Penguin Mail 1.0, released October 6, is a GPL-licensed desktop mail and calendar client for x86_64 Linux. It brings Gmail, Outlook/Microsoft 365, and IMAP/POP3 accounts into one inbox, with provider calendars and contacts where supported. It’s aimed at people who want a native Linux alternative rather than another webmail tab.

  • Getting started: Download a signed package for Debian/Ubuntu, Fedora or Arch from the download page, or build from source. Run penguin-mail --demo to inspect sample accounts without connecting real mail. Native packages need GTK 4.20, libadwaita 1.8 and WebKitGTK 6.0; the site names Ubuntu 26.04, Fedora 43 and Arch as supported dependency sources.
  • What the AI part does: The assistant is off until you select a model. It can answer questions about your mailbox and show its tool calls; local models work through Ollama or LM Studio. Claude/Anthropic is also supported, but mail the assistant reads then goes to Anthropic. The app says it asks before sending mail or changing settings.
  • Cost and data: The client itself is free under GPL-3.0-or-later and has no Penguin Mail server. Mail is cached on your computer; provider APIs still handle syncing. A local model avoids a hosted inference bill, while any chosen external model follows that provider’s terms and pricing.

Limitations: The native packages need recent desktop libraries; the Snap listing was still awaiting store approval on the project’s download page, and its sandbox disables assistant skills and command-based MCP servers. Scheduled sending requires the app to keep running. This is a new mail client with broad account permissions and access to sensitive messages: review its privacy policy and test with --demo before authorizing a primary mailbox. This is a reading of the project’s release and documentation, not a hands-on security audit.

The HN discussion raises the legitimate question of HTML-email isolation and tracking; the project’s policy says JavaScript is disabled, messages are sandboxed, and remote content is blocked unless allowed. That is the vendor’s claim, not an independently verified test.