VERSION_HISTORY.md, and a more technical one is in the change log.

Current version: v0.80

For developers

Run without Docker, tests and repository layout

Run without Docker

pip install -r requirements.txt
python run.py

It listens on http://localhost:8765 and keeps its data in data/. Without ENVELIQ_SETUP_CODE the setup code is written to data/setup-code.txt (and the server log tells you where).

Build the image yourself

cp .env.example .env            # set ENVELIQ_PUBLIC_URL to your address
docker compose up -d --build
docker compose exec enveliq cat /data/setup-code.txt

The repository's own docker-compose.yml builds from the source here. The ready-made install file for everyone else is install/docker-compose.yml. Architecture: docs/ARCHITECTURE.md.

Tests

pip install -r requirements-dev.txt
pytest -q

Browser checks need Node.js and Playwright with Chromium (npm install playwright && npx playwright install chromium):

node scripts/check_prototype_injection.mjs   # hostile email content cannot run code in the inbox page
scripts/run_signin_e2e.sh                     # setup, authenticator app, passkeys, sign-in, admin pages

The full list of checks is in .github/workflows/ci.yml.

Repository layout

Path	What it is
`backend/`	Python/FastAPI server: encrypted vault, mailbox and message API, attachment preview store
`backend/auth/`	Accounts, passwords, TOTP, recovery codes, passkeys, OpenID Connect, sign-in API
`backend/mail/`	Mail fetching, AI summaries, tasks, shipping, writing help, reminders
`web/`	Sign-in, Settings and Administration pages (strict Content Security Policy)
`prototype/index.html`	The main inbox page
`install/`	Ready-made install files for everyone who is not building from source
`tests/`	Test suite (`pytest -q`)
`scripts/`	Browser checks and helper scripts
`docs/`	Guides: index
`brand/`	Enveliq logo files
`Dockerfile`, `docker-compose.yml`	Container image and the source-building compose setup
`SECURITY.md`, `SECURITY_TEST_RESULTS.md`	Security model, review findings and latest test run

Licence

Enveliq is free, open-source software under the GNU Affero General Public Licence, version 3 (LICENSE). In plain words: use it, change it and share it freely, and if you change it and let other people use your version over a network, share your changes under the same licence. There is no telemetry and the author receives no data. Plain-language terms of use and privacy notes are also shown in the app, and are general summaries, not legal advice.