Privacy

The Intelligent Wellbeing Engine is built so that an employer learns what the organisation as a whole is saying, and nothing about any one person. This page sets out what you can see as an admin, what you cannot, and why that holds.

The five-person ruleCopy Anchor Link

Every figure on the Wellbeing page, in the wellbeing report and in the wellbeing export is an anonymised average of five or more people. Below five, nothing is calculated at all, whether a score, a percentage or a count. It is a privacy guarantee, and it applies everywhere a figure could appear.

The rule is enforced in the database itself and checked by automated tests. The admin portal reads only figures that have already been combined across five or more people. It has no route to anyone's individual responses, and it shows the organisation as a whole. There is no team, department or manager view.

Your people see the same sentence that you do: all figures are anonymised averages of five or more people, individual responses are never shown, and below five no number is calculated at all.

What you can seeCopy Anchor Link

• Whole-organisation figures from the fortnightly check-in, once five or more people have answered.
• Your workforce profile from the optional About you section of the welcome survey, as anonymous shares.
• A small set of whole-organisation health figures from the optional quarterly health check-in.
• Monthly absence, turnover, holiday, participation and recognition figures for the whole organisation.
• How many people took part in a round, as a rough figure such as "X+ of Y".

What you cannot seeCopy Anchor Link

• Any individual's answer, on any screen, report, export or email.
• Any figure for a group smaller than five.
• Answers to questions about mood and anxiety, in any form, even as an average. These are removed from every employer view at the database level.
• The Your health section of the welcome survey. Those answers are never shown to an employer in any form.
• Any person's own results page, or the order of their support page.
• Who opened your standing support page. Nothing on it is tracked.

What your people are toldCopy Anchor Link

• Check-in screens never show a score, a personal trend or a comparison, and there is no free text to fill in.
• The thank-you screen and weekly tip are identical for everyone, whatever they answered.
• The two optional welcome survey sections each have their own checkbox. A person's choice is saved only when they press Continue, and it is recorded with the version of the consent wording they saw.
• The About you section tells people that you never see their individual answer, and that it is not the way to ask for an adjustment.
• The health check-in tells people that you never see their individual answers.
• The privacy and data panel in their app Settings says wellbeing data are confidential and visible only to them, that anonymous combined figures may be shared with their employer, and that individual responses are never shared.

Good to knowCopy Anchor Link

• Nobody earns coins or rewards for answering. Rewards for answering would bias the answers and put pressure on freely given consent.
• An answer cannot be counted twice, whichever device it arrives from.
• The monthly totals you can upload have no field for a person, a date of absence or a reason.

QuestionsCopy Anchor Link