Privacy is part of the service

Known at home. Protected in the world.

A useful assistant may know a great deal. That makes the household boundary more important, not less.

See what Livonne remembers
An ordinary private morning in a Livonne-supported home

The pajamas test

Remember the lesson, not the footage.

Maya may need to know that the stove was left on and the reminder worked. She does not need a recording of Ron cooking in his pajamas.

  1. Raw household signals are processed locally.
  2. Livonne decides whether anything meaningful happened.
  3. The useful outcome or support signal is retained.
  4. Unnecessary raw streams are discarded.
  5. Only minimum-necessary information is routed outward.
Livonne Hub

Livonne Hub

The hardware boundary for local memory, event processing, orchestration, and minimum-necessary cloud use.

Hardware makes the promise enforceable

Local-first is an architectural decision.

The Hub gives the household a physical boundary for durable memory and ordinary raw context. Cloud services may still support selected reasoning, updates, backup, or approved remote access; the home is not treated as a permanent stream.

A representative between you and the internet

The right amount of truth for the task.

Livonne can know the canonical person while revealing only what an outside interaction legitimately needs.

    Livonne’s boundary: never substitute material facts where identity, safety, rights, eligibility, pricing, law, or transaction integrity depends on the truth.

    Family without surveillance

    Useful context, not a live feed.

    • The morning routine completed
    • The stove reminder worked
    • A garden photo was shared
    • A real incident requires attention

    Verified private channels matter because a familiar voice or image is not proof of identity. Urgent requests should pause for trusted-family verification.

    Visible controls and honest limits

    Privacy state changes protection state.

    Sensing must be configurable and its state legible. If a sensor is disabled, the system should explain which support is unavailable. Some safeguards require cameras or specialized sensors; exceptional incidents may justify retention. No system eliminates the need for professional or emergency care.

    See privacy inside Livonne Care →