Family account and guardian console

Owner, guardian, guardian admin, trusted adult, child and teen are handled in one account model.

• Family accountIn development
• Roles and permissionsIn development
• Invitations and ownership transferIn development

Consent records are permanent, the audit log is append-only, withdrawal is always available, and downgrades never delete data.

• Central consent managementIn development
• Append-only audit logIn development
• Data export and deletionIn development

A browser view for the safety overview, learning progress, explore summary and consent settings is in design.

Each role is shown with a concrete scene: why they use it, how it works, what they get, and what they cannot do. Planned capabilities stay labelled planned.

1. 1
   Guardian: review consent and devices at the start of the week

   Why: to know exactly who can see what. How: review roles, consent and active sessions in the console. You get: one household-wide view. You cannot: withdraw another guardian's own consent on their behalf.

2. 2
   Trusted adult: check arrival only for the pickup window

   Why: to share care only when it is needed. How: with a guardian-granted, expiring permission, check arrival and departure. You get: limited-scope information. You cannot: browse outside the window, read location history, or see other children's data.

3. 3
   Child or teen: their own schedule and safe places

   Why: so they can see what concerns them. How: view their own schedule, safe places and contacts. They get: the information they need. They cannot: see another family member's precise location or start tracking.

Concurrent sessions are limited per role, and a lost device can be signed out individually.