Not every child has their own phone. In a lot of homes there’s one tablet on the kitchen counter that everyone shares. Shoal now supports that properly: a nominated family device that several children can use, with a design built around one awkward truth — a shared device shouldn’t leak one child’s private messages to whoever happens to pick it up.
Who’s holding it?
A personal device knows who you are. A shared one doesn’t, and pretending otherwise is how you end up showing a younger sibling’s conversation to an older one. So a family device starts as nobody in particular. There’s a clear, friendly way to say “I’m me” — a swap chip that lets a child pick themselves before they start — and the device only becomes theirs once they do.
Until someone picks themselves, the device deliberately knows nothing it could spill. And when it’s been idle for a while, it hands back to that neutral state and offers the most recent users first, so the next child isn’t dropped into the last one’s chat.
The notification problem
This is where most shared-device designs quietly fail. A message arrives, and the lock screen helpfully announces “Mum: are you still upset about earlier?” — to the whole room. On an unattributed family device, Shoal shows a generic notification only: that there’s something to see, with nothing about who it’s for or what it says. The detail appears after a child has picked themselves and the device knows whose key to use. We wrote about how the decryption itself stays on the device in notifications you can read, that we can’t; the family-device case is that same principle applied to a screen several people can see.
Reachable when it matters
Because the device is shared, it’s also a useful escape hatch. A child whose own device is in its quiet hours can still sign in on the family tablet to reach a parent — the active hours follow the child, but a shared device in the kitchen shouldn’t leave them unable to say “I’m running late.” It’s a small allowance, and a deliberate one.
Some honest limits
A shared device is shared: the protection is that it forgets between users and stays generic until someone identifies themselves, not that it can tell who’s really holding it. The adults setting up the family are trusted to manage the device itself sensibly — Shoal looks after what’s on the screen, not who’s in the room.
How this fits with everything else
A family device respects every other rule: admin oversight, moderation, and the per-child skins all follow whichever child has picked themselves. The security page describes how devices and sessions are secured.
Try Shoal, set up the kitchen tablet, and tell us how it holds up at [email protected].