There is no app to watch them with.
Seven cameras record their world into a black box wrapped in their own key. No live view. No location. No status screen. Nothing a parent can open on an ordinary day — because none of it exists.
Pairs with their phone · cloud-relayed · end-to-end encrypted
Interactive preview · move your cursor
It records everything. It opens three ways.
The 7-camera array records into an encrypted, rolling 15-day buffer wrapped in the teen's own key. Anything they mark as evidence — and the hour around any SOS — is kept until they delete it, and it belongs to them alone. The parent cannot browse any of it. We cannot read it. There is no live view of a teen — ever.
The teen presses once
The teen chooses to
Only if they go missing
There is no fourth way. No scheduled viewing, no silent check-ins, no timers, no admin override — that's what makes it wearable in front of friends.
SOS is for the moments they can act on. The box is for everything else.
Friday, 7:40 PM, the bus stand. A fifteen-year-old is followed through the crowd and harassed. She freezes — most people do. No SOS was pressed. At home, she can't say it out loud.
Instead, she opens her watch history, finds 7:41, and turns the screen to her mother. Together — her key, her choice — they export the clip: timestamped, geolocated, tamper-stamped. The complaint is filed that night. Nobody asks “do you have proof.”
The box didn't need her to be brave in the moment — wearing it was enough. It turns “nobody will believe me” into “here is exactly what happened.”
Nothing. And that's the point.
We built a parent app — status panel, check-ins, a nudge when they were running late — and then we removed all of it. Every one of those features reported on a teenager, and a daily surface whose only content is a teen's status is precisely the thing this product exists to avoid.
So there is no location, no battery, no “worn” tick, no notification that anything happened. A parent who wants to know how their teen is rings them.
That isn't a shortfall — it's the honest version of what a dashboard was only approximating. Thirty seconds of their voice tells you more than four green ticks, and it costs the teen nothing they resent.
What replaces all of it
A phone call.
✕No status panel
✕No check-in requests
✕No location sharing windows
✕No arrival confirmations
✕No “they took the watch off” alerts — ever
They can pause the box. It always comes back on.
A teen can suspend recording for a set time — and then the watch turns it back on by itself. No justification, no permission, no explaining afterwards.
The watch owns the clock
Not the app, not us. It counts down on the wrist and resumes automatically when it expires.
SOS overrides it instantly
One press resumes capture immediately, whatever the timer says. Safety never waits.
You're told it started
A notification when a pause begins — not a browsable history of their private time.
We used to pin the switch on and let nobody move it. We changed our minds: a box a teen can't pause is a watch a teen takes off. A gap that closes itself is worth more than a rule that drives the watch into a drawer.
Done together, once, and never revisited.
There is nothing to negotiate, because there are no daily settings to negotiate over. Setup exists to do one irreversible thing safely: split the recovery key.
Break-glass, and exactly what it costs
The family rings us. We verify the caller against the name, mobile and email registered at setup — a code goes to those, never to a number given on the call. Two of our approvers must then sign off, and the one who took the call cannot be one of them. Only then is the escrow half released, and the two halves combine on the parent's phone — never on ours.
We state the trade openly: the teen is told the moment it is asked, and every step is written where they can read it — but they cannot stop it.
An earlier design let the teen refuse. We removed it, because a veto worked from the teen's own phone is a veto an abductor holding that phone can work — and it would destroy the very evidence that finds them. The design moved from impossible to do to impossible to hide.
Built to be worn — by teens, for parents
A safety device only works if it's on the wrist. Every feature has to win over both sides.
Why they'll wear it: The box is wrapped in your key. Day to day nobody can browse your life — and that's cryptography, not a promise.
Why you'll trust it: Every moment is recorded and recoverable if the worst ever happens.
Why they'll wear it: One press brings everyone — and a 10-second cancel means pressing it is never scary.
Why you'll trust it: Help is always one press away. It cannot be disabled by anyone.
Why they'll wear it: Pause the box for 10 minutes, 30 minutes, 1, 2 or 5 hours. You don't have to justify it to anyone — it just comes back on by itself.
Why you'll trust it: There's no off switch, only a countdown. The longest gap they can create is five hours, it closes itself, and you're told when one starts.
Why they'll wear it: Every request for your recordings — including one that fails verification — is written where you can read it, and it can never be edited or removed.
Why you'll trust it: Trust enforced by transparency, not promises.
Why they'll wear it: There's no app your parents can open to look at you. Nothing reports your location, your battery, or whether you're wearing it.
Why you'll trust it: If you want to know how they are, you ring them — and you'll get more from thirty seconds of their voice than from any dashboard.
Why they'll wear it: Reads as a real watch: watch faces, step counter, sports activity and workout tracking.
Why you'll trust it: A watch they actually wear — which is what makes it work.
It never records in secret.
Whenever the black box is recording, a small red LED blinks beside the front camera. Anyone nearby can see it. That is a regulatory requirement for camera wearables — and the right thing to do regardless. No hidden lens, no silent recording, ever.
The light tells everyone
that the watch is recording right now.
Nobody can look later
Not the parent, not us. The recording goes into a box sealed with the teen's own key — the light is the only thing anyone else ever sees.
Five things nobody can change
SOS can never be disabled
Not by the teen, not by the parent, not by settings. If it could be turned off, this wouldn't be a safety product.
Capture can be paused, never switched off
A pause is a countdown the watch owns — 5 hours at the very most, and it resumes on its own. There is no indefinite off state and no sequence of taps that produces one.
No parent-initiated anything
Not live view, not location, not status, not a check-in. None of it exists on Teen. Live view is a Kids-only capability and stays that way.
The access log is permanent
Every request, every opening, every viewer — logged, readable by the teen, and never editable by us or anyone else.
We can never open it alone
We hold one half-key and the parent holds the other, and the two only ever combine on the parent's phone — never on ours.
Why everyone says yes
To the parent
“You'll never watch them — and you'll never lose them. If anything ever happens, you will know what, where, and who.”
To the teen
“Day to day nobody can browse your life — there is no app your parents can open to look at you. None exists. The one exception: if they ever tell us you're missing and prove who they are, they can be given a key — and you're told the second they ask.”
To their friends
“It's not recording for anyone. It's a black box — like an airplane's. Nobody opens it unless something happens.”
Evidence no one can tamper with. Data no one else can see.
Every image, audio clip and location point is fingerprinted and cryptographically signed the moment it is captured — alter a single pixel and the record no longer matches. Anyone can verify a bundle offline against our published key, without trusting or even contacting us. That is what lets a recording stand as evidence when it matters.
Freedom for them. Peace of mind for you.
Trustedwear Teen launches in 2027. Be first in line when pre-orders open.