Human Oversight & Privacy

Trust must be designed, not assumed.

Private infrastructure matters
Useful capability with appropriate controls, not convenience at any cost.
Boundaries matter
Not every task should be automated. Trust is earned through restraint, not feature count.
Supervision matters
The best systems are controlled, understandable, and carefully supervised.
Plain Answers

Where your household's data actually lives.

Most privacy pages are written to reassure. This one is written to be accurate — because we believe the accurate story is the better one.

Your chosen private location

The record that makes the Chief yours

Choose an in-home appliance and the working household record stays on the private hub in your house. Choose fully hosted service and it stays on your dedicated server in a PrivateChief-controlled United States cloud account. Encrypted recovery backups protect against failure, and limited account, service, security, and support records are kept centrally.

Leaves only to think

Processing, on adult terms

When you speak to your Chief, limited audio, text, images, and relevant context may be processed through contracted AI services using PrivateChief-managed accounts. Enabled wall-unit greeter and room features may also process a transient camera frame. Providers are used to deliver the service, not to advertise to your household.

Never

The lines that don't move

No advertising profiles. No sale of personal data. Ordinary conversational audio waits for an on-device wake event, and mute or silence mode stops ordinary conversational processing. Camera and proactive features remain separately configurable. You pay for the managed service; your attention and household history are not the product.

Human Oversight

Real people stand behind it.

Your PrivateChief system is prepared and supervised by our engineers—with authenticated remote access you consent to in writing, used to monitor, secure, update, back up, recover, and support your dedicated server or customer-site appliance. Administrative access and consequential actions are logged where technically feasible and reviewed during support and security work.

And your Chief is built for restraint: it confirms before sending an email, text, or call on your behalf; it asks rather than guesses when a request is ambiguous; and anything it cannot do safely becomes a tracked request our team resolves — with the solution recorded, not just the promise.