A summer shipping recap: a new name, a Community Hub, and the Pseudonymizer for everyone
2026-07-29 · Caiioo Team
Between May 1 and July 28 we shipped eighteen releases (0.9.720 through 0.9.737). Some of them were quiet reliability work — the kind you only notice because things stop going wrong. But many are the kind of features that change what you can do with Caiioo day to day, and a season this busy deserves a proper recap. Here it is.
The thread that ties it all together: your AI, on your terms.
It started with a name
May opened with PebbleFlow becoming Caiioo — the same animal, the same app you'd been using, with a new name on the door. Accounts, data, sign-ins, and sync all carried over untouched. Everything below shipped under the new flag.
The Pseudonymizer, for everyone
Caiioo's on-device personal-data filter graduated from the tester program in May and is now on every plan, including Free. Flip it on with the shield icon next to the send button and it detects names, emails, phone numbers, addresses, IDs, and other sensitive values in what you type and swaps them for realistic fakes — entirely on your device — before any of it reaches the model. The swap reverses locally on the way back, so your screen still shows the real values and tool calls still run on them. The model simply never learns who you're actually talking about.
A "🛡 pseudonymized" chip under each affected message shows exactly which real → fake pairs were used. A strict PHI / Safe Harbor submode meets the HIPAA de-identification standard for datasets you need to share. And a season of accuracy work taught the detector to handle Chinese, Japanese, Korean, and Arabic names properly, along with city and company names across 23 languages. For the full story of how it's built — and how it scores on published benchmarks — read On-device pseudonymizer: built and benchmarked.
The Community Hub: install, try, tweak, keep
May's other headline: the Community Hub launched — a one-click marketplace for the tools, modes, MCP servers, and complete apps that extend Caiioo, browsable from inside the app or at caiioo.ai/hub. The launch catalog included Slack, Notion, Linear, GitHub, Atlassian, Microsoft 365, Legal Data Hunter (18M+ legal documents across 110+ countries), and a shelf of servers that authorize through their own provider's sign-in — no copied secrets, no developer mode. Every package shows exactly what it installs before you click Install, and installs sync across your devices.
The summer's work was the natural next step: everything you install is now yours to remix.
- Edit any mode's personality. You can now open the system prompt of any mode — built-in or Hub-installed — and change it. The first edit automatically forks it into a personal copy that sticks across sessions and syncs to your other devices. A banner shows when your copy is active, and one click restores the original.
- Edit every part of a forked app. Cards, views, workflows, skills, modes, and variables each get a dedicated editor in Settings, with safe defaults so one malformed piece can't break the rest.
- Save a session as an app. When a conversation turns into a workflow worth keeping, say "save this as an app" and Caiioo snapshots the setup into a draft personal app you can refine and reuse.
And the shelf keeps growing. May shipped My Day (a one-click morning briefing that pulls today's calendar, unread email, and recent documents into one dashboard), Storybook Builder (pick a style and an audience; the agent designs a cast, keeps the characters consistent page to page, and illustrates a finished book), and Caiioo for Legal (fifteen cross-practice legal skills backed by two full negotiation playbooks). The summer added Caiioo for Medicine (beta) — a clinician decision-support factory bundling differential-diagnosis, drug-interaction, and SOAP-note skills with their reference materials — and for Grant Writers, a grant-lifecycle copilot that prospects live federal funding opportunities on Grants.gov fit-scored against your organization's profile, researches funders through their public 990 filings and federal award history, drafts LOIs and program sections, and builds line-item budgets — all grounded in open, keyless data sources. It never invents deadlines or eligibility, and it never submits an application on your behalf.
Install, try, tweak, keep. That's how tools should work.
Answer where your contacts actually are
The Messaging Gateway (Pro) launched in May: Caiioo can answer messages on WhatsApp Business, Messenger, Telegram, iMessage, Signal, Viber, and Beeper through a single gateway in Settings → Messaging. For each conversation you pick how the agent shows up — Auto (it answers, and anything you type in the thread coaches its next reply), Chime In (it answers, but anything you type goes through to the other person as you), or Chat (it steps back entirely and you drive). Photos, voice notes, and video flow through in both directions, so "what's in the photo the customer just sent?" is a question you can ask — and answer — without leaving the channel.
500+ models with one key
CometAPI joined Caiioo as a bring-your-own-key provider. One OpenAI-compatible key gives you access to 500+ models — GPT, Claude, Gemini, DeepSeek, and more — with benchmark-tier medals in the model picker, search, and the Best / Value / ZDR quick filters you already know.
And when a task needs a capability your chosen provider doesn't serve — web search, video generation, certain image models — Caiioo routes that request through OpenRouter instead of failing with a confusing error. But only if you've added an OpenRouter key and approved OpenRouter as a provider. Your prompt never goes to a provider you haven't OK'd. That consent rule isn't a nice-to-have; it's the whole point of a privacy-first workspace.
The consent machinery has a name — Tool Network Access, which launched in May. When you've chosen a local model (an intentional privacy decision) and a tool would route through a remote provider, Caiioo stops on the first attempt, asks inline with the tool and destination named, and remembers your answer per provider. Revocable any time in Settings.
One plan, every platform
Pricing got radically simpler in May. The separate Platform and Pro Mobile tiers are gone: there's Free, and there's Pro ($9/month), and Pro unlocks every Caiioo client — Chrome, Edge, macOS, Windows, Linux, iOS, and Android. The desktop apps no longer require Pro at all; sign in free on every platform. Every paid Pro month also tops up your provisioned OpenRouter key with $5 of model credit. And everyone on a retired tier was grandfathered into Pro at no extra cost, keeping every capability they had.
A second opinion that shows its work
The Self Checker launched in May: a ⚖ button on every assistant answer that gets you an independent verdict. The judge sees the full turn — your prompt, every tool call's inputs and outputs, attached images, and the reply — then authors deterministic checks, runs them, and renders a verdict card inline. Over the summer it grew real teeth:
- It can run actual Python to verify claims. Recompute a claimed statistic from the source data, re-derive a transformation — executed locally in the same no-network sandbox as everything else. A check that can't run cleanly reports as failed rather than silently passing.
- The verdict computes on your own machine's relay, so it completes even if you close the panel — and the judge goes through the same privacy protections as the original conversation, so a verdict on a pseudonymized message never sees the real names.
- Accuracy safeguards are now permanent. The built-in rules that keep the assistant grounded — stick to real sources, say so when unsure, cite where facts came from — used to be part of the default personality, which meant a custom instruction could quietly replace them. They're now a layer underneath everything: your customizations and installed apps add to them, never switch them off.
Your location stays on your device
When Caiioo needs to know where you are — weather, "what's near me," local context — it used to send your coordinates to a third-party service just to turn them into a city name. That lookup now happens entirely on your device, from a built-in database: your coordinates aren't shared with anyone. A new Precise option shares full GPS accuracy — neighborhood and coordinates — when you want it, and an optional network-based estimate (off by default) can fill in when GPS isn't available. The default got more private; the choices got more explicit.
Voice and audio, rounded out
- Two new voice providers. Cartesia (Sonic for text-to-speech, Ink for speech-to-text) and OpenAI's steerable voices joined the per-mode voice picker. The OpenAI voices follow natural-language direction — ask for "a warm Irish accent, slower pace" and that's what you get.
- Ask follow-up questions about any recording. Attach a clip and the assistant no longer sees just a one-shot summary — it can go back and re-listen with a targeted question: "which words were mispronounced?", "what's the tone of voice?" — on that turn or any later one.
- Record audio on iPhone and iPad. The composer's record-a-clip option arrived on iOS, matching the desktop app and extension — a natural pair with apps that listen, like the "for Languages" pronunciation coach.
- On-device voice got fast. Kokoro — the local text-to-speech that runs entirely on your machine — now starts speaking within about a second on macOS and runs natively on iPhone, where it used to buckle under memory pressure.
Phones that pick up where they left off
Phones interrupt things — a long screen lock, a switch to another app — and until this summer an interruption could kill a running response and quietly delete the half-written answer. Caiioo now saves its progress after every step, so at most the step in flight is lost. If the system does close the app mid-reply, you come back to a clear notice, the results of every step that finished, and a Continue button that picks up where it left off.
Startup got a rework in the same pass: conversations now load only when you open them, so cold start stays quick no matter how much history you've built up — and scheduled tasks and folders no longer risk showing up empty after a restart.
One more long-standing mobile gap closed: tool servers that require signing in — Notion, Linear, and the like — can now be connected from iPhone, iPad, and Android. The sign-in opens in your real browser, where you're already signed in, and hands the approval back to the app to finish the connection.
Private Sync, sturdier
Private Sync — end-to-end encrypted sync that never parks your data on someone else's server — got three fixes that make it behave the way you always assumed it did. Your sync key is now remembered across restarts (stored on your device, encrypted at rest) instead of asking you to retype it every launch. A desktop restart now triggers a full reconciliation, so changes your other devices made while it was down can't slip through the gap. And deletions finally propagate: delete a conversation on one device and it's gone on all of them, instead of quietly resurrecting.
Fifty tool calls from one script (early testing)
For work like "read these fifty pages and pull out the pricing," the assistant used to make each tool call one at a time — writing out every request and reading back every full result. It can now write a short Python script that makes those calls concurrently, keeps the full results in its private workspace, and brings only the parts that matter into the conversation. Faster, and far less clutter. Tools that need your approval can never be called from inside a script — the assistant still has to ask you directly, exactly as before. Rolling out to testers on desktop and the browser extensions now.
Early access: your workspace from another browser
One more thing we're building toward: open Caiioo.ai in a browser on a machine that isn't yours — a Chromebook, a locked-down work laptop — and reach your full workspace through your own private relay while your desktop app runs at home. Every tool call still routes through your own machine, over an end-to-end encrypted tunnel only you can open: remote access, not remote hosting. It's live in early access today and still rough around the edges — expect it to firm up over the next few releases before we make a bigger deal of it.
The steady drumbeat
The less-visible majority of eighteen releases, briefly.
May was document season: roughly 40 fixes across the Slate editor's tracked changes, diffing, and version history; a ~110-bug pass through Word import and export; a full PDF round-trip audit; and reliability sweeps through the Gmail, Drive, Sheets, Docs, and Calendar tools — replies that thread correctly, every calendar synced instead of just your primary, all-day events on the right day. Security hardening landed in waves too: a sign-in audit, strict per-profile isolation of settings on shared installs, a local bridge that stays on your computer unless you explicitly open it to your network — and Caiioo passed its SOC 2 Type I audit.
June and July: a deep streaming-reliability pass across every AI provider (dropped reply fragments, garbled non-English text, and stuck tool calls — fixed everywhere). Two more security-hardening sweeps covering document imports, rendering, and dependencies. Sign in with Microsoft on every platform. LaTeX documents with properly typeset math previews. Optional, anonymous, content-free reliability analytics — first-party only, off by default in the EEA, UK, and Switzerland, with a one-tap switch either way and no feature difference for opting out. And the last week of July tied off a stack of long-tail fixes: attached images and PDFs now reach Claude and Gemini intact on direct connections, follow-ups to Claude's thinking models work, newer Claude models like Sonnet 5 stopped rejecting messages over a retired creativity setting, recordings go straight to models that can listen, scheduled tasks remember the model you picked, and signing in got fixed across Windows and Linux — with error messages that finally say what actually went wrong.
Caiioo is a powerful, privacy-first workspace with an agentic orchestrator and chat interface that runs in a side panel. Start free with your own API key — research, read, plan, and draft — and upgrade to Pro when you want it to actually do the work. On Chrome, Edge, macOS, iOS, Android, Windows, and Linux.
Get it at Caiioo.ai.