rilo
Choose a language: EN
rilo

Chat. Call. Be Close.

On the App Store and Google Play

Let your child chat and call with the friends and family you choose.

Calls and messages between your child and the people you choose. Friends, grandparents, you. On an old phone with no SIM, over Wi-Fi. Nobody can look your child up, because there is nothing to look them up in.

The Rilo mascot fox and his family, two grown-ups and a child, on a call with grandma

What makes Rilo safe for a small child

No search, ever

Rilo has no directory and no username lookup. A contact starts with a one-time invite from a grown-up, scanned from another phone’s screen or sent as a link that expires within the hour.

A grown-up says yes to every contact

Every contact involving a child only exists once a grown-up says yes on their own phone, with their own fingerprint or face.

We cannot listen in

Calls and messages are scrambled so only the two phones involved can unscramble them. The phones know which key belongs to which person, so nobody can slip in between. Including us.

No trackers, no ads

No advertising, no analytics, and nothing from anybody else running inside the apps or on this page.

How it works

Three steps, and one of them is a grown-up saying yes.

A grown-up fox crouching to hand a phone to a fox cub, who holds one of his own

Set up their device from yours

You create your child’s account from your own phone and it is signed with your key. A child cannot complete a sign-up alone, and there is no “I am an adult” box a child can tick.

A grandmother fox holding up her phone with a QR code on it, while a fox cub scans it with his

Add people with a one-time invite from a grown-up

Grandma’s phone shows a code that works once. Your phone scans it. That is also the moment the two phones learn to recognise each other for good, which is what keeps everybody else out of the call later.

A grown-up fox holding up a shield with a white tick, a fox cub looking up at it

You approve every single contact

No contact exists until a grown-up says yes. Two children need a grown-up on each side. Any of them can cut a contact later, and it stops working straight away, even mid-call.

Not sure yet? Read about first phones

So how does it work?

A phone showing four large photo tiles of foxes, each labelled with a name (Karel, Kim, Paula and Piet), and a fifth tile reading Add a friend

Faces, not a contact list

Everyone your child is allowed to reach, as big photo tiles. Nothing to type, nowhere to get lost. A child who cannot read yet can use this, because there is nothing on it to read.

A phone showing a chat with Daddy: two yellow fox stickers sent by the child, and a message reading “Almost finished in the supermarket, I will be home in 5 minutes”

Words and foxes, nothing else

Photographs, video and links are not part of it at all. A child who cannot spell yet sends a fox. One who can, types. Every message is scrambled so only the two phones can read it.

A phone ringing, showing one large round photo of a fox, the name Kato below it, and a green answer button beside a red decline button

A call is a face and two buttons

Green to answer, red to not. That is the entire decision. Nobody who has not been approved by a grown-up on both sides can ever make this screen appear.

Who do they call or text with?

Two 3D cartoon foxes on a phone call: a grandmother fox with silver hair, round glasses and a green cardigan on the left, a fox cub with a yellow backpack on the right, sound waves between them and a purple shield with a white tick above her

Grandma, on her own phone

One screen, with your child’s face on it and a green button when it rings. You send the invite and say yes once.

Two fox cubs, each talking on their own phone, with a shield bearing a white tick floating above each one

A friend from school

Two families, two yeses. A grown-up on each side has to approve the other child by name before anything happens at all. The same rule that lets your child ring Grandma, doubled.

A fox cub on the phone with his mother, who is out carrying a woven shopping basket

A parent who is not home

No SIM, no monthly bill. An old phone or a shared tablet over Wi-Fi is enough. The one your child rings when you are at work, at the shop, or just running late.

How it works for a grandparent Or compare it with a watch, an old phone, or waiting

What we keep

There is almost nothing about your family on our server.

No names, no photos, no ages

Set on your phones, passed straight to the other phone. They never reach us.

No list of your child’s friends

Who your child may call is decided on your phone and stays on the two phones involved.

No messages, no calls

Locked between the two phones. A message waiting for a phone that is off sits here as a sealed box.

Waiting for you

Sam would like to talk to Emma.

If you approve, Sam and Emma can call and message each other, without you present.

Sam’s grown-up has already said yes on their side.

I know who this is and I am choosing to allow it.

Decline Approve (5s)

Approvals

Nothing connects until you say yes.

Every person your child talks to arrives on this screen first. A friend from school, a cousin, their grandmother. Both buttons weigh the same, Approve waits five seconds and needs a tick, and the sentence in the middle says exactly what you are agreeing to.

Money

How Rilo is paid for.

By the families who set it up, through the App Store or Google Play.

One child costs €1 a month or €10 a year. Up to six children cost €2 a month or €20 a year. Where the euro is not the currency, the store shows the price in yours.

Setting up your first child starts with a free period. One subscription covers both parents’ phones, and nobody your child calls is ever asked for anything. Sold in the EU only.

It also does not need a new device. An old phone with no SIM card works, because everything runs over Wi-Fi. A real saving next to a kids’ smartwatch or a SIM-only plan bought just for a child.

Questions

The things parents ask first.

What age is this for?

Roughly four to ten. The child’s side is built for someone who cannot read yet. Large photo tiles, navigation by face, no menus, and the little text there is decorates rather than instructs. The grown-up side is an ordinary app for you.

Is it really impossible for a stranger to reach my child?

Reaching your child takes two things at once: an invite that came from a grown-up, and a yes from a grown-up you had already trusted with that account, given on their own phone. There is nothing to guess, nothing to search, and no list of children anywhere to leak. An invite forwarded to somebody else connects them to nobody. It can only put a name in front of you that you did not expect, and you decline it. Even somebody who stole everything we have could not create a single contact, because we hold nothing capable of granting one.

Do they need their own phone?

No. A shared family tablet works, and each child gets a profile they pick by tapping their own photo. An old phone with no SIM works too, because everything runs over Wi-Fi.

Can I read my child’s messages?

No, and neither can we. You decide something bigger than that, which is who your child can talk to at all, and whether each contact is calls, messages, or both. At this age that is the part that actually protects them. The messages themselves are scrambled so only the two phones can open them, and that wall has no side door, not for us and not for a parent. If you want to read along, do it the old way and sit down together with the phone.

When can I get it?

Now, on both. Rilo is on the App Store for iPhone and iPad, and on Google Play for Android.

Read the rest of the FAQ