Trust & Family Safety
The Trelis Family Trust Pledge
Built for our families first. Here are the architectural boundaries we will never cross.
The 4 Non-Negotiable Pillars
Pillar 1
The Outbound Gate
Proactive Inside, Locked Outside
Inside your private account, Trelis does deep internal synthesis — stitching flights to hotels, detecting calendar collisions, and calculating drive times. Outside your account, it takes zero autonomous actions: no texts, no emails, no invites, and no address sharing without an explicit human tap.
Pillar 2
Zero Model Training & No Data Selling
You are the customer, not the product
We charge an honest subscription ($49/month) so you are the customer, not the product. Your family’s data is never sold, and it is never used to train OpenAI, Anthropic, or any other AI model.
Pillar 3
Bilateral Family Consent
Sharing is a mutual handshake
Sharing schedules or carpools requires explicit bilateral consent between accounts. No collateral harvesting of teammates, coaches, or grandparents without mutual opt-in.
Pillar 4
Hard Tenant Isolation & Timed Deletion
Your data stays yours — and leaves when you do
Every family’s data is isolated with multi-tenant Row-Level Security (RLS) at the database level. Live data is purged within 24 hours of an integration disconnect or account deletion; backups roll off within 30 days.
How Trelis is architected differently
| Typical AI agents | Trelis | |
|---|---|---|
| Autonomous external actions | Yes | Strictly gated behind a human tap |
| Training on your data | Yes, or an opt-out buried in settings | Never |
| Sharing with other parents | Scrapes your inbox unilaterally | Explicit bilateral consent |
| Business model | Free / ad-supported / data pipeline | Paid subscription ($49/mo) |
Founder’s perspective
Try Trelis for one tournament weekend.
Proactive inside your account. Locked at your front door.