Joey holds the most sensitive dataset there is: your children's names, schools and days. So we build it to see the least, keep the least, and let you erase it all with one message.
Some family AI apps ask for the keys to your email, your chats and your bank, then scan them around the clock. Joey sees the one WhatsApp group you add it to, and the mail a parent forwards to it. It asks before it writes anything. There is no background crawler and no other door in.
Eight commitments to you, built into how Joey works.
Nothing goes on your calendar, and no reminder is set, without a parent's yes. A question nobody answers expires in a day.
Joey sees the group you add it to. Never your inbox, your other chats or your accounts. Mail reaches it only when a registered parent forwards it.
Recent chat is kept only long enough for Joey to follow the thread, then swept. What stays is what you confirm and what you ask Joey to remember.
In transit and at rest, on the platform Joey runs on. Health details a parent shares are kept in their own table, apart from everything else.
Every store, every photo and every log lives in Australian data centres. Your family's words never leave the country.
The model that reads your family's plans runs in Australia, on Australian hardware, under terms that forbid training on your words.
Your family's words serve your family. Our AI providers are barred from training on them. Research about how households use Joey is de-identified, and only with your yes, asked once a week in.
"Joey, what can you see" lists everything it holds. "Joey, send me everything you keep" emails it to you. "Joey, forget today" deletes that stretch. Ask Joey to leave and the household is deleted.
It is our own family's data. Joey has run in the founder's household since day one.
The reporting console sits behind Cloudflare Access with a login for each person. It shows counts, never a family's words. Every look at a family's page is logged.
A kill switch at every level, daily caps on what Joey may send and spend, a mute word for the group, and a rule that a message can only ever go back to the group it came from.
Every message Joey handles is logged with its outcome. A tested runbook restores every family within two hours if Joey's number is ever blocked. Security is aligned to the ASD Essential Eight.
The fashionable way to build a family AI is to connect everything, then scan continuously so the app feels psychic. It demos brilliantly. It also means a company you met last week is reading your whole life, including people who never agreed to it.
Joey's design costs us a little magic and buys you something better: an assistant you can trust with the school run because it can only see the school run.
Less access, same relief. That's the trade we chose, on purpose.
Connects your inbox, chats and finances. Scans around the clock. Knows everything. You hope their privacy policy holds.
You say the plan in your family group. Joey asks. You say yes. It's on the calendar. The rest of your life stays yours.
What you tell Joey at onboarding and after: a first name, and the plans and notes you confirm. No surname or date of birth is asked for. A health detail (an allergy, a medication) is stored only on your yes, in its own table, and "Joey, forget" removes it.
A photo is read once and the dates in it become questions. Chat is kept for a short window so Joey can follow the thread, then swept. "Joey, forget this afternoon" deletes that stretch now, photos first.
Joey takes the dates and drops the rest. It never builds a picture of anyone outside your household, and it never guesses at a name your family has not mentioned.
Yes. Ask Joey to leave, or email joey@quantrim.com, and every row, every photo and every calendar note Joey made is deleted, and Joey leaves the group. "Joey, forget everything" clears the chat window without leaving.
Joey reads the shared calendar to answer "what's on" and to write the evening note, and writes only what you confirm. You share it with Joey's account and can unshare it any time.
In Australia. Storage is pinned to Australian data centres and the model that reads your plans is hosted here, under terms that forbid training on your words. We make no claim on this page we have not built into the architecture.
Add Joey to one group. It never asks for more than that.
Join the pilot