Ventino
Clevis
Private household app. Sign in with the Google account on the allowlist — everyone else is turned away without explanation.
Login and the app share one origin (required for the iOS standalone PWA). No second identity provider — the child uses a parent's signed-in device.