Question 1

How does the encrypted household vault work?

Accepted Answer

Novara uses browser-side AES-GCM encryption with a key derived from your passphrase. The key stays in browser crypto, while the server stores opaque ciphertext and IV values rather than the readable household document. This explains the current implementation; it is not a claim that any system is invulnerable.

Question 2

How do family access controls work?

Accepted Answer

Household members can be assigned supported roles and permission maps. Those permissions scope access to the sections the owner authorizes; they work alongside account authentication and do not automatically grant access to the entire vault.

Question 3

What do timestamped actions show?

Accepted Answer

The vault audit model records the action or intent, its outcome, and a createdAt timestamp. That trail shows product activity Novara recorded for your household; it is not a complete record of activity in every external system or provider.

Question 4

Does Novara place provider calls for me?

Accepted Answer

Not yet. The current implementation records an authorized “take action” intent for review, but it does not place a phone call or contact a provider. The intended handoff is to prepare the relevant context, show what would happen next, and keep the provider action subject to your approval.

Question 5

When is a human decision required?

Accepted Answer

Novara pauses or requests your input when context, consent, safety, or judgment is required instead of guessing. Important actions such as sending, calling, or spending remain subject to the product’s approval flow, so the family can review the decision before it moves forward.

Family privacy and AI assistance

How does the encrypted household vault work?

How do family access controls work?

What do timestamped actions show?

Does Novara place provider calls for me?

When is a human decision required?