No account
A child can still receive or send something through a supervised School or adult OPS flow.
Trust is architecture
Safe by rule.
Not by promise.
Child Safety, House authority, consent and location OFF are enforced underneath the screen.
PRIVATEHOUSEOwner authority · minimal evidence
20:18OPSLedger
Safety in an ordinary room
Trust should feel quiet—not visible everywhere.
An adult reviews one private House decision. The child does not become a profile, the room does not become content and the system remembers only the authority needed to protect the moment.
See safety inside a real story↗Child Safety / absolute priority
Growing access.
Never growing beyond safety.
Age changes possibility; it never weakens the House boundary.
Supervised resident
Never Owner or admin. No autonomous secret room, precise location or 18+ reach.
Adult resident
Adult access does not automatically create Owner authority. A House role still decides.
Location OFF means OFF
No “via-via-via”.
No sneaky route.
The server refuses every location source when permission is off. Sentinel is not an exception.
×GPS×Wi-Fi×IP×EXIF×Provider×AI inference×Other resident×Sentinel
GEO AI / optional intelligence
Help find Willy.
Never track the street.
GEO AI can combine an owner’s last-seen point, an optional collar tracker, likely hiding places and nearby participating Houses. It proposes a search zone; the owner decides whether it opens or expands.
- 01
Identity is not location. Willy’s implanted RFID chip identifies him only after somebody physically scans it.
- 02
Tracking stays optional. AirTag, Bluetooth and GPS providers are replaceable adapters—not MYHOUSE foundations.
- 03
Reach stays bounded. Nearby Houses receive useful actions, never a resident map or a hidden location trail.
- 04
Home closes the loop. When Willy returns to Edgar, the alert, search zone and temporary location context expire.
Minimal immutable evidence
The proof stays.
The private moment does not.
Consent→Authority→Action→Revoke
The ledger records who approved what, under which role and policy, when it expires and whether it was revoked. It does not publish photos, videos, drawings, messages, child data or location.
Next / Privacy in ordinary life