One family.
One hub.
Track your kid's meds, vitals, and appointments in the same app they use. They get a real account. You get the control you need while they're young. When they turn 13, you let go of the control — while still being able to see and be involved.
Three things, in one place.
A family code to invite anyone. A living tree of who's in. And a permission matrix that respects every child's privacy by default — even from you.
“Join my Leo family. Open Leo → Family Hub → Join an existing family. Code: K7M2RX”
From zero to whole family in four taps.
The hub is designed so anyone in the family can join — even the tech-tentative grandparent who's still figuring out their iPhone.
Create your family
An adult — you — taps Family Hub → Create. Leo generates a 6-character code, a QR, and a pre-written invite.
Invite the people you trust
Share the code by text, by AirDrop, by reading it aloud. No deep link, no auto-join — they paste it themselves.
Your family fills in
Up to six members — parents, stepparents, grandparents, kids. Title each person however you want.
Tune each child's hub
For every under-13, you choose what's tracked, what stays private, and who in the family can see it.
Everyone in one branching view.
Tap anyone to see their role and what they can do. Solid lines mean self-managed. Dashed lines mean parent-controlled — for now.
Tap anyone. See everything you should — nothing you shouldn't.
Every family member gets a card. For under-13s it's where you tune their setup. For grown-ups, it's where you see whatever they've chosen to share. Either way, the experience is the same three tabs.
Overview — the at-a-glance tab
Every member card opens here. For an under-13 you see their editable title, conditions tracked, when they joined, current streak, and adherence this week. For an adult, you see whatever they've chosen to share. No medical detail surfaces here — that's the next tab.
Editable title
Mom, Auntie Liz, Bestie, Coach. Whatever your family calls them.
Streak + adherence
At-a-glance health consistency — only shown if the member's streak/adherence permission is on.
Joined date + code
When they came in, and which code they used. Lightweight history.
What you see, what stays private, what you can disable.
The same 19 controls live on every under-13's card in your hub. Four rows can never be opened — even to you. They're the kid's, full stop.
The four locked rows above can never be made visible — not on day one, and not on your kid's 13th birthday. Their journal, cycle, last-opened, and symptom-log city are theirs, full stop.
Cycle tracking is a great example: you can turn the feature off for an under-13 entirely, but you can never see what they logged before. Privacy and control aren't the same switch.
The day they take the wheel.
On their 13th birthday, Leo gracefully transfers control to your kid. You don't lose access to what you already saw — but you stop being able to toggle anything new. Sticky permissions; gentle handoff.
Mom & Dad call it.
Kid calls it.
Whatever you already had access to, you still have. Your kid has to actively revoke a row, not the other way around. Most teens don't flip anything — but they can, and they should know they can.
The same app, softer for them.
Your kid's hub is theirs — no admin surfaces, no permission toggles, no audit logs. Just their family, their meds, their rewards, and the warm stuff. Designed to feel like a place they want to open, not one they have to.
Hi, Leo 👋
What's different on their side
Warmer aesthetic
Pastel gradients, bigger taps, friendly emojis. Less clinical than the parent view.
No admin surfaces
They never see the permission matrix, the audit log, or the family admin badge. Those are parent tools.
Their family, framed warmly
"Looking out for you" instead of role labels. Their family is people, not a permissions structure.
Rewards front and center
Their points balance and available rewards are right on the home screen — earned through real consistency, not app usage.
Their private things stay private
The footer reminds them: journal, mood, and the four locked rows don't show up on the family side. Quiet trust.
The kid view stays warm, but now gains the privacy controls. Their first time opening it after the flip, they see a one-screen "graduation" walkthrough — what they can now toggle, and how to revoke their parents if they want.
One creator. As many co-pilots as you need.
Title each person however your family actually calls them. Then hand out admin rights selectively — your spouse can manage the kids' permissions and author rewards, the grandparent can just see the calendar.
Edit each child's 19-row permission matrix.
Add custom rewards to the family catalog.
School and ER can reach this number.
Family admin
The one person who made the family. The crown is always theirs. Can grant other adults canManageKids and canCreateRewards — and can hand the crown to a co-parent if life changes.
Co-admin (delegated)
Any adult the family admin promotes. Manages permissions for the under-13s, authors family rewards. Can't remove the family admin or transfer ownership.
Member
Default for everyone joining by code. Sees the family calendar, emergency contacts, and rewards catalog. Their own data stays theirs.
Self-managed kid (13+)
A teen or older child who's taken control of their own permissions. Still in the family for the warm stuff: rewards, calendar, emergency contacts.
Grandma's watching tonight.
Temporarily share whatever your designated caregiver needs to keep your kid safe overnight. Twelve hours, auto-expiring, on a real countdown timer. No risk of forgetting to revoke at sunrise.
Sharing with Grandma Rita
How it works
Pick who to share with
Anyone with an email or phone — they don't need to be in your family hub. A one-time link gives them access to a temporary read-only view.
Choose what to share
Medications, emergency info, allergies are pre-selected. Anything you check stays included for the full 12 hours.
The clock starts
A live countdown shows on your hub and theirs. You can end the share early with one tap if plans change.
Auto-expires at sunrise
Access disappears when the timer hits zero. No follow-up, no leftover permissions. It's like it never happened.
Rewards your family actually wants.
Skip the generic gold stars. Anyone with rewards permission can write a reward in their own words — and decide whether the kid needs to ask first or can just redeem.
Pick dinner Friday
Whatever you want. Even sushi.
Family movie night
You pick the movie + snacks.
Sleepover with friend
Needs Mom's OK before locking it in.
New book of choice
Up to $20. Library still free.
Points come from real consistency
Logging meds, tracking symptoms, hitting an appointment — the kid earns points for following through with their health, not for using the app the most. No leaderboards across families; each kid's progress is theirs alone.
Things you don't want to think about. Until you do.
The boring features that quietly matter — the printable ER sheet that already has the dose schedule, the audit log that shows exactly when a permission flipped, the panic button that revokes everyone's access at once.
Emergency contact list
Pediatrician, urgent care, poison control. One tap to call.
Allergies + medical info per kid
Surfaced first thing on every kid's card. Severity, what to do, who to call.
Family medical summary PDF
Pick which child, generates a one-page ER + school nurse sheet. Conditions, meds, allergies, emergency contacts, dosing schedule.
Shared family calendar
Everyone's appointments in one view — permissions-aware, so private things stay private.
Audit log of every toggle
Every permission change — who flipped what, when. Transparent, never alarming.
Mass revoke
If anything ever feels wrong — phone lost, account compromised — one tap kills all family members' access.
Track for weeks. Hand it over in seconds.
You already do the watching — the dose at 8 PM, the migraine on Tuesday, the dizzy spell after gym class. Leo turns it into a one-page summary your kid's pediatrician, neurologist, or specialist can read in under a minute.
What's on the page
Every active medication
Name, dose, schedule, and adherence over the last 30 days. PRN meds show frequency.
Symptoms graphed over time
When the kid logs a symptom, it shows up here with severity and frequency. The doctor can spot the trend you couldn't quite put into words.
Vital trends
Heart rate, BP, weight, temp — weekly averages so the doctor doesn't have to squint at a thousand data points.
Allergies + emergency info
Front and center on the page so a new provider has it before they ever ask.
Recent flares + appointments
Last few flare-ups timestamped and last few visit dates with any follow-up notes you logged.
Leo doesn't auto-send anything to your kid's doctor. The summary lives on your phone until you decide to share it.
The things we're not going to do.
A family hub holding chronic-illness data needs hard guardrails, not soft promises. Here's what those look like.
No AI on your data
Your record never gets fed to a model. No vendor AI. No training. No prediction.
HIPAA-aligned
Built to HIPAA's privacy and security rules. BAA with our cloud provider in progress; we'll be HIPAA-compliant the moment it's signed.
We don't read it
The four private rows stay private — even from us. Your doctor only sees what you choose to share.
By sharing this code with someone under 13, you confirm you're their parent or legal guardian and consent on their behalf to Leo storing the health information they choose to log. You can change what their account collects, who in your family can see it, or remove their account from your family at any time. Leo never sells your data.
The list of nos.
Some features make health apps look modern but make families uncomfortable. We don't do those. Here's a transparent list.
No cross-family leaderboards
Your kid isn't competing with anyone else's.
No AI insights or predictions
No model interprets your symptoms, no forecast of when a flare is coming.
No drug-interaction tracker
That's pharmacist territory. We log what you take; we don't second-guess it.
No precise location
Symptom logs can optionally include a city. Never a coordinate, never a route.
No selling. Ever.
Not to insurance, not to data brokers, not to anyone. Leo's a tool, not a pipe.
No social feed
No comments, no likes, no public profiles. A hub is private by design.
Six months,
on the house.
Families in the early beta get Leo free for six months. We'll learn alongside you — what works, what feels heavy, what you wish was different. After that, you decide what's next.
Direct beta is 13+ at /beta. Under 13s join through their parent's family application above.