Privacy
Plain-language summary. Our users are often children and disabled people, and the sensors involved are sensitive — so privacy is a core feature, not an afterthought.
What never leaves your device
Camera frames (gaze), raw microphone audio, biometrics, and precise location are processed on your device only and are never uploaded.
What syncs (only with your consent)
A coarse place label (e.g. "kitchen"), the words you chose to speak, and aggregate routine stats — to power prediction and your dashboard. You can export or delete everything.
Understanding others
Live transcription of nearby speech runs on-device and isn't stored by default, with a visible indicator when active.
Children
Accounts for minors require verified parental consent; biometrics and location are off by default.
Your voice
Voice banking/cloning is opt-in, identity-gated, and fully deletable.
Full technical detail: see our open design at docs/privacy-and-consent.md.