The privacy-first guide to parental controls

What "privacy-first" means here

It gets used loosely, so here it means two specific things: what happens to your own passwords, and what doesn't happen to your child's data. Both matter, and Owlyfi solves them differently.

Two passwords, one keychain

Your phone already keeps your Wi-Fi passwords and app logins somewhere secure — the same system it uses for banking apps.

• Owlyfi adds one more. Your router's admin password, in that same secure keychain.
• Never sent to us. It doesn't touch a server we run.
• Can't leak what we don't hold. A credential we never see can't be part of a breach we didn't cause.

What Owlyfi deliberately doesn't collect from your child

Owlyfi is parental control that runs on the router — not on your kid's phone. That decides what can be seen at all: Owlyfi sets a boundary around the network, and everything else stays between you and your family.

Owlyfi does not monitor the child.

• No reading messages.
• No tracking location.
• No logging browsing history.

A schedule that pauses a device at bedtime, or blocks it on request, only needs to know which devices are on the network and when — not the content of a conversation.

Why we drew the line there

Restrictive mediation — the umbrella term for monitoring and locking down a child's device — does lower exposure to online risk. But the American Academy of Pediatrics' review of the evidence also finds it lowers a child's own chances to build digital judgement, in the same move.

A 2024 rapid evidence review found that monitoring beyond what a family agreed on shows up as damaged trust, not a safer household. Owlyfi's answer is to stay out of the parts of a child's life a router schedule was never built to see anyway — that's a design choice, not a feature we ran out of time to build.

What any router can and can't see

Most traffic your child's devices send is encrypted end to end. DNS over HTTPS — standardised in RFC 8484 — increasingly encrypts even the lookup of which site is being requested.

• A network tool was never going to see message content through that, even if it tried.
• A VPN or encrypted DNS can also route around domain-level blocking at the router entirely.
• No content rating either way. A router-level tool schedules and blocks; it doesn't grade what's inside.

Owlyfi's privacy design works with that limit, not against it: a boundary at the network edge — not a window into the phone.

Bring your child into the plan

None of this replaces talking to your child about why a rule exists — easier to do honestly when the tool itself isn't quietly reading anything they wouldn't expect you to see. Weighing an app on the device against a schedule on the router? This comparison walks through the trade-offs, this guide to bedtime schedules shows it in practice, and this piece covers why an app on your child's own phone causes problems of its own.

Sources

1. American Academy of Pediatrics — Parenting and Digital Media — restrictive mediation lowers risk exposure but also a child's own opportunities and skills.
2. Journal of Children and Media (2024), rapid evidence review — monitoring beyond what a family agreed on is linked to damaged trust.
3. RFC 8484 — DNS Queries over HTTPS — encrypts DNS lookups, limiting what any network-level tool can see.
4. American Academy of Pediatrics — Family Media Use Plan — recommends agreeing the plan together with children.

All sources accessed 24 September 2026.