Trust must be designed, not assumed.
Where your household's data actually lives.
Most privacy pages are written to reassure. This one is written to be accurate — because we believe the accurate story is the better one.
The record that makes the Chief yours
The working household record stays on your dedicated server in a PrivateChief-controlled United States cloud account, kept apart from every other customer, and each business on your membership keeps its own separate workspace there. If you add a Home Assistant box, your home devices and their settings are managed on that box in your house. Encrypted recovery backups protect against failure, and limited account, service, security, and support records are kept centrally. If PrivateChief ever stops, the record leaves with you: see our continuity pledge.
Processing, on adult terms
When you speak to your Chief, limited audio, text, images, and relevant context may be processed through contracted AI services using PrivateChief-managed accounts. On an optional wall unit, enabled greeter and room features may also process a transient camera frame. Providers are used to deliver the service, not to advertise to your household.
The lines that don't move
No advertising profiles. No sale of personal data. Ordinary conversational audio waits for an on-device wake event, and mute or silence mode stops ordinary conversational processing. Camera and proactive features remain separately configurable. You pay for the managed service; your attention and household history are not the product.
Real people stand behind it.
Your PrivateChief system is prepared and supervised by our engineers—with authenticated remote access you consent to in writing, used to monitor, secure, update, back up, recover, and support your dedicated server and any Home Assistant box you add. Administrative access and consequential actions are logged where technically feasible and reviewed during support and security work.
And your Chief is built for restraint: it confirms before sending an email, text, or call on your behalf; it asks rather than guesses when a request is ambiguous; and anything it cannot do safely becomes a tracked request our team resolves — with the solution recorded, not just the promise.
