Research
Catch the danger. Keep none of the child.
A small family of focused models, each doing one safety job well. Most already run in our alpha. The rest are still in the lab. All of them run on the phone and store nothing.
Grooming-pattern recognition
A small language model that learns the shape of predatory talk. Secrecy pressure, pushing a child to move to another app, gifts, fishing for their age or address. It raises a flag a parent can act on, with no message contents attached, and it is tuned so that secrecy and isolation count for more than a simple age question.
On-device content filtering
It checks images and text as a page loads and blocks the unsafe ones in place. Only the harmful part is removed, so the rest of an ordinary page keeps working and there are no blunt whole-site bans. Illegal child-abuse material is blocked on sight and reported as the law requires. It is never stored, shown, or generated.
Reading the screen in encrypted apps
Plain OCR, running on the phone, reads the text already drawn on screen. That lets it catch grooming even inside end-to-end-encrypted chats. It never logs keystrokes or passwords, and the text never leaves the device.
Video detection and in-place rewriting
Our flagship alpha. It spots unsafe video as it plays and rewrites it on the fly, blurring or muting only the moments that are a problem and re-packaging the same stream so the rest plays without a break. It runs on the phone and keeps nothing.
Offender-record matching
Early research into linking convictions that are already on the public court record, to support our journalism and help protect communities. A person reviews every match, it happens only after a case has been to court, and it is built around data-protection law. Never before a trial, never an automated accusation.
Edge distillation
The work underneath all of it. We shrink every model so it runs offline on a mid-range phone, because protection that needs the cloud is protection an adult can switch off.
We train for the harm we cannot miss.
We do not scrape children's data. The models learn from lawful public datasets, from examples of grooming that safeguarding practitioners label with us, from synthetic conversations, and from plenty of ordinary chat so the model does not cry wolf at every clumsy message.
Rules come first and the model comes second. A plain set of rules handles the obvious cases. The model is the thin layer on top for the rest. No large language model sits in the live path, which keeps the work fast, cheap to run, and easy to check.
We tune for recall on real danger rather than for a leaderboard, and we test against the way predators actually behave: keeping secrets, moving a child to another app, cutting them off from the people around them. Then we distill everything down small enough to run offline on a mid-range phone.
Nothing a child sends is ever used to train, and no raw content is kept. That is a hard rule, not a setting.
Where this is going.
- A phone a parent can trust
- One a parent can hand a child knowing the worst is caught, without anyone watching over the child's shoulder.
- Cover the whole phone
- Text, images, video and audio, across apps and the web, all judged on the device.
- Small enough for any phone
- Models light and fast enough to run on a cheap handset, and given away where giving them away protects more children.
- A standard others can use
- We publish how the work is done and open the tooling, so good protection does not stay locked inside one company.
We measured the frontier. Most of it looked away.
We built a benchmark of 36 real child-safety tasks across five areas, then ran six frontier models through it. Only xAI's Grok took the work on. That gap is a big part of why we build our own.
- Grok-4.1 · xAI
- 79.9% average. 100% on real grooming cases, 95.2% on stranger-meeting scenarios.
- Grok-3 · xAI
- 59.5% average.
- Claude-Opus-4.6 · Anthropic
- 42.2% average. Declined the real-grooming and health-risk tasks.
- Gemini-3-Pro / 2.5-Pro · Google
- Declined most tasks. 0.0%.
- GPT-5 · OpenAI
- Declined all five categories. 0.0%.
What we publish, and what we never will.
- We publish
- How the models work, how we test them, what we find, and the open-source tooling around them.
- We never publish
- A child's data, a raw grooming dataset, or live model weights, and nothing that would help an adult get around the protection. That stays closed for good.
Backers · partners · researchers
Help us build the AI that keeps children safer.
We are a small, self-funded team, four years into this. If you fund safety research, want to build with us, or want to put these models to work protecting children, get in touch.