What we hold

A first name and an age. That is all we keep. No surname, no birthday, no address, no school name, no contact details of any kind. We never ask for them.

Alongside that: the buttons you chose, the prizes you set, and which of them were tapped on which days. That is the app working.

Your device also tells us which time zone you are in. It is used to cut their week at your midnight rather than a server’s, and to send a reminder at the hour you chose rather than the middle of your night. It is not a location: it says “New York”, not where you are.

When you close this page it sends back one line: how far down you scrolled, how wide your screen is, how long you were here, whether you tapped the demo board, and which website the link came from — the site name only, never the full address you came from.

No cookie. No advertising or analytics company. No account of any kind. Nothing on this page talks to anybody but us, so no third party gets a list of people who looked at a product for children who struggle.

There is no identifier, so those lines cannot be joined together or traced to a person — not by us either. It means we genuinely cannot count how many people visited, only how many times the page was looked at, and we would rather have the worse number than the way of knowing.

If your browser or phone is set to Do Not Track, nothing is sent at all. And none of this happens on your child’s screen or on your own dashboard — only on the public page anybody can visit.

Your email address, so you can sign in and we can send you a link. There is no password to store.

If you subscribe inside the iPhone app, you pay Apple, on your Apple Account. Apple tells us two things and nothing else: that a subscription for this app is running, and the date it is paid up to. We keep those, plus the reference number Apple gives that subscription so a renewal or a cancellation can be matched to your family.

If you subscribe on this website, Stripe handles the payment instead. Either way we never see a card number and we could not store one if we tried.

The app is the same board you already use, in a window of its own. It exists for one reason: a note in your inbox at six o’clock is read at nine, by which time the moment has gone. The app can reach your phone at the hour you chose.

To do that, your phone gives us a delivery address — a long code Apple or Google issues for this app on this phone. It is not an advertising identifier. It cannot be used to recognize you on any other app or website, and we never send it anywhere except to Apple or Google to carry the note back. We keep the last five phones you have used and forget the rest.

Turn notifications off in your phone’s Settings and it stops. The next time we try, the phone tells us it is gone and we delete the code. Everything else is your choice, and off until you use it. The camera, only when you film a win, show Nova a win, or snap your fridge chart — a photo you show Nova is read once to find the right button and is not kept. The microphone, only if you record how to say your child’s name; the recording stays on your phone. Location, only if you turn on pick-up by place; the spot stays on your phone. No contacts, no advertising permission, and no analytics.

If you subscribe in the app, that is handled by Apple and is described under About you above. Nothing about your child is sent to Apple.

Nobody. Nothing is sold, nothing is shared with advertisers, and there is no analytics company watching your child use this.

Four suppliers do their part and see only what they need: Apple takes payment for subscriptions bought in the app, Stripe takes it for subscriptions bought on this website, Resend delivers our emails, and Anthropic’s AI writes Nova’s words.

What the AI sees. To write reminders, the Sunday note, stories and answers, Anthropic receives your child’s first name, age and list of things, plus anything you choose to ask Nova or show it. We don’t keep the photos you show it. Anthropic holds requests only briefly for safety checks and does not use them to train its AI. A teacher only ever sees a child's first name, the date, and the buttons they are asked to tap — and only if you invite them.

Take a copy of everything, any time, from your own page. Close the account and it is really deleted — every row, right away, no soft delete and no copy kept for analytics.

One honest exception: we take a backup every night so a family never loses a year of their child’s work to a broken disk. Those backups are kept 30 days and then destroyed, so a deleted account can persist in them for up to 30 days and no longer. Nobody reads them; they exist to be restored from and nothing else.

If you stop paying we still hold nothing back: every point ever earned, every prize won and every prize still owed, the child's world, their companion, and their whole history, the ability to open the app and look at all of it.

Every email we send is about your own child. There is no newsletter, no product news, and nothing is ever sent to a child.

In the first week, up to four short notes about getting started. On a Sunday, how the week went. And one line a day at the moment you chose — which never arrives on a day they have already tapped something.

That daily line starts switched on, at dinner, unless you picked a different time during setup. It is the thing this whole product is built around, so shipping it silent was doing nobody any favors. One tap on their page moves it, and one tap turns it off for good.

If you have the app and have allowed notifications, that daily line arrives on your phone instead of your inbox, not as well as it. One moment, one note.

Turn the daily one off in one tap on their page. We would rather you switched it off than stopped reading us.

Reply to any email we send you and it reaches a person.