1The phone should do the boring part
Getting a kid to the pool four mornings a week is repetitive work that eats attention from people who don't have any spare. It's also the kind of thing a phone is good at: known schedules, known addresses, known roads, and a dozen people who've already agreed to help each other out.
Working out which of twelve parents could pick up your daughter with the smallest detour is the plain version. Apple Intelligence — the AI built into recent iPhones — goes further. It reads the season schedule off a photo of the coach's email. It turns "I can do Wednesday but only on the way home" into a filled-in offer. It notices when nobody has picked up Friday yet.
The AI suggests and never decides. What it produces is a draft that somebody reads and confirms. Nothing it writes goes into your group's record unless a person says yes to it first.
This is why the app only runs on iPhone, and I'd rather say that plainly than bury it. The AI runs on the phone itself — your schedule and your kids' addresses aren't sent off somewhere to be read. Most AI features in other apps work the opposite way, uploading what you give them to a company's servers. Doing that with a list of where children live isn't something I'm willing to do, so the app goes where that isn't necessary.
On an older iPhone this is a smaller app. Apple Intelligence needs recent hardware. Without it every screen and every feature still works, but you type practices in one at a time instead of photographing them, and you fill in a form instead of writing a sentence. That's a real difference and I'd rather admit it than build the duller version for everyone.
One rule keeps that from splitting a group: the AI changes how information gets entered, never what can be entered. Nothing can go into your group's record that needs a new phone to create. Everyone counts the same no matter what they're carrying.
2I can't see your group
Your group's schedule, addresses and history live on your own phones and move between them through your own iCloud. There's no server of mine in the path. There's no account with me, no admin panel, and no way for me to read a group, join one, change one, or shut one down.
The storage is a mailbox. It moves sealed entries around and doesn't understand what's in them. It also sits behind a swap-in interface, so if iCloud ever became a bad idea, replacing it wouldn't mean rebuilding the app.
What that adds up to: there's no list of children's home addresses anywhere, because there's nowhere for one to be.
Getting stronger: entries are already sealed from the service that syncs them, and a group key is coming that makes them readable only by the phones in your group. Until it ships, that last part rests on the iCloud share's access controls rather than on the math.
3There's nothing to sell you, and there won't be
Nothing is sold, nothing is subscribed to, and no data leaves your group. That isn't a phase before the pricing page shows up. It's the arrangement.
Every bad outcome I want to avoid here comes downstream of needing money. The data starts looking like an asset. Usage starts looking like a number to grow. Collecting one more field starts sounding reasonable. And a company that ends up holding a map of where children live eventually gets bought by somebody those families never picked.
So the test I apply: if the reason for a feature is growth, adoption or engagement, it doesn't go in. The app is finished when it works well for one practice group. It doesn't need to get bigger than that.
4It asks for as little as it can
Data that was never collected can't leak, can't be subpoenaed and can't be sold. So the app takes the minimum the problem needs: pickup addresses, turned into map coordinates once so it can figure out routes.
It never asks where anybody is. No live location, no background location, no "Always" permission, not now and not later. Working out who's closest doesn't need it, and a database of where children are in real time isn't a thing worth having.
There are no privacy settings to go through, because there's no setting that would make it collect more.
5The code is public so you don't have to take my word for it
Everything on this site is a claim about software that parents are being asked to trust with information about their kids. Claims like that are worth something only if somebody can check them. "There's no server" and "this doesn't leave your phone" are the kind of thing a competent person can go and verify, so the code is out there for that.
It also means the app outlasts my interest in it. Your group's data belongs to your group, and it stays readable by code you can keep a copy of.
6It suggests, and a person picks
The app puts options in order and a parent chooses one. Nothing is ever assigned, and every suggestion is obviously editable. Software that looked like it was deciding who drives someone's kid would get resented and then deleted, and it would deserve it.
