One household, its own server, its own database, its own door. AI for every member, chat, docs, tasks, a calendar that runs the chores, the warranties and manuals, the wifi password, the pictures, the games, the songs. Nobody else's family is in the building.
The house model is included and is the default. Cloud models run on your own API keys at the provider's rate, so the picker says what, the thread keeps a running total, and the image button carries its own price. The bill is yours, from the provider, and the app shows you exactly what's on it before it's there.
Adults see the household ledger. Minors see their own. That's it.
Chat apps don't know whose turn it is. Notes apps don't know when the warranty ends. Password managers don't know your kids. This does.
Chores are rules, not reminders: the dishwasher, the bins, the dog, in a rotation the adults set and nobody argues about. Every appliance has a Record — when you bought it, the receipt, the manual, the warranty — and its maintenance is bound to it, so "replace the filter" shows up on the right day with the right part number. Ask Kai to read the label and it does.
The wifi password as a QR for guests. The streaming logins. The garage code. The Drawer holds them end-to-end: a passphrase the server never sees, a printed recovery key for the kitchen folder, and a minors' gate so the adults' shelf stays theirs. It locks itself after five minutes.
A project starts as an idea: a trip, a rebuild, a garden. Anyone can promote their own; an adult promotes a shared one. The moment it's a goal its colour gains a halo in every room — the binder, the picker, the board — so what the family is working toward is never a question.
A member's AI chats are theirs. Health is theirs — Kai reads it through two read-only tools, and nothing else does. Two adults can mark themselves partners, invisible to everyone else including the admin, and get a drawer only they see: a mood, a few lines, a picture blurred until tapped. Minors get Meme instead — a meme maker and a mood from a list the parents keep, with a quiet word to a parent on the moods you'd want to know about.
Everything is scoped by project — a rebuild, a season, a trip — and Family is the project everyone is already in.
Your private AI chats, and the house's guide by the same name. Kai knows every room and every setting, never spends money, drafts your Health plans, and answers from the same pages the help is written on. Rename it to whatever your house calls it.
Rooms per project and one-to-ones, with your device's own emoji. Invite an agent; it answers only when named, reads only what you can. Partners and Meme live here.
Notes with a block editor; Word, Excel and PowerPoint edited in place; PDFs; the household's Records and the Drawer. Draft with AI into the page, then keep or discard. Private by default; share to a project or the family.
A board per project, goals first. Cards show who — or what — touched them last. On the phone it's a stack, not a sideways scroll.
Maintenance first: rotations the adults set, bound to the Records they belong to. Events, due dates and subscribed calendars alongside; a Today line at the top for what's yours.
Generated and uploaded, in albums per project. Wallpapers, avatars, covers, memes and cards at the right size on one click. Every picture remembers its prompt, its model and what it cost.
Kaos ships with the house. Make your own in Sumi, our game builder, and install them as packages that run sandboxed with no network. Phone, big screen, controller.
Describe a song, get a song. Lyrics or not. Playlists the whole house can share, and the games play them.
A front door for the household's other services. Add a link, it shows whether it's up.
Yours alone: basics, goals, your equipment, weigh-ins, a workout log, medication reminders, and plans Kai drafts from them. Opt-in alerts for smoke, pollen and severe weather at the house. Nobody else sees your Health.
Add-ons apply to the house model only, never to cloud models on your keys. A parent can switch on auto top-up with a monthly cap, so a busy month never stalls and a quiet one costs nothing extra.
Everyday chat, notes and tool calls run on the house model: 2M tokens a month included, add-ons if you want more. When you want a frontier model or image generation, you add your own API key from Anthropic or Google and the app bills nothing on top — you pay the provider, at the provider's rate, and the household ledger keeps the receipts.
Kai is the guide that ships with every household: an agent that knows the app, where every setting lives, how to get a key from each provider, and how to confirm that provider isn't training on you. Ask it anything about the house.
Prices shown in the app are the providers' published rates and update when theirs do. The app always shows the current one before you spend it.
A family's conversations are the most private thing in the house. Every path they can take has been checked for where they could leak into a model, and closed.
The house model is served under a contract that forbids training on prompts and keeps no copy after the reply is returned. The model name and the provider are in settings, not hidden.
Anthropic's API doesn't train on your conversations by default. Google's doesn't on the paid tier; the free tier may. When you add a key, Kai checks which you're on and tells you what to change.
Shared secrets are encrypted on your devices under a passphrase the server never sees; the server holds ciphertext and nothing else. Lose the passphrase and the printed recovery key is the only way back — by design, for us too.
No one at KazokuAI opens a household's data. The only automated access is the nightly backup, encrypted before it leaves the server, and any human access would be logged and shown to you.
Health is one member's, Partners is two adults', a minor's Meme is the minors'. The server enforces each, the admin can't see through them, and no agent reaches past what the asking member can. No trackers, no telemetry: the ledger is the only record of use.
Export is the database and your files in one folder; delete removes the container, the volume and the backups on a schedule you can see.
KazokuAI started as one family's app on a server in a basement. The cloud version is the same app, one copy per household, with a locked door.
Your family runs in its own process with its own database and its own disk. There is no shared table with other families in it.
API keys are stored on your household's own volume and sent only to the provider that issued them. We never hold them, pool them or proxy them.
KazokuAI is written and reviewed by a working security professional. The habits come with it: least privilege, nothing stored it doesn't need, every release reviewed before it ships.
A member's AI chats are theirs. Adults manage spend and members, not conversations. Agents see only what the asking member can see.
Your export is exactly what the self-hosted version runs on, so you can leave the cloud and keep going on a box at home without converting anything.
Yes, the same build. The cloud version adds a front door, a house model instead of your own GPU, and Kai. If you run a server at home and want to host it yourself, it's a single container and you keep everything.
An open-weight model served for your household under a no-training, no-retention contract. It handles everyday chat, notes and tool calls well, is the default for every member, and 2M tokens a month come with the subscription — about 1,500 replies. Add-ons are there if a month runs long. Kai runs on it too.
No. Without one, every member has the house model and Kai, and the cloud rows don't appear. Add an Anthropic or Google key when you want Claude, Gemini or image generation; Kai walks you through getting one and setting a spend limit on the provider's side.
Adults create every account and decide who is a minor. Minors can use every room but can't change maintenance rules, manage members, or spend beyond a cap an adult sets on the household's keys. Their chats are private, including from adults.
No. The house model's provider is contractually barred from training on prompts and keeps nothing after the reply. For your own keys, Anthropic's API doesn't train by default and Google's doesn't on the paid tier; Kai confirms the setting on each key you add. We never see your conversations, let alone train on them.
Whatever the provider charges you — we add nothing. The app shows each model's published rate in the picker, the running cost in every thread, and each member's month in the header, so what's on your Anthropic or Google bill is never a surprise.
Export gives you the database and every file in one folder. Then the household is deleted on the schedule shown in settings.
Yes. Sumi is our game builder: describe a game, shape its cast and levels, and it packages a game you install in the Games tab. Packages are static files that run in a sandbox with no network, so a game can never phone home. Kaos, the game that ships with every house, is a package like any other.
Whatever the house shares and nowhere else keeps: the wifi password (shown as a QR for guests), streaming and utility logins, door and garage codes. Entries can be for everyone or adults only. It's encrypted end-to-end under a household passphrase; the recovery key prints once, for the kitchen folder.
On servers we rent in the United States, one container per household. Backups are encrypted before they leave that server.