The temptation is to show you everything — keystrokes, full conversations, time logs, attention scores.
We don't. Each restriction is a design decision, not a missing feature.
01
You see questions and conclusions, not the conversation
The middle is where she experiments with bad ideas, says them out loud, gets corrected, and changes her mind. That's the learning. If you read it like a transcript, she stops being able to think out loud.
What this prevents — AI as adversarial homework log. AI becomes a private mind, not a reportable one.
02
She chooses visibility per thread, not per child
You don't get a global "show me everything" toggle. Each thread carries its own permission, set by her when she starts it. She can change it later. She can mark old threads private.
What this prevents — coercion by family setting. "You have to share everything or I'm uninstalling it" doesn't work because the system doesn't know how to comply.
03
You see paused for human tags loud and clear
When she explicitly tags a thread "waiting to talk to dad" or "ask mum about this", that's signal — that's where she wants you. The product surfaces these. AI does not try to be the human she needs.
What this prevents — AI dissolving the parent-child relationship. The cases where she actively wants you are not buried.
04
No keystroke logs. No usage time scoring.
The system does not tell you "she spent 47 minutes on this thread" or "she opened the app 12 times today". That's surveillance metric framing. Learning isn't a leaderboard.
What this prevents — turning learning into a productivity dashboard the parent monitors. The metric becomes the goal; the thinking becomes the cost.
05
You can ask. Not search.
You can open a thread, send "ask her about it" — she gets notified. You cannot search across her threads, scrape her writing, or export logs.
What this prevents — full-text search on a 16-year-old's inner life. The interface itself refuses certain shapes of curiosity.
06
The boundary moves as she grows
At 11, default visibility is higher. By 16, defaults move toward private-by-default. She can override either way. The age slope is encoded so trust expands without you having to fight for it.
What this prevents — surveillance habits hardening at the age when independence should be growing.