← Reflick

Changelog

All notable changes to Reflick are documented here. Format follows Keep a Changelog; this project does not yet follow strict SemVer (pre-1.0 development history, first public tag will be v1.0.0).

This file is the curated, public-facing summary. The unabridged engineering history (every decision, every bug, every "why") is kept as private local dev notes, not part of this public repo.

[Unreleased]

Changed

• Reflick has moved to reflick.ai. The website, support email (support@reflick.ai) and update feed are there now. reflick.my still works and forwards to reflick.ai, and older versions of Reflick keep updating and working as before.

[1.0.6]: build 22, 3 October 2026

RefAI

• RefAI, the part of Reflick that works out what you mean, understands you better.
• Natural, messy speech is understood more often: long sentences, filler words, and requests that come after a bit of context, in all 27 languages Reflick speaks.
• More of what you say is understood right on your Mac, so more replies start without waiting on the internet.
• Questions about what is on your screen now look at your screen. "What is the total on this invoice" or "how do I close this" get an answer about what you are looking at.
• A greeting no longer hides your request. "Thanks, now open Mail" opens Mail.
• "Forget it", "never mind" and venting are no longer mistaken for instructions.
• Safer in every language: chatting about something will not set off an action that changes or deletes things on your Mac. Reflick only deletes something, or puts your Mac to sleep or locks it, when you clearly ask it to.
• Saying you have changed your mind is understood in every language. "Never mind", "leave it, don't do anything", or "I was going to ask you to delete those photos, but never mind" no longer start an action.

New

• Mission Control: press Command-Control-M, choose Missions in the notch menu, or say "show mission control" to see every running and recent task side by side, with its plan, each step it took and how long it took, how it ended, and a Stop for that task alone. While Reflick is using the pointer the window lets clicks pass through, and Escape still stops everything.
• Say "when you're done, email it to Sam" while a task runs, or type into its column in Mission Control, and Reflick does it after that task finishes instead of interrupting it. If the task stops or fails, Reflick tells you what it did not start.
• When the agent reaches a sign-in page it stops and says "sign in to linkedin, i'll wait". Sign in yourself, and it carries on by itself, or say "done". Reflick never stores or types your password, and after ten minutes it stops and waits for you to say continue.
• Settings, Privacy, What Reflick may do now lists each tool under its switch with Always, Ask or Never. Always is not offered for anything that sends, deletes, pays or posts, and things Reflick never does stay Never.
• Say "yes to all" when the agent asks a question, and it will not ask again about the rest of that task. Questions from other tasks are still asked one by one.
• In the chat panel you can edit an earlier message to carry on from there in a new conversation, find words with Command-F, and choose which model answers what you type.
• Bring your own model: in Settings > Models, add your own Anthropic, OpenAI, Gemini or OpenRouter key, or point Reflick at Ollama on your Mac. Conversations on your own key go straight from your Mac to that provider and use no credits. Agent tasks can run on your OpenAI key too. A Usage list shows what your keys were used for at API prices.
• Private Mode refuses every cloud model, including your own key. Ollama running on this Mac keeps working in Private Mode.
• Mini-apps: say "make me an app that shows my daily brief" and Reflick builds a small view of your calendar, reminders and mail, pinned in the notch menu. Change it by voice ("make it show my unread mail too"), set it to refresh every half hour, or remove it. Mini-apps cannot reach the internet or your files, and can only read a short list of things from your Mac. If you ask for something that needs the internet, like the weather, Reflick says it left that out.
• Workflow packs in Settings > Skills: four ready-made jobs (lead finder, problem validator, post harvester, profile finder). Each shows every tool it may use before you install it, asks for what it needs when it runs, and can run on a schedule.
• Recurring tasks by voice: "every friday at 5, summarise my unread slack and email me the summary as a draft". Reflick tells you what it costs when you set it up, runs it only at a quiet moment on an unlocked Mac, and keeps the result in the notch menu, flagged for review. Ask "what's scheduled" or say "cancel the friday one".
• Write through connected accounts: create a draft in Gmail or Outlook, add an event to Google Calendar or Outlook, or add a note to a HubSpot contact, by naming the account ("in gmail, draft an email to sam@example.com saying see you at one"). Reflick shows you everything it will send, in full, and writes nothing until you say yes. It never sends an email for you this way.
• Reflick works with your Obsidian vault. Choose it in Settings > Skills > Obsidian (vaults Obsidian already knows are offered), then ask "what do my notes say about pricing" or "summarise my note on the launch plan". Answers cite the notes they came from, and each one opens in Obsidian with a click. Only the passages that answer the question are sent, and in Private Mode nothing is: the matching notes are listed instead.
• Say "save this to obsidian" or "add this to my daily note" to add the last answer, a call, a comparison table or a briefing to today's daily note, using the folder and date format your vault already uses. "Make a note in obsidian about the launch" makes a new note. Reflick only ever adds to a note or makes a new one, never overwrites, and checks the file before saying it saved.
• Ask "what links to the launch plan" or "what's related to pricing" and get the connected notes from your vault's links and tags, each one opening in Obsidian.
• Ask "what do you know about Priya" or "everything about the launch" and Reflick answers from what it remembers, joined by names: calls she was on, facts, projects, commitments, decisions and briefings, each dated, with her note in your vault when you have one. Settings > Privacy > What Reflick knows now draws all of it as a graph you can click.
• An optional mirror writes what Reflick knows into a Reflick folder in your vault, linked so it shows in Obsidian's graph. Reflick rewrites only that folder. Erase everything removes that folder and the vault choice, and never touches your own notes.
• Say "look into Arc browser across Reddit, Hacker News and X" or "compare what people say about the Framework laptop" and Reflick reads up to four places at once in the background, then shows one card where every point links to the page it came from. The whole thing costs one run, and points that could not be traced to a page are left out and counted.
• Reflick can read web pages in the background without touching your screen, your pointer or your browser. Each task gets its own private page with its own cookies, cleared when the task ends. It never pays, checks out, signs in or fills in card, code or password fields there.
• When a task finishes, its card lists the pages and files it opened, with Open and Keep. Pages you do not keep disappear after 15 minutes, nothing is kept in Private Mode, and Erase Everything removes them.
• Errands on websites can fill in your delivery details from a wallet you set up in Settings > Privacy > Wallet: your name, phone, email, delivery addresses with labels like Home and Work, and when you like deliveries. Say "order me a pizza to work" and it uses your Work address. Reflick never stores or types card details: anything that looks like a card number is refused when you save.
• When an errand reaches the payment step, Reflick stops and shows a review card with the shop, the items, the delivery and the total read from the page, so you can pay on the page yourself. Reflick never presses pay.
• Tap "I paid" on the review card to keep a monthly total of what you spend through Reflick errands, and set an optional monthly limit. Once you reach it, Reflick tells you before the next errand. The total stays on this Mac and Erase Everything removes it.
• Answers can now come as cards shaped like what they are about: weather, a score, a chart, a table, a list, steps, a progress bar or a picture. A shaped or long answer opens as a panel growing out of the notch, with one line of what Reflick said under it and a bar at the bottom where you can type, or hold the push-to-talk keys to speak, start a new conversation, use the microphone, or mute Reflick's voice. Escape or a click elsewhere closes it, and nothing on it can be clicked while Reflick is working your screen.
• A card that would be wrong (a chart whose numbers do not add up, a table missing a cell) is never shown; you get the answer in words instead. Reflick never reads a card's raw data out loud.
• While you speak, a glowing orange line moves inside the notch with your voice, and while Reflick works the notch says what it is doing in a few words, like "looking at your screen" or "searching your files". With Reduce Motion or Motion Off the line holds still.
• A soft glow runs round the edge of your screen while Reflick is listening or working your screen. It is off in Professional mode, with Motion Off, and when Reflick is hidden from screen recordings.
• When an answer is about one part of your screen, Reflick draws a dashed box round it with a short label.
• During a walkthrough you can say "do it for me" and Reflick counts down two seconds on the step before clicking it: press Return to click now or Escape to cancel. It is off until you turn it on in Settings, General, and a button that sends or deletes still asks you first.
• Ask Reflick to make a picture: "make an app icon of a gear" or "generate an image of a red bicycle". It appears in a card with Save to Downloads and Copy. A picture costs one credit, which is given back if it could not be made. Reflick never makes pictures of real, named people, and it does not make pictures in Private Mode.
• Say "plan my day" and Reflick lays out your free time around your meetings, with a focus block, the things you promised for today and your reminders due today. Anything that does not fit is named. Nothing goes in your calendar until you say "put it in my calendar", and then it asks you once for the whole plan.
• Track habits by voice: "I want to read 20 minutes a day", "track my water", then "read done" when it is. Reflick keeps a streak, shows one check-in line in the evening, and answers "how am I doing this week". Nothing is kept in Private Mode, and Erase Everything removes it.
• Ask "what did I get done today" for a short review of your day: tasks finished, words dictated, where your time went and your habits.
• "Draft a LinkedIn post about our launch" writes a draft you can edit, insert into the post box you clicked or copy. Reflick never posts it. "What's on my LinkedIn" summarises the LinkedIn page you have open in your browser.
• Ask Reflick a question from Slack: link your Slack account once with a code from Settings, then send the Reflick bot a direct message and your Mac answers it. From Slack Reflick only answers questions: it never controls your screen, never sends or posts anything, and never reads your screen or clipboard into the chat. It is off until you turn it on.
• Talk controls in Settings > Voice: hold to talk or press once to start and again to stop, a different talk key (Right Option, Fn, or keys of your own), a mouse side button that starts talking or dictating, and a choice of microphone. If the microphone you picked is not connected, Reflick uses the Mac's own choice and tells you.
• Reflick can lower other audio while you talk and put it back exactly where it was when you stop. If Reflick quits unexpectedly while it is lowered, your volume is put back the next time it starts. It is off until you turn it on.
• With Polished dictation, Reflick now writes more formally in Mail and Outlook and more casually in Slack, Messages and WhatsApp, and you can choose the tone for any app. Raw and Light never change your words for tone.
• If you fix the spelling of a name Reflick just typed, it can offer to add it to your dictionary so it gets it right next time. It asks first, only offers names and technical words, never looks at password fields or anything it did not type, and is off until you turn it on.
• Finish my sentence: pause while typing and Reflick can suggest the rest of the sentence in faint text, which you accept with Tab. Off by default, and only in apps you add, never in password fields, code editors or terminals. Only the paragraph you are typing is sent, and in Private Mode nothing is.
• On Macs with Apple Intelligence, Private Mode can now answer your questions using the model on your Mac instead of declining them, with nothing leaving your Mac. Settings > Voice > Answer on this Mac lets it answer the rest of the time too.
• Settings shows how light Reflick is right now, for example "using 0.4% CPU and 120 MB", measured only while you are looking at it.
• Claude Code's status line can be shared with Reflick only after you choose Install; a status line you already have keeps working, and Remove gives it back exactly.
• After an update, a short card says what is new, once per version and never on a first install.
• The notch shows small rings for how full Claude Code's context is and how much of the Claude Code and Codex five hour and weekly limits you have used, with when each resets, read from files those tools already write on your Mac.
• Always allow for a coding agent's question remembers one exact command in one project, never a force push, a recursive delete, sudo or anything touching a .env file, and you can remove each one in Settings.
• When Claude Code asks to run a command, you can now choose Always allow in the notch, on the card beside the buddy, or by saying "always allow it". Reflick remembers that exact command in that project and allows it this time too. Risky commands never get the button, and if one cannot be remembered Reflick tells you why and leaves the question for you to answer.
• Claude Code stops and asks before editing a file another Claude Code session changed in the last ten minutes, once you install it in Settings.
• Paste a read only key for Stripe, Plausible, Vercel or GitHub and the notch shows today's revenue, visitors, your last deploy and your pull requests, one line each. Nothing is fetched in Private Mode.
• Unread Mail and Messages counts sit beside the notch when nothing else is happening.
• Your latest screenshots and screen recordings appear under the shelf, ready to show in Finder or move to the Trash after you confirm.
• Two new early tips point you at the screenshots and the coding agent limits.
• Multi-step requests, and Reflick chaining its own Mac tools without screenshots, are now on for everyone who never changed those switches. You can still turn them off in Settings > Developer.
• Open Reflick from the notch, or say "what can you do here", and you get up to three things it can do for what is on your screen, like summarising the page or replying to the email. Tap one or say "the second one".
• Offers beside what you are doing: a small card next to a long email, a form or an error message. Off until you turn it on in Settings > General, at most one every ten minutes, never in a meeting or a focus session, and "not on this site" or "pause offers for an hour" in one tap.
• Before a request that spans several apps, Reflick shows its plan first. A plan that only looks things up starts on its own unless you cancel; anything that sends, deletes or pays waits for you to press Go.
• Say "pause" or "hold on" while Reflick is working, and it stops at the next step and lets go of your screen. Say "carry on" to continue.
• Two tasks that need the same app or the same files no longer race each other: the second one waits and says so. "Then email it" waits for the first task's result and uses it.
• Asking for work overnight or in the cloud now gets an honest answer: Reflick only works on this Mac while it is awake.
• Ask "what did we decide about pricing last week" or "the doc I was writing on Tuesday" and Reflick answers from your own chats, with the date.
• Tell Reflick how you like things once ("I prefer economy", "always book a window seat", "use metric", "my usual coffee is a flat white") and it remembers. When it needs one it does not know yet, it asks one short question ("economy or business?") and keeps the answer. "Forget that" straight after takes it back. Nothing is kept in Private Mode. Settings > Privacy lists everything stored, with Remove per preference.
• When you dictate a promise through Reflick, like "I'll send it Friday", it can offer a reminder: "want a reminder friday at 9 to send it?" Say yes and it is set. It only reads what you dictated or wrote through Reflick, never other people's messages, offers at most three a day, and remembers when you say no. Anything still offered and not yet due shows up in the morning brief too.
• Reflick stops asking questions it can answer itself: a date with no year is the next one, "Friday" is the coming Friday, a reminder on a day rings at 9, a meeting lasts 30 minutes, and a flight uses your preferred class, else economy.
• Important mail, a coding agent that needs you and reminders that are due can appear as a small pill under the notch with Reply, Snooze 10 min and Open, and you can answer it out loud: "reply saying I'll call her back", "snooze that", "open it" or "dismiss". Only one shows at a time, never during a focus session, a meeting or while you share your screen, and if you close the same person's alerts three times Reflick asks once whether to stop showing them. A reply always opens as a draft you can edit, and sending still asks first.
• Reflick's cards now share one look: the same dark card with softly lit edges and rounded corners, a header naming the app the answer came from, and never more than six rows to read. A card about your next meeting has a Join button when the meeting has a real meeting link, and it cannot be pressed while Reflick is working your screen. Card contents arrive one after another with a soft blur; Calm motion keeps the order without the blur, and Motion Off or macOS Reduce Motion shows everything at once.
• Copy some JSON, a colour, a link, an email address or a file path and the notch menu offers what you would do next, like pretty printing JSON, copying a colour as RGB, or copying a link without its tracking codes.
• The file shelf can convert images between PNG, JPEG and HEIC, turn images into a PDF, and zip several files, always as a new copy beside the original, and send what is on it with AirDrop. The notch menu also shows downloads still arriving and the last one that finished.
• Clipboard history: Reflick can keep the last 200 things you copy (up to a week) on your Mac, so you can say "paste the link I copied earlier" or "copy the second one". It is off until you turn it on, nothing is kept in Private Mode, and turning it off deletes it.
• Clipboard history never keeps a password. Anything a password manager copies, anything copied while a password manager is in front, and anything that looks like an API key or private key is skipped, and you can exclude apps or say "pause clipboard history" for ten minutes.
• Say or type "set a timer for 25 minutes for the pasta". Reflick chimes and tells you when it is done, and you can ask how long is left or cancel it. The time left shows beside the notch while it runs. One timer runs at a time, and starting another says it replaced the first.
• The panel the notch opens can show the weather: the temperature now and today's high and low. Set your city and units in Settings > General. It is not fetched in Private Mode.
• When more than one speaker is available, the panel the notch opens shows where sound is playing and lets you switch to headphones, a display or another speaker.
• The island now shows a short line when your volume changes, when you plug in or unplug the charger, when the battery runs low, and when an external drive is connected or ejected. It stays quiet while Reflick is answering, while it is working on something for you, and while a meeting app is in front. Each one can be switched off in Settings > General.
• An external drive Reflick noticed gets an Eject button in the panel the notch opens.
• Say "show me my camera" for a small mirror before a call. Press Escape, click it, or say "close the mirror" to close it, and it closes by itself after three minutes. macOS asks for camera access the first time you ask for the mirror, and never before. Nothing is recorded or kept.
• The island now also shows a short line when you change the screen brightness, when headphones or AirPods connect or disconnect (with their battery when your Mac reports it), and when you turn a Focus on or off (a Focus that starts on a schedule is not shown). Wi-Fi and VPN changes can be turned on in Settings > General, and are off unless you turn them on.
• When Music is playing a song with lyrics, the panel the notch opens shows them under the track, if you have already allowed Reflick to control Music. Reflick never asks for that permission from the panel, and lyrics are never fetched from the internet.
• If you use Claude Code or Codex, the panel the notch opens shows how many tokens each used today, read from their own logs on your Mac. Only the token counts are kept; nothing you typed to them is stored or shown.
• The panel the notch opens now shows live CPU and memory graphs. They only update while the panel is open, so they cost nothing the rest of the time.
• Say or type "base64 encode this", "decode this", "url encode this", "format this json", "new uuid" or "what's the unix time". Reflick works on the text you selected, or else what you copied, and puts the result on your clipboard. Text that is not base64 or not valid JSON is left alone and Reflick says why.
• Speaking and typing are now one conversation. Ask something out loud, then type "and the cheapest?" in the notch or the chat panel, and Reflick knows what you mean. It works the other way round too.
• Every answer in the notch now ends with a field: type your follow-up right there and press Return, or hold Control and Option to say it. It no longer opens a separate window. Escape closes it.
• The notch menu's Home tab now lists your recent results, your background tasks and any question Reflick is waiting on. Click one to bring its card back. Lists with nothing in them are not shown.
• When Reflick cuts a spoken answer short, it now only says "the full answer is on screen" if the screen genuinely has it yet. If the rest is still arriving, it just stops talking instead of pointing you at a blank card.
• Connect almost any app, about three thousand of them, from Settings, Skills: search for it, press Connect and sign in on the app's own page. Reflick can then read from it for you, and asks you before anything that would change something, like sending or deleting.
• Ask about an app you have not connected yet, like "check my linear issues", and Reflick says so and puts up a link to connect it. You can also just say "connect to notion".
• For an app that is not in the list, Reflick can build its own connector from the app's API: give it the address and a key, which is kept in your Keychain. Anything that would change something stays off until you switch it on, and asks you every time.
• Private Mode now also stops every connector, so nothing goes to a connected app while it is on.
• Claude Desktop, Claude Code, Cursor and other AI apps on your Mac can now use Reflick's Mac skills, such as finding files, reading your calendar or searching your notes. It is off until you turn on Other AI apps in Settings, Privacy, and Settings, Skills shows exactly what is added to each app before installing it. Anything risky asks you on your Mac, the other app cannot say yes for you, and it can never control your screen, type into other apps, send, delete or pay.
• Reflick can now read a whole note from Notes when you name its title.
• Settings, Privacy now has one switch per thing Reflick can do (Mail, Calendar, Reminders, Notes, Messages, Files, screen reading, screen control, web errands, connectors, MCP servers, and letting other AI apps use Reflick), each with a plain sentence of what it allows and whether it asks first. Everything Reflick does today stays switched on; letting another AI app use Reflick is the only one that ships off.
• Say "fill this form with my details", "put my work email in the email field" or "fill in the shipping address" and Reflick shows every field and what it would put there, using your name, the details you have told it, and your contact card if Contacts is already allowed. Nothing is typed until you say yes, it checks each value went in, and it tells you what it did not know, like "filled 5 of 7, i didn't know your company or your phone number". It never fills passwords, codes, card or bank details, passport or ID numbers, and you always press submit.
• When you ask a question and add "and put it in a Word document" or "and save it in Notes", Reflick now answers and then writes it there. If you add something it cannot do from an answer, like "and email it to Sam", it tells you that part was not done instead of leaving it out.
• Reflick can read what Claude Code and Codex actually did on your Mac: the files they read and changed, every command with whether it worked and how long it took, retries ("fixed on try 2"), and whether the tests passed after the last change. A run with no tests, or only skipped ones, is never counted as passed. It also flags a changed .env or secrets file, a force push, the same command failing three times, two agents changing one file within ten minutes, and code changed with no test since. Nothing leaves your Mac.
• That activity can now be told as one sentence per request ("changed billing.ts, the tests passed after one retry, and pushed") or as a chapter list, copied as a standup note for everything done today, or as a per-request recap that keeps passed, failed, unclear and not-run commands apart and names the command each claim came from.
• Reflick can answer "what did Claude Code just do", "did the tests pass", "what failed", "what's Codex doing" and "summarise today's coding" from what the agents actually did, with no AI call, and shows the detail on a card you can copy. If a result was unclear it says unclear, never passed.
• Approve Claude Code from the notch. When Claude Code asks permission, the notch shows what it wants to run, warns you about risky ones (a force push, deleting a folder, touching a .env file), and offers Allow and Deny, or say "allow it" or "deny it". Turn it on in Settings > Skills > Coding agents. Reflick never answers for you: with no answer the question goes back to the terminal, and when Claude Code can't take an answer from Reflick it tells you to answer in the terminal.
• "Continue this in Codex" or "hand this to Claude Code" writes a hand-off note from what the agent actually did: what was asked, what was done, whether the tests passed, and what is still left. Reflick only opens the other agent in your project folder after you say yes.
• The notch's coding section now shows the agent at work: the file it is editing with the lines it changes in red and green, its own plan as a bar ("Plan 3/4 · Pushing to main"), how full its context is, and Codex's 5-hour and weekly usage.
• A Claude Code approval also appears beside your buddy, so you can allow or deny it where you are looking. It stays in the notch only in Professional mode and while Reflick is working on your screen.
• Make your own buddy in Settings > General: pick a body, eyes, something on top, a colour and a name, and watch it listen, think, speak and sleep before you choose it.
• Cursor, Gemini CLI, OpenCode and Copilot CLI can now tell Reflick when they need you or have finished. Each is installed only after you see the exact change, with a backup first, and Remove puts things back as they were.
• Reflick can now copy, rename and move files to the Trash for you, and move or copy several files in one go. It asks before putting anything in the Trash, and never deletes anything permanently or overwrites a file: a name already taken becomes "name 2".
• When Reflick says it moved, copied or trashed your files, it now checks the disk first. If a file is not where it should be, it tells you which one instead of saying it is finished, and if only some of a batch worked it says how many and names the rest.
• Reflick no longer reads formatting aloud. A short table is read one row at a time, a long one is not read out, headings, bullets and links are spoken as plain sentences, and code is not read out.
• A research or web-search answer now lands on the result card, not only in speech, and "show me the last result" (or "show me that again" with no walkthrough to replay) reopens it, with no walkthrough drawn on screen instead.
• Asking Reflick to find a restaurant and book it now hands the booking to Reflick in your browser, which stops before anything is paid, instead of typing your whole sentence into Google.
• After Reflick finds you a few good places, "which one do you recommend" or "what's the cheapest" is answered from what it found, without a new search. If it doesn't know the answer from what it found (the map has no prices), it says so.
• Asking for the "good" or "best" places now shows a card with the options side by side and which one Reflick recommends, instead of only a spoken answer.
• When the map finds nothing, Reflick searches the web for what you asked for and where, never your whole sentence.
• When you ask Reflick what it can do, the answer now comes from the tools it really has, so it no longer offers to delete your files.
• An MCP server that needs a token (GitHub, Slack and the like) can now be given one. The token is kept in your Keychain, never in the server list file, and changing it later does not switch the server off.
• Tools from your connected MCP servers are now used by Reflick's fast path, not only when it drives the screen, and Reflick asks before using one that changes something unless the server says it only reads.
• Asking "what can you do" now names the tools your connected servers give Reflick.
• Reflick now reads every tool an MCP server offers, not only the first page of them, and picks up new tools when a server says its list changed.
• Letting Reflick use MCP servers switches on by itself the moment you approve your first one, rather than needing you to also find a separate switch.
• Connected accounts now feed Reflick. Ask "any unread gmail from Priya", "what's on my Google Calendar today", "find the budget doc in Drive", "what did people say to me on Slack" or "what's assigned to me on GitHub" and Reflick reads the account you connected. Reading only: nothing is sent or changed. Name a service you have not connected and Reflick says where to connect it. Nothing is read in Private Mode.
• With Gmail, Outlook or Google Calendar connected, the morning brief lists emails that need a reply and today's meetings with their join links.
• Settings, Skills, Connections shows what Reflick can do with each account you connect.
• While Reflick points at something on screen, your buddy looks at it too.
• Your buddy feels alive. Its eyes turn to follow your pointer, it blinks on its own uneven rhythm (sometimes twice), and it breathes while it rests.
• Your buddy reacts to what happens: it leans in when you talk, hops and sparkles when a task is finished and checked, shakes its head when something fails, hops up with a "!" when it needs you, and nods when you stop it.
• A finished task with nothing to show for it does not get a celebration.
• Your buddy says hello when Reflick starts and when your Mac wakes, at most once an hour.
• Drag a file over the menu bar icon and your buddy opens wide, then gulps it when you let go.
• Click your buddy in the open notch and it squashes and looks annoyed. Click it three times quickly and it gets dizzy. It ignores clicks while Reflick is using your screen.
• Your buddy stops animating while your screen is locked or your display is asleep.
• Settings > General has a Motion choice: Full, Calm or Off. Professional mode is always calm, and Reduce Motion in System Settings leaves only a blink.
• The face redraws quickly only while something is moving, and slowly while it rests.
• Under your next meeting the notch now says how long you're free, like "You're free until 3", or how long you have after the meeting you're in.
• Your next meeting in the notch now has a Join button when it has a Zoom, Google Meet, Microsoft Teams or Webex link, shown from an hour before it starts until it ends. Agenda and document links are never mistaken for the meeting.
• What's playing in Music or Spotify now shows in the notch, with previous, play and pause, and next. Reflick only listens for what the player announces, so it never asks for a new permission to show it.
• On a Mac without a notch, Settings > General can now draw the island flush to the top of the screen, like a notch, instead of as a floating pill.
• Drag files onto the open notch to pin them on a shelf. They stay until you remove them, and "email these to Anna" or "make these a PDF" means the files on your shelf.
• Today's reminders in the notch can now be ticked off right there, without opening Reminders. Repeating reminders Reflick set for you have no tick, so a tap can never cancel the rest of their schedule.
• Settings > General has a new Island card: pick an accent colour for the idle notch, how wide the panel it opens is, and how the collapsed island looks on a Mac with no notch, with a small live preview. The shipped look is unchanged until you pick something else.
• Claude Code and Codex can tell Reflick when they need you or have finished, and the island says so with the project's name. Nothing is added to their settings until you press Install and read exactly what will be added, a backup is made first, and Remove takes it all out again.
• Let other tools use Reflick: an optional local connection, off until you turn it on in Settings, that lets your own scripts check Reflick's status, show a line in the island and say a sentence. Each connection gets its own key, shown once, and only the permissions you tick, with a list of recent activity that never records what was sent. It can never start a task that controls your screen, send anything, or read what Reflick remembers. Adding reminders and asking questions this way are coming next.
• My commands: say a phrase of your own and Reflick runs one of your Shortcuts, on your Mac and free. If the Shortcut returns text, Reflick says it.
• Personalities: Calm, Cheerful, Coach, Butler or Deadpan change how your buddy words things, never the facts. Professional mode always speaks plainly.
• Point at the notch and the island peeks out: it widens a little, with your buddy on one side and a word of status on the other. Rest there and it opens the full panel
• When Reflick starts, your buddy peeks out of the notch to say hello before the greeting, then tucks itself away
• The island folds itself away: when the panel closes it goes back to the peek, and back into the notch a minute after you move away
• Every change of shape in the island now moves on a gentle spring instead of jumping. With Reduce Motion on in System Settings it uses a short, plain ease instead
• On a Mac without a notch, or an external display, you now get the same island as a notched Mac, grown from the middle of the menu bar, and pointing at the top edge there brings it out
• Select text in any app, hold Control and Option, and say "rewrite this more politely", "fix the grammar in this" or "translate this to Arabic". Reflick replaces the selection as one edit, so Command-Z puts the original back, and your clipboard is left as it was. If the text cannot be written back, it appears on a card with a Copy button instead. Password fields are never touched.
• "Summarise this", "explain this" and "what does this say about deadlines" answer about the selected text on a card, without changing it.
• Answers from Reflick's own Mac tools show what was checked under them, such as "checked: volume is 30%" or "checked: event exists in Calendar", and say "couldn't check" when nothing could be read back.
• Mail, calendar and file answers offer up to three next steps, each with the reason it is offered. Click one, or say "the second one". They go away after 45 seconds or when you ask something else, and cannot be pressed while an agent is using the screen.
• Card numbers, bank account numbers, email addresses and phone numbers in selected text, and in documents Reflick reads to answer you, are hidden before they are sent to the model. The card for a selected-text command says what was hidden. Screenshots are not masked, and PRIVACY.md says so.
• Say "transcribe this call" (or choose Transcribe a call in the notch menu) and Reflick writes down both sides of the call: your microphone as Me and your Mac's sound as Others, each line with a timestamp. A red mark beside the notch shows the time for as long as it records, and it never starts on its own.
• Say "stop transcribing" and the transcript is saved as a Markdown file in Documents, in a folder called Reflick Transcripts, named after the call and the time. An earlier transcript is never replaced.
• Ask "what's the transcript of my last call", "summarise that call" or "what were the action items" afterwards.
• In Private Mode the call is heard on your Mac only, and a lock beside the time says so. If your Mac cannot do that in your language, recording does not start.
• The first time, Reflick reminds you that recording other people may need their consent where you live.
• When the call was a meeting in your calendar, the transcript is named after it and lists who was invited. Say "email the summary to the attendees" and Reflick writes the summary and asks before opening the draft in Mail.
• Say "remind me about the action items tomorrow" after a call to get a reminder for tomorrow morning naming the call. In Settings, Privacy, a new switch asks Reflick to show the consent reminder every time you transcribe a call, not just the first, and a "Call transcripts" card lists your five most recent calls with a button to open the folder they are saved in.
• Say "turn this into a deck" (or a spreadsheet, or a document) and Reflick writes a real slide deck, spreadsheet or Word document on your Mac, in Plain, Report or Pitch style. It never replaces a file that is already there, and it checks the new file opens before telling you it is ready. Works from a document or PDF that is open in front of you; a web page, or an image or scanned page that needs reading by OCR, is not supported yet. It needs the model, so it is declined in one sentence in Private Mode. Saying "make slide 3 shorter" afterward to edit the file in place is not built yet; ask again from scratch for now.
• Say "chart this" over a table and Reflick picks a bar, line or pie chart from the shape of the numbers, and treats a column of years as the timeline rather than as numbers to chart. The chart card can copy the chart as an image or save it as a PNG. Putting it straight into a spreadsheet as an editable chart is not here yet; paste the copied image instead.
• Snippets can have blanks, like {name} or {amount}. Say "insert the follow-up template for Anna" and the name is filled in. If a blank is still empty, Reflick asks for it instead of typing a message with a gap. In Settings, Voice, Snippets, "Make this text a template" offers to turn names, dates and amounts into blanks, and "Generate from a description" writes a template for you to read before you keep it (not available in Private Mode).
• The island and your buddy now redraw at the speed your screen actually supports, up to 120 times a second on a ProMotion Mac, and slow right down when nothing is moving. This never animates faster with Reduce Motion, Low Power Mode or the Motion setting turned down, only the same speed or slower.
• While a task runs in the background or music is playing, the bare notch shows a small pill beside the camera with an icon and a short value, like "2 tasks" or the song's name, and it moves in and out on the same spring as the rest of the island.
• The panel the notch opens now shows your next seven days as a row of days, with a dot on every day that has something on it and today highlighted. Click a day to see what is on it. It only appears if you have already let Reflick read your calendar; it never asks.
• When the island shrinks back to the notch it no longer swings past it for a moment, so there is never a sliver of menu bar showing under the camera.
• Drop a file, some selected text or an image on the closed island. It opens and offers what to do next: ask about it, add it to the shelf, email it or convert it for files, and Summarise, Chart, Make a file or Save as snippet for text. While Reflick is working your screen, the island never takes a drop or a click.
• Drag your buddy out of the notch onto any window. A white outline shows which one, and your next question is about that window.
• The island now opens with a little spring and closes smoothly with no bounce, its corners round out as it grows, and what is inside fades in as it settles.
• The island has its own short sounds for peeking, opening, closing, finishing a task and needing you. Mute them or change the volume in Settings, General, Island. They stay silent in Professional mode and when interface sounds are off in macOS.
• Choose how long an answer stays in the island: quick, 10, 15 or 30 seconds. A thin bar counts down its last seconds, and hovering keeps it.
• Pick a keyboard shortcut to open the island in Settings, General, Island. None is set until you choose one.
• Task chips in the island now show a tick when a task is done, a warning when it failed and a hand when it needs you, and the notch shows a small face for each task running in the background, up to four.
• The island now stays on the display with the notch even when you use another screen. In Settings you can put it on the main display or on every display instead.
• Resting your pointer on the hello at launch keeps it for a few seconds instead of hiding it.
• Say "compare these quotes" (or "compare the files on my shelf", "compare these three PDFs", "combine these into one table") and Reflick reads every file on your Mac first, then shows one side by side table with subtotals, grand totals and notes, and says the totals and which is cheapest. Different names for the same work are put on one row, a line only one quote has keeps its own row, and nothing is dropped. Every number is checked against the files and every total is added up again, so a figure that is not in a file shows as N/A with a note. Different phases, prices with and without VAT, provisional sums and mixed currencies are flagged and never added together. Comparing screens works too: say "add this screen" on each one, then "now compare them". A number cut off at the edge of the screen is marked incomplete rather than guessed. If a file cannot be read, Reflick names it and waits until you say "go without it". Open the result as a spreadsheet, or as a document for contracts and email threads. In Private Mode the files are still read on your Mac and shown as tables, but no comparison is made.

Fixed

• Quitting First Hello part-way and opening Reflick again now carries on from the furthest step you reached, and skips any step you have already done, like permissions you have already turned on.
• Asking for a reminder works however you put it: "set a reminder to", "add a reminder to" and "can you remind me to" now go straight to your reminders, like "remind me to" already did.
• "How do I change my wallpaper" now looks in System Settings, not at words that happen to mention it in a browser tab or checklist. Reflick looks in the app your question is about, never in its own windows.
• When Reflick cannot find what you asked about, it draws nothing rather than pointing at a guess. If the app you asked about is not open, it tells you to open it first.
• "I'm stuck", "which button should I press" and "what do I click" now show you where to go on screen instead of only reading out the steps. "My Mac is stuck" is still treated as a problem with the Mac.
• Reflick no longer starts a walkthrough while its own chat panel, Settings or Projects window is the one in front, unless you're asking about Reflick itself.
• Dictation writes email addresses the way you type them: say "sam dot jones at gmail dot com" and you get sam.jones@gmail.com.
• Dictation writes numbers as digits when they are numbers: "one thousand two hundred and fifty" is 1,250, "ten percent" is 10%, "at five thirty" is 5:30. Small numbers in ordinary sentences, like "one of the best", stay as words.
• Saying "scratch that" after a number now replaces just the number: "send it at five, scratch that, six" types "send it at six" instead of losing the whole sentence.
• Fixed a dictation bug where a short name like "Priya" could be typed in the wrong script (e.g. Devanagari) when everything else you'd dictated was in Latin letters. Reflick now asks the same recording again in English instead. Dictating in a language you actually speak is unaffected.
• Saying "call me Shubh" now changes the greeting in the notch straight away, and the name field in Settings follows it too. Before, the new name was saved but the notch kept showing the old one.
• Reflick no longer waits on the Mac's Keychain while it starts up. Reading your sign-in details now happens in the background and gives up after two seconds, so a Keychain that does not answer can no longer leave Reflick stuck with nothing on screen.
• "Reply to this email" with nothing else said now asks "what should the reply say?" and actually remembers the question, instead of the answer being heard as a brand new, unrelated request every time.
• When Reflick asks "what should the reply say?", your answer now becomes the reply. Say "reply with okay, I'll check it", "tell them I'll look tomorrow" or just the words themselves, and the draft appears for you to review. "Never mind" drops it, and saying something else entirely is handled as a new request.
• If a reply draft cannot be made, Reflick says why instead of repeating your words back to you.
• A question Reflick asked during one request no longer catches what you say after you have moved on to something else, including a "what percentage?" follow-up for volume or a memory question, and including when what you moved on to was answering a yes/no card by typing.
• A shortcut Reflick knows for an app, like save or new tab, now runs only when that is the whole request. A longer sentence that happens to end in "save it" no longer presses save and calls the job done
• Reflick no longer says "done" for a task that was never checked. A run that ended with no recorded result, or a native action whose own evidence says it could not be confirmed (a synthesized keystroke, a shortcut posted blind), now says plainly that it could not check rather than claiming success
• "Write five summary points about this article in Notes" makes a new note with exactly those points, and "create a summary and type it in Word" writes a Word document and opens it (in Pages or TextEdit if Word is not installed). "Open notes and type hello world" makes a note saying hello world. Reflick says done only after it has read the note back or found the document on disk, and tells you plainly when it could not check
• "Paraphrase this" rewrites the text you selected, right where it is, and only says done once the new text is really there. If it can't put it back, the rewrite is on the card for you to copy or insert, and Reflick tells you so. It never touches a password field
• A report Reflick saves, and the corrected copy of a document it writes beside your original, are only called saved once the file is found on disk with something in it. If it is not there, Reflick says so
• Reflick checks what it tells you it did. Saying it saved a copy, added something to Notes, typed, pasted, paraphrased, moved a file or created a folder now needs a real step behind it, or Reflick says it can't confirm it
• The notch no longer opens by itself while Reflick is doing a task on your screen, so it can never catch a click meant for the app underneath. Clicking the R still opens it.
• On a Mac without a notch, or an external display, the island sat ten points below the top of the screen, which read as something that failed to reach the edge rather than a deliberate shape. It is now flush to the top, the same way the notched island is
• The working ticker now says what Reflick is doing in plain words ("reading your mail", "moving files", "clicking") instead of an internal tool name, for every kind of step.
• You can now set your own approval rules, like "never ask about calendar" or "always ask before sending". A rule can only ever ask MORE about sending, deleting, trashing, paying, posting or typing passwords; it can only ever ask LESS about calendar events, reminders, moving or copying files, or drafts.
• A question Reflick asks before doing something that cannot be undone is no longer lost if you miss it. After 45 seconds it still counts as a no, and it moves to a "waiting for you" list in the notch menu, where Ask again puts the same question back to you. A question the agent asked mid-task is listed there too: the task waits for you instead of failing, and Ask again picks it back up where it stopped, so it asks you again.
• After Reflick moves, copies or trashes files, or creates a calendar event or reminder, a short Undo offer appears for ten seconds. Undo is refused, and says why, if the result has changed since. Where an action cannot be undone at all, like sending mail, Reflick says so before asking, not after.

[1.0.5]: build 21, 1 October 2026

New

• RefAI run 12 on your Mac. Reflick works out more of what you say on the Mac itself, with no paid call, and is right more often when it does. On a new blind test in 27 languages, 58.5% of sentences were settled on the Mac, up from 55.3%, and those were right 97.6% of the time.
• A project now answers from the files you add to it, and says which file it drew on. Adding a file from the notch now actually reads it, same as the Projects window, and a conversation started inside a project answers only from that project's files, citing the file and page or section under each answer
• Ask a project something its files do not cover and it says so, and tells you to ask Reflick directly by holding Control and Option, instead of answering as though the project had nothing to do with it
• Creating a project, or adding its first file, now makes it the project you are working in, so the very next question is answered from it
• Projects can now read plain text, markdown and rich text files, not only Word, Excel and PDF, and the text in pictures (a photographed whiteboard, a screenshot), read on your Mac
• The notch now says whether a project's files have been read ("3 files read", "reading", "1 can't be read"), and the Projects window says why a file failed instead of only "Failed"
• Ask out loud while a project is active and the answer card lists the project files it came from

Fixed

• "Translate it", "what does it say" and "what language is this" look at your screen the first time you ask, in French, Spanish, Arabic and Hindi too, instead of asking you to show the picture again
• Asking what a picture is, or what it says, reads the picture itself rather than telling you its file name
• A translation goes into the language you asked in, without asking which one, and says what the text is and what language it was written in
• Reading text from an image now recognises the language it is written in, so French is no longer bent into English words, and Arabic and the other scripts your Mac can read are tried rather than skipped
• "Move these images" with several files selected in Finder means all of them. Reflick no longer asks which one, and answering "all of them" to a question no longer brings the same question back
• "Move these images into a folder" now happens in one step on your Mac: Reflick makes the folder, moves the files you selected in Finder into it, and tells you how many arrived. No copies, nothing overwritten, and no questions when you have already selected them
• Reflick Agent can create a folder and move a file into it directly, instead of copying a file, pasting the copy into a folder, and deleting the original through Finder's own interface

[1.0.4]: build 20, 30 September 2026

Added

• Buddies: say "ask Inbox Scout what's urgent" to give a named buddy a job. Each buddy keeps its own purpose, tone and history, and goes through the same approvals and refusals as any task.
• Buddy routines: "every weekday at 9 have Inbox Scout summarise new mail" runs on its own, tells you the time and that each run is one agent run, and can be paused or removed by voice. Private Mode declines them and says why.
• A small orange count beside the notch shows buddy results you have not seen yet. It is not there when there is nothing new, and it goes away when you open that buddy.
• Settings > Skills > Buddies: make a buddy with its own name, purpose, character, colour and accessory, choose which connected accounts it may read, and see its routines and latest results. Deleting a buddy removes its routines too.
• Connect a custom AI connector (an MCP server) by its web address. Its token is kept in your Keychain, its tools are shown before you turn it on, and moving it to a different address needs your approval again. While Private Mode is on, Reflick does not reach it at all.

Fixed

• Ask for five points, a summary, the steps or a translation and Reflick now says all of it, instead of stopping after three and pointing you somewhere else.
• When an answer is too long to say, the whole of it stays on screen in the island, where you can scroll it. Reflick no longer tells you the rest is in the chat panel.
• Every spoken answer is now kept in the chat panel's conversation, so it is there when you open it. It goes under a document only when you asked about that document.
• "Where is the battery", "where is the Wi-Fi" and the other menu bar icons now go straight to the menu bar instead of searching the app in front first, so the answer is right and quicker.
• "Where is the Apple logo" points at the Apple menu every time.
• "Where is the Claude icon" (or any app's icon) points at that app's menu bar icon or its Dock icon, not at its window.
• With more than one display, Reflick points on the display the thing is actually on, and the pointer trail left by a task lands on the right display.
• No more stray square: the outline is drawn round the real control at its real size, and not at all when Reflick is only estimating.
• The buddy flies from where your pointer is now, or in from the nearest edge of the right display, never from a corner.
• The first question in Claude, Slack or VS Code right after switching to it now finds the app's controls instead of guessing.

New

• Invite friends. The Plan section of the notch menu has your own invite link with a Copy button. A friend who uses it gets 25% off their first pack or first month, and you get credits worth 25% of what they pay, every month they pay. The row shows how many friends have joined and the credits you have earned.
• Got an invite link from a friend? Copy it, open the Plan section, and the code is already filled in. Your own code, a code from your own team, a second code on the same Apple ID and a code after your first purchase are each refused with a plain reason.
• After First Hello, three quick questions (what you are working on, this month's goal, which apps matter) and Reflick proposes a small team of buddies. Accept, edit or dismiss each one: nothing is made until you accept it. Skipped in Private Mode.
• Each morning, a few suggestions for the day in the notch menu, built from your goals, what Reflick remembers about you and the accounts you connected. Tap "Do it" to run one, or "Not useful" and say why: that kind is not suggested again for a week, and tomorrow's list takes your reason into account. Nothing runs until you tap. Not in Private Mode.
• Replay tour, in Settings > General: watch First Hello again from the start. Nothing you have set up or told Reflick is erased, and push to talk keeps working while it plays.
• Focus sessions by voice. Say "help me focus for 25 minutes", "focus until 3" or "focus on the report for an hour". Reflick puts away YouTube, Twitch, X, Instagram, TikTok, Reddit, Facebook and Netflix, and if one comes back it closes it again and tells you when it can wait until. Never while you are in a meeting app, and never the thing you said you are focusing on. Say "how long is left" or "stop focusing" at any time.
• Ask "when am I most productive?", "what did I spend my time on today?" or "how long was I in Slack today?" and get an answer from your own day, on your Mac, with a small chart. Reflick can suggest a free hour for the hard task and offer to put it in your calendar.
• To answer those, Reflick remembers which app was in front, once a minute, for 30 days. Only the app's name: never window titles, web addresses or anything you type. Nothing is kept in Private Mode, and you can switch it off in Settings, which deletes it.
• Gentle reminders to stretch, drink water or take a break, off until you turn them on. Only inside the hours you choose, never in a meeting or a focus session, and they can be shown without being spoken.
• "Hey, Reflick, call me Sam", "change my name to Sam", "I want to be called Sam" and "call me Sam, not Bhavya" now change your name everywhere at once: the notch, the greeting, what the agent signs, and emails Reflick drafts for you. It works by voice, typed, in the chat panel, and while a task is running.
• "What do you know about me" now starts with your name and mentions what you talked about lately.
• Things you asked Reflick to remember are now kept in Reflick's own folder, so Erase Everything really removes them. Facts from earlier builds are moved over once.
• Reflick now brings what you asked about in the last few days into the conversation, instead of starting from nothing every time, and no longer claims to remember everything you've ever said.
• Your name is now visible and editable in Settings > General, not just something you can tell Reflick out loud.
• What you talk about out loud is kept in your conversation history, and Reflick picks up where you left off after a restart. Private Mode keeps nothing new.
• Say "I'm vegetarian", "I work at Acme" or "my manager is Priya" and Reflick remembers it without you saying "remember". "Forget that" straight after takes it back.
• "What did we talk about yesterday" and "what was I doing this week" now answer about yesterday and this week, not just the last eight hours.

[1.0.3]: build 19, 28 September 2026

Updates that reach everyone, a hands-free mode, answers you can look at, and a Private Mode.

New

• Every task ends in one of four ways you can hear: done, stopped by you, failed, or needs you. Pressing Escape now says the task stopped, that it was not completed, and how far it got
• A finished task's result shows what it did, step by step, with a tick for each. A stopped or failed task shows the steps it finished, the step it stopped at, and the steps it never reached, so you can see how far it got without asking
• Check for update from the notch menu. When a new version ships, Reflick tells you what is new, and a version found to be broken asks you to update
• Hands-free. Tap Option twice and just talk: each sentence is acted on as you finish it, with a live caption in the notch. Tap Option twice again, press Escape or say stop listening to end
• "Best places in Dubai" shows a card of places from Apple Maps, with a map, photos and a click to open each one, instead of a search page
• Labels as you scroll. Say "mark the AI slop", "label the ads" or "highlight posts about crypto" and each post gets a small badge that keeps up with the page
• Private Mode. Say "private mode on", or use the switch in the notch menu, and nothing you say or show leaves your Mac until you turn it off. Things Reflick does on your Mac keep working
• Errands on websites. "Find me flights to London on Friday", "book a table for two at eight" or "get me an Uber to the airport" opens the site and fills it in, then stops for you. Reflick never presses Pay, never signs in for you, and never types a password, a verification code or card details
• Connectors and plugins. Gmail, Google Calendar, Slack, Notion and more can be connected in Settings, Skills, on the provider's own sign-in page, and a short catalogue of plugins can be added in one click. Connectors read only, and appear as they are switched on
• Snippets. Set up a phrase like "my address" in Settings, Voice, and saying it on its own while dictating types the text it stands for
• Alerts for important mail. List the senders who matter, and a line appears in the notch when one writes or a subject says urgent. Off until you turn it on
• Report a problem sends your words, a check of Reflick's setup and, only if you leave it attached, a screenshot, all shown to you before it is sent. Help and a status page are in the notch menu
• Reflick greets you by name, and "call me Sam" changes it
• A tip a day for your first ten days, and how many words you dictated this week, in the notch menu

Fixed

• "Go to Deliveroo and book me a pizza" was repeated back instead of done. Asking Reflick to do something on a named website now starts the work in the browser, and a flight search ends with options to choose from (airline, price, time, stops and where to book), never a claimed booking
• "Show me how" no longer quietly turns into a spoken explanation when Reflick cannot draw it. It tries the planning step once more, and if the thing is not on your screen or it still cannot line it up, it says so before explaining in words
• "Reply to this email saying I'll be there at five" could put words in the To field, or not finish at all. It now replies to the email selected in Mail, puts your words in the body and nowhere else, and still asks before anything is sent
• "Hey Reflick, call me Sam" and "please call me Sam from now on" changed the name in conversation only, so the notch still greeted you by the old one. Every way of saying it now changes the one stored name, and the notch greets you by it
• Daily briefings by voice. Say "every morning tell me what's new in AI" and Reflick looks it up each morning, shows the items with their sources in the notch and reads them out when you are not talking. Each briefing uses one run. Ask "tell me more about the second one" or "open that source" afterwards, "what briefings do I have" to list them, and "stop the AI news" to end one
• Voice settings put the voices eleven cards down. The voice is first now, then Talking, then Dictation (folded until you open it), and Skills is grouped into Connections, Plugins and MCP, Scheduled and the Skills library, each of which folds. Nothing was removed, and a skills search opens the library by itself
• Holding Control and Option at the setup's practice step did nothing, because every press was ignored until setup had finished. The practice step now hears the keys, and if your Mac needs Reflick reopened before it lets the keys through, the card says so and offers typing instead
• A whoosh plays as Reflick goes into the notch at the end of setup, unless Reflick's sounds or your Mac's interface sound effects are off
• Signing in with Apple could open behind the setup window and fail with "not registered". Apple's window comes to the front now, signing in can set up the account itself, and when a network has set up too many Macs today Reflick says so
• Setup started over after quitting. It picks up where you left off
• The notch was nearly blank on a Mac without a notch. It uses the same island everywhere now
• Moving the pointer just under the notch opened it and took over typing in the address bar. It waits a moment now and never takes the keyboard when it opens on hover
• The buddy by the cursor showed in Professional mode. It shows in Buddy mode only
• Reflick could sit on "thinking" after the work was already done. The result shows the moment it is ready
• Reflick could say it had done something it had not. Every action now ends by saying it is done and checked, that it failed and why, or that it could not check and why
• AirPods and Bluetooth microphones connected after launch were not heard. Reflick follows the microphone you switch to
• Hands-free could end too early in a noisy room or never end in a quiet one. It learns the room's background level first
• A question gets an answer. Step by step walkthroughs on screen appear only when you ask to be shown
• When the intent service is slow, Reflick answers from your Mac rather than waiting
• Dictation typed two full stops after a spoken "full stop" or "scratch that", and with the multilingual voice setting it skipped clean-up and spoken commands entirely. Both work now
• Live labels did nothing in Chrome, Arc and other Chromium browsers, because the page's accessibility tree was never asked for. They now work there and in Safari, sit on the top right of each post, stay with it as you scroll, and say when they end (stop labelling, Escape, a new app or site, ten minutes) or when there is nothing to label

[1.0.2]: build 14, 27 September 2026

The first update since 1.0. Reflick now understands you in twenty-six languages on your own Mac, can handle your email by voice, and asks out loud before it does anything it cannot take back.

New

• RefAI understands you in twenty-six languages, on your Mac. It works out what you meant and which of Reflick's built-in actions to use without sending your words anywhere, and on a test set it had never seen it is as accurate as the paid model Reflick used to ask. Explanations and anything that needs thought still go to the model
• Email by voice. "Reply to the latest email from John saying Thursday works" writes the reply in the right thread, and "email Sara that the invoice is attached" starts a new one. Nothing is sent until you say yes
• Reflick asks before anything it cannot undo. When the agent reaches a Send, Delete, Buy or Post button, it stops, says what it is about to do, and waits. Answer yes or no out loud, in any of the twenty-six languages, or with the buttons. Silence counts as no, and it never types into a password field
• Dictation writes what you meant, not every sound you made. Ums and ahs are gone, "send it to John, I mean Jane" types Jane, "scratch that" removes the last sentence, and "new line", "comma" and "full stop" do what they say. Choose Raw, Light or Polished in Settings, Voice. Code editors and terminals are left exactly as you said it. English first, more languages to follow
• A new look for setup and the notch: one calm stage from the first screen to the last, with your buddy beside you
• "What time is it in Quebec City?" is answered instantly from your Mac's own clock, for cities around the world, instead of a web search
• Web research that reads its sources. When the agent looks something up it opens the pages, reads them, and tells you honestly what it found and where
• Arabic, and other languages the speech service misses, can still be heard. When it returns nothing, the same recording is read once more on your Mac, if Speech Recognition is allowed for Reflick

Fixed

• "Open the notes app", "open calculator two plus two" and similar everyday commands run instantly instead of handing over to the slow agent
• Reminders understand the time you say, including "at five in the morning". When Reflick cannot tell the time, it asks for it rather than trying for half a minute and failing
• A command wrapped in a sentence is a command. "Ugh, it's so bright, turn the brightness down" turns the brightness down instead of sympathising
• "Reply to this email" no longer becomes the text of the reply
• Saying a web address, like "open reflick dot my", opens the site

Fair use

• Free runs come with signing in with Apple, once per Apple ID. Signing out, deleting the account, or using a new Hide My Email address no longer hands them out again
• Every install is registered before it can use the service, and free conversation has a generous daily limit, so the service stays fast for everyone

Detailed notes, 1.0.0 to 1.0.2

Fixed

• The Realtime voice switch told you the wrong thing about money. It said a live conversation was billed by the minute, which was true when it was written and stopped being true when the charge became a flat three credits at the moment a session starts, however long you stay in it. It says that now, next to what an ordinary task costs and the reminder that talking normally is free
• A service warning from us no longer looks like an ordinary answer. Reflick can show you a short notice in the notch, and it carries a severity the sender chooses. That severity was stored, sent, parsed, and then ignored, so "we are having a problem right now" arrived looking exactly like "the fix you asked about has shipped". A warning is amber now, and stays until you dismiss it
• The notch admits when Reflick is still working on something you have stopped watching. A task you started, then spoke again over, kept running and went silent: the only way to find out was to hover a notch that was giving you no reason to hover. A small mark appears beside it now, and only when nothing else is already saying so
• The default cursor is a proper pointer now, not a triangle. It is the shape the brand is named after, it carries a white edge so it stays visible over anything, and it is the same silhouette the installer window draws
• Dictation can learn your own names and jargon. Reflick has been assembling a list of the words it keeps hearing from you for a long time and was throwing every one of them away before it reached the transcriber. It is a switch in Settings, Voice, because it trades the multi-language listening that handles accents well, and that trade is not the same answer for everybody
• Dictation into a text field typed nothing at all. Releasing the key asked the transcriber for your words and then, without waiting for them to arrive, typed the empty result. The words turned up a moment later with nothing left to put them anywhere
• Settings sat on top of every other window, forever. Open it, click your browser, and Settings stayed in front of it. Same for the teaching board, which is worse because it is meant to stay open while you work
• Reflick never checked for updates. Everything needed to ship a fix was in place except the one line that makes an installed copy look, so a bug could be fixed in a release you would never be offered
• Dictation was slow after a pause. The access token it needs lasts about a hundred seconds, so any press after a gap waited for a new one before it could hear you. It now stays renewed for ten minutes after you last spoke
• Five buttons showed the wrong cursor. Three of them were on the screen where you sign in to restore credits you had paid for, where an arrow instead of a pointing hand reads as the button being dead. The others were the appearance card in setup and the send button in the text window
• A run whose answer stopped halfway charged you for it. If the connection to the model dropped after the reply had started arriving, the credit was taken and never given back, and what reached the app was a half-sentence it could not read. The credit now comes back, which is what was already true for every other way a run can fail
• Reflick would say it had done something without having done it. A reply like "I've opened Safari and searched for that" was taken at its word and recorded as a success, even when nothing had been clicked. It now checks its own record of what it did before claiming a job is finished, and says so plainly when the two disagree
• Anything irreversible now asks first, whichever way you phrase it. "Delete file notes.txt" asked before deleting; "delete the notes file" did not, because the two took different routes through Reflick and only one of them had the question. Sending mail, sending a message, replying, archiving, deleting a file, emptying to trash and changing or deleting a calendar event all ask, both ways
• Sixty-one things Reflick already knew how to do for free were being paid for. "Pause music", "next song", "battery level", "what tabs are open", "when's my next meeting" and fifty-six more had an instant local answer that the app could not reach, so each one bought a round trip to a model and could come back as small talk, doing nothing at all
• The appearance you chose was never asked for and could not be changed. Reflick ships with two looks, Professional and Buddy, and it drew everything in Professional because nothing anywhere ever asked which you wanted. It asks during setup now, and it is in Settings, General
• Two file pickers opened behind the window that opened them. The Skills import and export panels are modal, so the Cancel button ended up behind the window you were looking at with no way back
• "Open YouTube and play the first video then tell me what happens" was treated as one instruction rather than three, so it was never planned as the multi-step job it is
• Two of Reflick's own public pages disagreed about what RefAI is. The service carried a second RefAI page, written when reflick.my did not resolve yet, and it went on describing an older version of RefAI after the homepage had moved on. There is one description now, on the homepage, and the old address redirects to it

Added

• When a job stops to ask whether it may do something it cannot take back, the question ends with "yes or no?" out loud. It was said as it is written, which is fine to read next to two buttons and tells you nothing when you are not looking at the screen: the likeliest answer to a question with no cue is "hang on", which Reflick does not count as either answer, so the question stood there until it gave up and stopped the job
• Two jobs that both stop to ask you something now wait their turn. Reflick can run several jobs at once, and the second one to reach a risky click used to answer the first one's question for you, so a job you were in the middle of approving ended with "okay, i stopped there", a sentence you never said. The question you are looking at keeps the screen, and the next one is asked, and spoken, once you have answered it
• The notch splits into two panels while several jobs run: what the current one is working through on the left, the others as coloured tags on the right, divided by a hairline. One job still draws one panel, because a divider with nothing beside it promises content that never arrives
• RefAI is on. Reflick now works out what you meant on your own Mac for four out of five things you say, in a fiftieth of a millisecond, without sending anything anywhere, and hands on the rest, which costs what it costs today. It can never decide to DO something to your Mac; that is a hard rule and not a confidence threshold, so the worst it can get wrong is spending a turn it would have spent anyway. There is a switch in Settings, Voice
• The admin console now says whether it is safe to require a registered install. Reflick has been allowing requests from builds that predate per-device accounts, which is the last way to use the service without one, and nothing could tell you whether any were left, so the switch that closes it stayed off because nobody could say it was safe, rather than because it was not
• The other jobs Reflick is running arrive one after another in the notch rather than all at once, which is what makes a row of coloured tags read as several things happening instead of one block appearing. Off if you have asked macOS to reduce motion
• RefAI, Reflick's own on-device decision layer, now actually runs. It works out what you meant on your Mac, in a fiftieth of a millisecond, without calling anything. When it is not sure, it says so and steps aside rather than guessing. It is off until you turn it on in Settings, because the evidence behind it is measured on phrasing we wrote ourselves
• While Reflick is working on one thing, the other things it is working on are visible. Several tasks can run at once and only the one you last spoke to was ever on screen; the rest now appear as small coloured tags under the progress bar, each a different colour, with a count when there are more than fit
• Reflick's own pages can be found now. Crawl directives, a sitemap, and the structured data a search result or a voice assistant reads a sentence out of. A separate file tells anything summarising Reflick what is *not* true about it, because the likeliest wrong answer about a product is one nobody thought to deny
• A CAPTCHA on the admin console, off until it is switched on. Everything already guarding that page makes a single *guess* expensive; none of it touches the *address*, so a rate limit that gives one network eight tries gives a thousand networks eight thousand. The challenge is checked before the password is hashed, and a challenge that cannot be reached is refused rather than waved through
• A page for RefAI, the part of Reflick that decides what you meant before anything is paid for. It lives on reflick.my: what RefAI is, how it scores against the hosted decision APIs on the benchmarks they publish for themselves, the caveat that qualifies that comparison, and a waitlist for the RefAI API
• The people who make Reflick can now tell you something without shipping a new version: a short notice in the notch, shown once, that expires on its own. Used for things a release cannot say, like a service problem or a fix landing
• Reflick tells you when there is a new version, in the notch. It checks once a day on its own. It never replaces itself without asking, because it holds the Accessibility grant and swapping the binary under a running task is not something to do quietly
• The notch now shows what the agent is actually working through: the steps it planned, with the one it is on picked out and the finished ones ticked off. Reflick has been planning multi-stage jobs for a long time and had never shown anybody the plan
• An admin console at admin.reflick.my. Accounts, balances, plans, how many Macs are on an account and when it was last used, plus the waitlist. You can grant or revoke credits, cancel a plan and delete an account, and every one of those is written down before it happens
• Two agents running at once are now drawn in different colours, so the one you just started is tellable from the one still finishing
• A proper installer window. Reflick's eight buddies in their own colours, each with its pointer, around the drag-to-Applications arrow
• Terms of Use, written from what the app actually does, including what you are responsible for when the agent drives your Mac and what your 14-day right to change your mind covers
• The morning brief could be prepared but never switched on. Reflick could compose one, check it was safe to run, and hand it to you, but nothing anywhere could put one in the diary, so none of that could ever happen. There is a card in Settings, Skills now: pick a time, see what it costs before you agree to it, and turn it off again. It says up front that a daily job is about thirty credits a month, tells you when your balance will not cover the month, and warns you that an overnight run on battery will not happen because a sleeping Mac runs nothing
• A knowledge base you can read. Everything Reflick remembers, written as plain markdown you can open in Finder, and an erase button that removes all of it. The erase half had been written for a while and was reachable from nowhere
• Reflick notices a task you repeat. Three times on the same weekday around the same hour and it says so, once, in a panel you opened. It offers a sentence, never a button that runs something
• Dictation writes as well as types. Look at an email and say "reply that Tuesday works" and it writes the reply; say "Tuesday works" and those words are typed, exactly as before
• The first screen says what Reflick is, and shows the four gestures, instead of opening with a permissions checklist over an empty window
• Streaming speech: playback starts on the first chunk rather than the finished clip. Measured against the live service, a long answer now begins in 0.40s instead of 3.97s, and the wait no longer grows with how much there is to say
• Realtime voice can see the screen. A screenshot goes up when you start speaking, so the fastest mode is no longer the blind one
• Live hover highlighting: hold the talk key and Reflick outlines the control under the pointer and names it, from the real Accessibility frame rather than an estimate
• Whole-document reading. "Summarise this" now answers from the whole file rather than the page that happens to be visible
• A skill library covering the apps a Mac user is in all day, with the shortcut-backed ones running instantly and no model call at all
• Skills can be shared: import a file somebody sent you, or export your own. A shared skill can explain how something works and can never press a key
• Teams. Several Macs share one account and one balance, joined with a short-lived single-use invite code
• Monthly subscriptions and one-off credit packs, paid through Revolut, with the checkout hosted by the service itself
• A self test in Settings, Permissions, that says which of several identical-looking failures you are actually hitting, and what to do about each
• This changelog, served publicly
• Reflick draws by hand. Hold the talk key and the control under the pointer is circled with a marker loop that draws itself, and a walkthrough's ring and arrow are drawn the same way, with a head made of two flicks rather than a filled triangle. The geometry underneath is unchanged and is still the real Accessibility frame, so the line lands on the control rather than near it
• Reflick knows which WEBSITE you are on, not just which browser. "Google Chrome" was one bucket holding your mail, your issue tracker and your bank, so nothing it knew could be specific to any of them. Skills can now be written for a site, and the ones that ship cover mail, documents, calendars, code hosting, issue tracking, video and design
• "Summarise this" works on a web page. It already read a whole PDF rather than the visible page; a web page is the document most people look at all day and it was the one it could not read. When a page is too large to read inside its time budget, the answer says it read the beginning rather than pretending it read all of it
• You can drag a file onto Reflick's menu bar icon and then talk about it. "Summarise this", "make these a thousand pixels wide". Everything needed to do those things already existed and there was no way to hand it a file
• Teaching shows a border. Both ways of teaching Reflick were completely invisible while they ran, and one of them quietly turns your next ordinary command into a step of the thing being taught, so the border names what is being recorded and says how to stop
• The self test answers two more questions: whether Reflick can tell which website you are on, and whether it can read the whole of what you are looking at. Both fail silently by design, so a thin answer had no explanation anywhere

Fixed

• Auto-update was switched off, and not dormant. The update framework is started at launch, so without its signing key it failed on every launch, and anyone who downloaded a build with a bug in it would have had no way to ever receive the fix
• The agent's own activity log grew forever. Five weeks of use had reached fourteen thousand lines and nearly two megabytes, on a file nothing reads and nothing offered to clear. It now keeps roughly a fortnight
• Reflick asked the system which website you were on three separate times for every single question, when once is enough
• Sign in with Apple could never have worked, for two separate reasons, and neither was visible from a passing build. The app asked Apple to embed a hashed value in the identity token and then sent the service the unhashed one, so the service compared two things that can never match and refused every sign-in with an authentication error. And the whole feature depended on an entitlement that Apple only grants through a provisioning profile, which a Mac app distributed outside the App Store cannot obtain. Sign in with Apple now runs through Apple's browser flow, which needs no entitlement, and the token check is exercised by tests that fail if either bug comes back
• The disk image was not signed. Two signing certificates with the identical name existed on the build machine, so the signing tool refused to choose between them and signed nothing, and because its complaint was routed through another command the build reported success anyway. The check that was supposed to catch this inspected the app rather than the image, and the app is signed separately, so it always passed. The build now resolves the certificate to one exact fingerprint, and a disk image that cannot be signed stops the build instead of shipping

Security

• "Erase everything Reflick has stored" did not erase everything. It deleted a hand-written list of ten files, and the log of every action the agent had ever taken was not on that list and never had been: nearly two megabytes of history left behind after the button said it was gone, along with the readable copy exported as markdown. It now empties Reflick's own folder rather than a list, so anything added later is covered on the day it is written instead of when somebody remembers to add it
• Two ways a payment could be taken without the runs it paid for. The record that stops a payment being counted twice was written in a separate step from the credit itself, so a failure in between left the payment marked as handled and the balance untouched, and every retry afterwards reported success. It could happen on a one-off purchase and on a monthly renewal, where the money has already left the account before the record is written. Both now happen as a single transaction: either the payment is recorded and the runs are there, or nothing happened and the next attempt tries again
• The signature check that decides whether a payment notification is genuine had no test covering it. The tests exercised a second copy of the same logic, so the real check could have been weakened or deleted with every test still passing. It is now tested directly, verified by deleting its safeguard and confirming the tests fail
• The cap on free accounts per network per day was not being enforced. The service ships a documented limit of five, chosen to leave room for a household or an office behind one address, but a deployment setting was silently overriding it, and seven accounts in a row were provisioned from a single address in testing. The limit now lives with the reasoning that justifies it rather than in an invisible setting, and the one job that legitimately needs to create accounts, the live test suite, identifies itself with its own server-only secret instead of the limit being lifted for everybody. That secret is absent by default, so a deployment that forgets it locks the test out rather than opening the door
• Every response from the service now carries the standard set of protective headers, applied at the single point every response passes through rather than at each individual route, so a route added later cannot quietly miss them. The service serves exactly one page, the checkout, and a checkout that cannot be framed cannot be placed inside a page pretending to be something else
• The website no longer permits inline scripts. Its two scripts are now allowed by cryptographic hash, so a script injected into the page does not run

Fixed

• Realtime voice never worked, for four separate reasons, each hidden behind the one in front of it: a retired API header that closed the socket after a successful handshake, a failed state that could never be retried, a microphone that was never requested, and a release branch that reported an error over a working session
• The menu bar icon had never drawn anything. The status item was there and clickable the whole time
• The panel was centre-clipped, losing about twenty points off both ends of every row, because one over-wide row sized the whole stack
• The mascot sat on top of the answer, the thinking dots and the waveform
• Credits could show a balance for an account the service did not have
• Dictated text arrived carrying the modifiers of the shortcut being held, so nothing appeared
• Circling something now starts listening, instead of waiting for a second gesture nobody knew about
• Realtime voice had still never opened on real hardware. Switching on echo cancellation succeeded and then made the audio engine refuse to initialise, which surfaced a second after every keypress as "sorry, that didn't work", and looked from the outside like the setting turning itself off. It now drops echo cancellation rather than the session, and holds the microphone shut while the model speaks so it cannot answer its own voice
• Talking was not free. Pointing at something on screen is a single-shot call that carries the computer tool and no conversation to continue, so the service could not tell it apart from an agent task starting and charged a credit for it, while pointing runs alongside ordinary conversation. A balance could drain without a single task being run
• "Get more" opened a checkout page that could only say the link was missing its account, whenever the balance had not loaded yet
• The notch never went back in after an answer. Every path that ends in something specific handed the island back; the ordinary spoken answer, which is most of them, did not, so the only reliable way to get the top of the screen back was for something to go wrong
• Escape cancels circling, in both halves of it. The overlay could never take keyboard focus, and once it closed the microphone stayed open with no stop of any kind
• The intent classifier ran on the frontier model to return one word from a fixed list, ahead of every request. It now runs on the small one
• The first question after launch paid for ScreenCaptureKit's one-off connection. That handshake now happens at startup, and only when screen recording has already been granted

[Unreleased]: public release preparation

Added

• ARCHITECTURE.md: full system architecture with diagrams, aimed at a new contributor
• CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, this CHANGELOG.md
• GitHub issue templates, pull request template, label set, discussion category templates

Changed

• README rewritten from scratch for a first-time developer audience

Fixed

• Real deployed Worker URL, present in AGENTS.md/CLAUDE.md and a code comment, redacted to a placeholder before public release
• Removed a debug-only presentation-bypass flag (CompanionManager) left over from a prior sprint's manual validation pass
• Corrected a stale doc comment in OpenAIAgentOrchestrator.swift that still described the completion-verification step as an "always-passes placeholder" after it had already been replaced with real logic

[1.0.0]: first public release

The full history below is condensed from ~90 commits across nine internal development sprints. Grouped by theme, not by commit.

Core voice pipeline

• Push-to-talk voice capture with streaming transcription (Deepgram default; AssemblyAI, OpenAI audio, and on-device Apple Speech as fallbacks)
• Deterministic intent classification (ReflickIntent) routing every transcript to conversation, pointing, execution, or "unsupported", replacing an earlier design that required a spoken trigger phrase
• Streaming, sentence-chunked text-to-speech (Cartesia, with on-device AVSpeechSynthesizer fallback) so responses start speaking before the full answer is ready
• A unified voice-session state machine (idle/listening/transcribing/speaking/interrupting) and push-to-talk interruption of in-progress speech

Agent Runtime (computer control)

• A real state machine (AgentTask/AgentTaskStateMachine) driving every command through received → planning → executing → verifying/recovering → a terminal state
• AgentPlanning, AgentExecuting, AgentVerifying, AgentRecovering protocol seams, each with an honestly-scoped V1 implementation (see ARCHITECTURE.md's Honest limitations section for exactly what each one does and doesn't do yet)
• Structured status reporting, cancellation, loop detection, latency/cost tracking, and structured logging throughout the loop
• Two hardening passes fixing real bugs found during manual validation: mid-batch cancellation propagation, and a recovery baseline that had been comparing against the wrong screenshot

Execution Router, Tool Registry, Policy Engine

• A provider-agnostic Tool Registry cataloguing native macOS capabilities, MCP tools, and the computer-use fallback behind one interface
• An Execution Router that tries a taught workflow, then a capability chain, then the volume domain, then a deterministic native-tool match, before ever falling back to the full vision-driven agent loop, skipping the expensive path whenever a cheap, reliable one exists
• A Policy Engine enforcing an allow/deny decision ahead of every tool invocation
• 19+ native macOS capabilities: clipboard, file operations, volume/brightness/Wi-Fi/Bluetooth/battery reads, app control, notifications, and more

Conversational & vision features

• Screen-aware conversational answers (screenshot + transcript sent to a vision model on every conversational turn)
• Accurate on-screen pointing ("point at the Save button"), snapping to the exact UI element via the Accessibility tree when available
• Region-select + ask: a read-only mode that never takes control
• Teach mode: record a demonstration once, replay it by name via the Workflow system

Onboarding, Settings, permissions

• A 10-screen first-run setup wizard (provider selection, Worker connection with live validation, voice setup, and all three permission grants)
• A full Settings window (General, Models, Voice, Providers, Keyboard, Developer, Permissions), with every secret Keychain-backed, editable anytime, and no config-file editing required after first run
• A shared permission system (Accessibility, Screen Recording, Microphone, Screen Content) surfaced consistently across onboarding and Settings

Provider architecture

• Migrated the autonomous computer-control loop and on-screen pointing from Anthropic's Computer Use tool to OpenAI's computer-use tool. Anthropic is no longer used anywhere in the app
• Introduced a ProviderRegistry abstraction so every provider category (transcription, conversational vision, computer-use vision, text-to-speech) is swappable behind a protocol, with a Cloudflare Worker proxy holding every real API key server-side

Security

• Removed hardcoded Worker URL and client token from source, moved to a gitignored local config file with Keychain-backed override
• Scrubbed a previously-compromised client token from git history
• Fixed a real data leak where an onboarding form field was posting to a third party's form backend instead of nowhere/nothing