Joey handles the most sensitive dataset there is: your children's names, schools and schedules. So we built the whole product around collecting the least, keeping it in Australia, and letting you erase it all in minutes.
Some family AI apps ask for the keys to your email, your chats and your bank, then scan them around the clock. Joey refuses that model. Joey is reactive by design: you forward a notice, Joey reads that notice. Nothing else. There is no background crawler and no silent scanning. We can make that promise honestly because the system physically works that way.
Every screenshot, every event, every log lives in Sydney data centres, and the AI that reads your notices runs onshore too. Offshore processing routes are blocked at the infrastructure level, so a developer can't take a shortcut even by mistake. When we say onshore, we mean enforced.
Your family's data serves your family. Full stop. It is never used to train or fine-tune AI models, ours or anyone else's, and our AI providers are contractually barred from training on it. Your kids' schedules will never be someone's training set.
Raw screenshots and PDFs are deleted within hours of being read and confirmed. We don't hoard your school bag photos. And one command, /delete-all-my-data, hard-deletes everything we hold about your family within five minutes, verifiably and logged.
Parents hold the account; kids never do. We store the minimum about each child: a first name or nickname, year level, school. It sits in our strictest protection class. Other people's kids mentioned in a notice are never profiled. We're building to the standards of Australia's incoming Children's Online Privacy Code, ahead of time.
A breach of children's data would be unforgivable. So we treat security as existential and build accordingly.
Multi-factor authentication on every developer and admin account. Least-privilege access, and no standing access to production family data. Engineers can't browse your world.
Aligned to the Australian Cyber Security Centre's Essential Eight: patching discipline, application hardening, restricted admin rights, and daily encrypted backups kept inside Australia.
Full audit logging, breach detection, and a tested response runbook under the Notifiable Data Breaches scheme. We prepare for the day we hope never comes.
The fashionable way to build a family AI is to connect everything: inbox, calendar, group chats, even finances, then scan continuously so the app feels psychic. It demos brilliantly. It also means a company you met last week is reading your whole life on someone else's servers, including data about family members who never agreed to any of it.
Parents shouldn't have to trade their family's privacy for a sorted week. Joey's reactive design costs us a little magic and buys you something better: an assistant you can trust with the school run because it can't see anything else.
Less access, same relief. That's the trade we chose, on purpose.
Connects your inbox, chats and finances. Scans around the clock. Knows everything. You hope their privacy policy holds.
You forward a school notice. Joey reads that notice. It lands on your calendar. The rest of your life stays yours.
As little as we can: a first name or nickname, year level, school, and any dietary constraints you choose to add for future meal features. No surname or date of birth is required. Child data sits in our most protected class with the tightest encryption keys and retention rules.
Joey reads them, you confirm the result, and the raw image is deleted on a short timer. Hours, not months. What remains is the structured event you approved. We don't keep a photo archive of your school notices.
They're flagged as third-party mentions, minimised, and never used to build a profile. Joey serves your family. It doesn't quietly assemble data on everyone around them.
Yes. Send /delete-all-my-data (or tap Delete family in the app) and every record, from events to memory to media, is hard-deleted across all our systems within five minutes. The deletion is logged and verifiable. We keep no copy for our own purposes.
Joey writes the events you confirm to your calendar. The connection is a permission you grant and can revoke at any moment in your Google or Apple account. Joey doesn't mine your calendar or replace it.
In Australian data centres, with routing pinned onshore at the infrastructure level. We deliberately avoid AI endpoints that would carry your data overseas, and we make no claim we haven't enforced in the architecture.
Start with a single forwarded notice. Joey never asks for more than you choose to give.
Start free