Human Oversight & Privacy

Trust must be designed, not assumed.

Private infrastructure matters
Useful capability with appropriate controls, not convenience at any cost.
Boundaries matter
Not every task should be automated. Trust is earned through restraint, not feature count.
Supervision matters
The best systems are controlled, understandable, and carefully supervised.
Plain Answers

Where your household's data actually lives.

Most privacy pages are written to reassure. This one is written to be accurate — because we believe the accurate story is the better one.

Stays in your home

The record of your family's life

The working copy of what makes your Chief yours is stored on the private hub in your house: enrolled face and voice references, household memory, preferences, routines, and the model of your home and devices. Encrypted recovery backups protect against failure, and limited account, service, security, and support records are kept centrally.

Leaves only to think

Processing, on adult terms

When you speak to your Chief, limited audio, text, images, and relevant context may be processed through contracted AI services using PrivateChief-managed accounts. Enabled wall-unit greeter and room features may also process a transient camera frame. Providers are used to deliver the service, not to advertise to your household.

Never

The lines that don't move

No advertising profiles. No sale of personal data. Ordinary conversational audio waits for an on-device wake event, and mute or silence mode stops ordinary conversational processing. Camera and proactive features remain separately configurable. You pay for the managed service; your attention and household history are not the product.

Human Oversight

Real people stand behind it.

Your PrivateChief system is designed, installed, and supervised by our engineers — with authenticated remote access you consent to in writing, used to monitor, secure, update, back up, recover, and support your home. Administrative access and consequential actions are logged where technically feasible and reviewed during support and security work.

And your Chief is built for restraint: it confirms before sending an email, text, or call on your behalf; it asks rather than guesses when a request is ambiguous; and anything it cannot do safely becomes a tracked request our team resolves — with the solution recorded, not just the promise.