Private by design.

Individual responses stay protected. Employers see privacy-safe team insights, not a list of who felt what.

A person's own replies, wellbeing answers and coaching thread stay with them. They can delete a response. Managers cannot open it from the dashboard, an export or an API.

Team and workplace charts stay hidden until at least three people have replied. A sensitive note can be kept confidential, and it is not shown to an implicated manager.

Company coaching guides are stored for that organisation only. They are read when someone asks the coach. They are not used to train the model.