What your employer can see
Exactly what an employer sees of wellbeing answers, employee records, Total Reward statements, birthdays, the calendar and the support chat, and what stays private.
For employees, and the admins who answer their questions
Your employer's admins manage your record on the platform, so they can see a good deal about you. Some things they never see. This page sets out both, part by part.
Wellbeing answers
Your employer sees wellbeing results only as organisation-wide figures, each an average of five or more people. Below five, no figure is calculated at all. Your individual answers never appear on your employer's screens, in any form.
The employer's screens read only from figures already combined across five or more people, never from individual answers, and the database enforces this. Mood and anxiety questions are kept off the employer's screens entirely.
Your employer can see how many people have answered a round. They cannot see who.
Your own answers over time are on My Wellbeing, visible only to you. Privacy in the wellbeing section goes into more detail.
Your record
Your organisation's admins see your full employee record. That covers personal details, employment details, pay and pension, documents, emergency contacts and leave. They hold this record and keep it up to date. You see your own personal and employment details on My Profile.
Your Total Reward statement
Your admins see the figures on your Total Reward statement, because they set them. When you open your statement, every money figure starts blurred. Press Show figures to see them and Hide figures to blur them again. They are blurred again each time you come back to the page, so you can open your statement in an office or on a train without anyone reading over your shoulder.
What colleagues see
Colleagues see you in the people directory with your name, job title, department, location, photo or initials and time at the company, plus email and call buttons where those are on file. They never see your pay, home address or full date of birth.
The birthdays card on the home page shows the day and month of your birthday, with your name and department. It never shows the year or your full date of birth.
On the calendar, colleagues in your department see you as your name, "Away" and the dates. They never see the type of leave or the reason, and the database returns name and dates only, so sickness or compassionate leave cannot show to a colleague.
Sickness and leave
Where your organisation uses Time Off, logging sickness tells your line manager the dates, or your organisation's admins if you have no line manager. Admins see a table of sickness absence with the dates, days lost and whether a fit note was provided. Admins can also turn on a layer of the admin calendar that shows everyone's approved leave and recorded sickness.
The support chat
The support chat in the app is between you and the Alltoogether team. Your employer does not see it.
Things that are not tracked
Your organisation's support page records no views, so your employer cannot tell whether you opened it.
Your accessibility settings are saved in your own browser, not in your account, so your employer never sees them.
Questions
No. Nobody at your employer sees an individual's answers. Admins see organisation-wide figures from five or more people, and line managers see none.
No. Colleagues in your department see your name, "Away" and the dates, and nothing about the type of leave or the reason.
Yes. Your admins hold your pay details on your record and set the figures on your Total Reward statement. Other employees cannot see them.
How data are kept separate
How the platform keeps one organisation's data away from another's, keeps each employee's record private from colleagues, and enforces roles in the database.
Sign-in security
Why people sign in without a password, how sign-in links are protected, how join links and leavers are handled, and how single sign-on fits in.