Names stay hidden from the AI
Before anything is sent to a model, every name and detail is swapped for a neutral tag. The AI works on “Child A”, never your daughter.
Privacy & security
The most sensitive calendar you’ll ever keep. Treated that way.
Maziko holds where your children are, when, and with whom. That deserves more than a reassuring sentence in a policy. Here is precisely how we protect it, in plain English.
Locked away, even from us
Your core data is encrypted, so the raw storage holds nothing anyone can read. Not an intruder, and not us.
People see only what they need
A grandparent doing Wednesday pickups sees only those days. Adding a new child never quietly opens things up for anyone.
Yours to take, any time
Download everything in one tap, whenever you like. We want to keep you because Maziko is good, not because leaving is hard.
How a school letter becomes calendar events, without the AI ever meeting your child.
- 1
You share a letter
A photo of a newsletter mentioning “Ada, Year 3, trip on 14 March”.
- 2
The firewall tokenises
Ada becomes Child A. Names, schools and detail are swapped for neutral tokens on our servers, before anything leaves.
- 3
The AI reads tokens
The model extracts “Child A · event · 14 March”. It never receives, and cannot learn, who Child A is.
- 4
We restore & you confirm
Maziko maps the tokens back to Ada on our side and shows you the draft event to approve before it saves.
The mapping between real names and tokens never leaves Maziko. The AI provider sees pseudonyms and dates, nothing that identifies a child.
Encryption at rest, in plain terms
Your core family data is protected with envelope encryption. Each piece of data is locked with its own key, and those keys are themselves locked by a master key held in a managed key vault, separate from the database. If someone walked off with the raw storage, they would hold ciphertext and nothing else.
This is deliberately stronger than “we can see it but promise not to look”. For core data, Maziko staff cannot read your records straight out of storage either. Access is mediated, minimal, and logged.
Least access, by default
The caregiver network is powerful because it’s precise. When you invite someone, you choose what they see:
- A co-parent shares the full picture with you.
- A scoped caregiver, a grandparent doing Wednesday pickups, say, sees only the days and details they need.
- Adding a new child never automatically widens a scoped person’s access. New information stays closed until you open it.
A clear audit trail
Swaps, approvals and schedule changes are recorded, so there’s a shared, factual history rather than competing memories. Where records must be retained for a legitimate window, they’re kept securely, and an account deletion still removes your personal data. Portability and deletion are treated as rights, not favours.
You can always walk away with everything
A single tap produces a complete export of your data, a proper GDPR download. No support ticket, no retention gauntlet. We’d rather earn the next month than trap you in it.
Honest about the state of things
Maziko is early, and we’ll keep this page current as we publish formal policies and, in time, independent assessments. If a security question isn’t answered here, ask us directly at security@oiko.app, a straight question deserves a straight answer.