Your child’s first phone.
Apps come from a list we test and you approve. No open web, no deleting messages, and a way to check every one of those claims today.
Tuesday 9 September
Protected
Confirmed 14:06 on build TQ3A.250805
Bedtime schedule
Until 07:00
Your parent set this.
Apps are unavailable. Restarting returns to this screen.
Apps
We test the apps. You choose which ones.
Nothing reaches our catalog until it has been run on real phones, looking for ways out to the web and ways for strangers to get in. We never take an app’s word for what it does. An app that says it has no browser and has one is the most common way a locked phone stops being locked.
Updates cannot sneak anything in
When an app updates, it pauses until we have tested it again.
- New version releasedSeen today, 09:14
- Held before it installsThe phone keeps 7.11.0
- Re-testing the escape routesBrowser, sharing, links to other apps
- Cleared to installNot yet
Nothing installs until testing finishes.
You see what each app can reach
What an app can reach is what we found it reaching, not what its listing says. Approve one that opens the web and we say so, instead of quietly keeping the claim.
Can
Cannot
Held back until you approve it.
Controls
Ten controls. Each one tells you how it behaves when the phone has no signal.
You set every one. Open any line for what it does, and what happens when the phone is offline.
- What it does
- You install apps from a catalog we test. Your child cannot add any. An update pauses the app until we test the new version.
- When offline
- The last approved set of apps keeps running.
- What it does
- Every contact has four switches: calls in, calls out, texts in, texts out. Your child cannot change the number behind an approved name. 911 is not on the list and is never blocked.
- When offline
- The list is stored on the phone and still applies.
- What it does
- No browser, and no browser inside another app. A link does not open the web.
- When offline
- Blocking runs on the phone, so it works with no internet.
- What it does
- Time per app, day and week totals, first and last use, and every blocked attempt.
- When offline
- The phone records it and sends it when it reconnects.
- What it does
- One button drops the phone to emergency calls only. Restarting does not undo it.
- When offline
- The dashboard reads Lock pending, never Locked, until the phone confirms.
- What it does
- You set the hours. The phone enforces them and unlocks itself after.
- When offline
- The hours are stored on the phone and still run.
- What it does
- The messaging app has no delete button, and the app cannot be removed. This is not a switch you turn on and then trust: it is either enforced and shown as enforced, or shown as not enforced, with the reason.
- When offline
- Messages wait on the phone and upload when it reconnects.
- What it does
- Both sides of every conversation, with times and attachments.
- When offline
- Time we could not reach the phone is marked as a gap, not shown as no messages.
- What it does
- The current or last known location, with the time and accuracy of the reading.
- When offline
- You see the last reading and how old it is.
- What it does
- Name a few places, like home and school. You choose which ones tell you about arrivals, departures, or both. We keep those arrivals, never a map of everywhere they have been.
- When offline
- The phone watches for the places itself, so a crossing with no signal still reaches you, stamped with the time it happened rather than the time we heard.
Places
Told when they get there. Not a map of everywhere they have been.
Name a few places. Home, school, a grandparent’s house. You choose which ones tell you about arrivals, departures, or both.
- HomeWhen they leave
- SchoolArrivals
- Nan'sBoth ways
A place that is watched for on the phone still catches the arrival when the phone is on its own. What reaches you is the time it happened, never the time we found out.
Time and locking
Turn the phone off from anywhere.
One button drops it to 911 only. Your child sees what is off and who set it, 911 still works, and restarting does not undo it.
1h 47m
of screen time, in the phone’s timezone
Drops to 911 only. Restarting does not undo it.
- RequestedNot yet
- SavedNot yet
- Applied on the phoneNot yet
- The phone restartedNot yet
Tuesday 9 September
Bedtime schedule
Until 07:00
Your parent set this.
Apps are unavailable. Restarting returns to this screen.
The dashboard shows the request until the phone answers. Only the last two stops come from the phone itself.
Judged on the phone, so they hold with no signal.
Time per app, first and last use, every blocked attempt.
A quiet day and a silent phone look different.
How we test it
You install from a list of approved apps.
Every app on it is attacked first, the way kids actually get around a phone: hidden browsers, links that jump out to other apps, and ways for strangers to message them.
Our lab. Every phone here runs the exact build, patch and carrier your child’s would, and we spend the day attacking them.
What changed
Paused until we re-check it.
No way out to the web.
Phone is offline. Not locked yet.
Nan wants to call Mia.
Apps off. 911 still works.
Paused until we re-check it.
No way out to the web.
Phone is offline. Not locked yet.
Nan wants to call Mia.
Apps off. 911 still works.
When the phone changes, you hear it from us.
Not from your child, months later.
Junior
You can stop wondering.
Junior checks the phone all day and tells you what he found. What your child can reach is never a guess.
Scope
What it does not do.
The more a phone can do, the less anyone can promise about it. We would rather do less and be sure.
- More than one phone model.We test one build on one phone. Two would halve how well we know either.
- An open app store.Nothing installs that we have not attacked first, and a store is a promise we could not keep.
- RCS, WhatsApp, Signal, or Discord.Each one is a way for a stranger to reach your child that we cannot see into.
- A native parent app.The dashboard is web and installs to your home screen, so a store review never sits between you and a fix.
- AI reading your child's messages.You can read them. We cannot, and neither can a model we rented.
- A map of everywhere they have been.We tell you they arrived. What we never store cannot be breached, subpoenaed, or sold.
- Daily or per-app time budgets.Hours we can enforce on the phone. Budgets we could only report on, which is not the same promise.
Early access
Five to ten families, thirty days, no price yet.
One email when the pilot opens.