Privacy, in plain language
Only the people in a household can see what that household records. Every read is checked against the family in the database itself, so there is no view of one family's record another family can reach.
Children sign in with a family code, a username and a PIN rather than an email, and they see their own household and nothing else.
We do not train AI models on a family's data, we do not sell or share what a family records, and it is never used to advertise to anyone.
Every household can download everything it has recorded at any time, and deleting a household takes every parent in it, then thirty days in which any one of them can stop it.