01Confirmation before sensitive writes
Anything that shares personal information or touches someone else's day is proposed, not performed.
02Why did Allie do this?
Every receipt and proactive item expands to show the trigger, the data categories used, and the model involved.
03What Allie knows
Memory is a screen you can read. View, correct or delete what Allie has learned, with private and household scopes kept apart.
04Roles, not one shared login
Every member has a role, and it governs what they can read, write and approve — in queries, in briefs and in Allie's own answers.
05An assistant pause
An owner can pause Allie for the whole household at any time. Calendars, tasks and lists keep working.
06Data minimization
Summaries go to models rather than raw records, contact books are never sent, and dictated audio is processed on-device.