Security, in plain words
Your family.
Your say.
For Mable to be helpful, you need to know where the boundaries are. Here they are, without the fine print.
01 / Your sign-in stays yours
Poppins never sees your passwords.
For Gmail, you sign in with Google on Google’s own permission screen. You choose the access you grant. You do not give your Google password to Poppins or to Mable.
Poppins uses an access token to read the account you connect. The token is kept encrypted; it is not given to the AI model. Each parent connects their own account.
School and club site connections are future work. The design keeps passwords in a separate vault, outside Mable’s view. That future design is not a claim that site connections are available today.
02 / Shared plans, separate inboxes
Each parent’s own mail stays theirs.
Connecting your Gmail does not give your partner a view into your inbox. Poppins creates shared family items from the mail it reads. Relevant details and source information can appear in those shared items; the underlying mailbox is not shared.
Mable reads connected mail to identify what matters to your family. The first read covers the last 30 days, followed by new mail. This is access to your connected mailbox, not only messages that have already been identified as school mail.
Mail content may be sent to an AI model provider for processing. Poppins is not an on-device-only service. Each parent’s set-aside mail stays with that parent.
You can disconnect your account. That stops future reads; it does not automatically remove items already created for the family.
03 / Your yes is the boundary
Money never moves on Mable’s say-so.
Early access does not make payments or purchases. As we build toward an assistant that can act, the rule is clear: Mable never pays or commits money without a parent’s explicit approval.
A daily limit or category limit does not count as permission. An action must fit the limits and have the required approval. You will be able to choose when one parent can approve and when both parents must agree.
What a useful approval shows
- The exact action, recipient and amount.
- Which parent or parents need to approve.
- The relevant limit and what is already used.
- A record of what was approved and what happened next.
In the homepage example, “Get him a $25 Amazon gift card and print it” is an explicit request from a parent for that purchase and amount. It is not permission for future spending.
The approval card, action receipts and spending controls on this site are illustrations of the vision. They do not connect to a payment service.
04 / The right picture in the right place
Both parents see who’s handling it.
A shared item gives both parents a common picture: what needs doing, who claimed it and where the information came from. When Alex claims the form, Dana sees that Alex has it.
The kitchen wall is a read-only family view. It keeps sensitive details—such as medical and money information—off a screen visitors might see. A parent’s private appointment can appear with its details hidden.
The illustrated household on this site is fictional. The schedules, amounts and conversations are examples, not customer records or testimonials.
05 / Help on your terms
You choose what you connect.
Each parent manages their own account connection. If access ends, reconnecting is that parent’s decision. Disconnecting stops new reads while leaving saved family items in place.
The longer-term design includes controls to pause Mable’s actions, choose daily and per-category limits, and review a shared action history. Those controls must be in place alongside the capabilities they govern.
As Mable takes on more, those boundaries stay visible: what she can reach, what she is waiting on, and who gave the yes.
06 / An honest beginning
Early access now.
A larger ambition ahead.
Poppins begins with coordinating the family day: connected mail, shared events and to-dos, and who is handling what. The product scenes show the approved design direction, which may be ahead of a particular early-access release.
The wider stories—buying a gift, paying a bill, renewing registration, booking a sitter—show what we are building toward. They are not a list of features you can use today. We are not promising a release date for them.
If you join early access, we keep your email address and the date you joined, in Poppins’ own storage, only to invite you to Poppins. We don’t share it, sell it or add you to anything else, and every invitation lets you remove it. These pages set no cookies and run no analytics or tracking scripts; Google Fonts is the only outside resource they load.
Explore early access