Families trust us with their words. Here is what we do with them.

Messages between program staff and families, voice notes a parent chooses to record, confirmations that a home activity happened, and the engagement notes the system drafts from that activity. That is the whole list. No advertising identifiers, no location tracking, no data bought from or sold to anyone.

Family information is never sold. There are no ads. There is no cross-site tracking. A family's words are used for exactly one purpose: the engagement between that family and their program, and the documentation a federal standard requires of it.

Children never create accounts, never sign in, and never speak to the system directly. Everything is parent-mediated — a parent receives, a parent listens, a parent replies, a parent confirms. Activities happen between a parent and their child, away from the screen.

Translations and note drafts are produced on our servers by Meta's first-party Muse models. Family content is never routed to third-party contributor models, and no family content leaves the program's own record.

A family can see everything recorded about their own engagement — it is, by design, the same record their advocate sees. A program can export or delete a family's record at the family's request, and a family can simply stop replying; the thread goes quiet, nothing follows them.

Everything demonstrated publicly runs on synthetic families — invented names, invented children, invented voices. No real family's information appears in any demo, screenshot, or submission.