Your data, your call.

The School of Play Pty Ltd, trading as The Better Us Project, is an Australian company. BetterUs Workplace is one of four products in The Better Us Project ecosystem (alongside Schools, Families and Children apps). We're the data controller for everything described in this policy.

Contact: support@theschoolofplay.co

Account data, your name, work email, your workspace name and join code.

Wellbeing signal, daily check-ins (mood, free- text reflections), recognitions sent and received, sparks earned, streak history, badges, the pillars you log activity in.

Usage telemetry, pages opened, features used, app open times, device/OS for compatibility. We use PostHog for privacy-conscious product analytics (which features get used, so we can improve them). We do not run advertising trackers.

Billing, handled by Stripe. We see plan, status, invoice ID. We never see your card details.

• Location, contacts, microphone, camera. None of it.
• Health data outside what you voluntarily share in a check-in.
• Your card details. Stripe handles payment; we store an invoice ID.
• The identity of an anonymous feedback sender. Your member ID is stripped before the message reaches the database, so the link doesn't exist for us to look up.

This is the part people most want a straight answer on, so here it is without hedging.

Only you, your written reflections: check-in notes, wrap-up entries, trust-lab journals and dream-goal contents. These are encrypted at rest and aren't shown on any leader screen.

You and your Pack Lead, your daily check-in scores. Your mood, energy, stress, belonging and confidence ratings appear next to your name on your Pack Lead's screen, for the day you submit them and as a trend over time, along with your streak, sparks and whether you checked in. This is deliberate. A leader cannot act on a number they cannot see, and noticing that someone has been running flat for a week is the entire point of a daily check-in. If you want to raise something without your name attached, use anonymous feedback below.

Your workspace, recognitions you send or receive, public badges, and anything you post to a moment. Pack and workspace insights are aggregates, and a pack view needs at least five responders before any aggregate is shown, so a small team's numbers can't be traced back to one person.

Nobody, because it isn't linked to you, anonymous feedback and pulse survey responses. Feedback has your member ID stripped before storage; pulse answers are anon-hashed at the database layer and only ever reported as counts and distributions.

Us, engineering staff have access to logs and support data only when needed to fix a bug or respond to a help request. Access is logged.

An earlier version of this policy said your Pack Lead only ever saw workspace aggregates, and that individual mood readings weren't visible to them. That was wrong. The product has always shown Pack Leads individual check-in scores next to each packmate's name, and the wording above now describes what the software actually does.

We corrected this the moment we found it during an internal audit, rather than quietly changing the page. If knowing this changes how you want to use check-ins, that is a completely reasonable response, and the anonymous feedback channel exists for exactly that reason.

Customer data is hosted in Australia (Sydney, with a Melbourne backup) via our hosting providers. Some providers operate globally for delivery, payments, and error monitoring (for example Vercel's edge network and Stripe). We do not store customer data in the EU or US as our primary region.

Data in transit is TLS-encrypted. Data at rest is AES-256 encrypted at the storage layer. Free-text reflection content is additionally encrypted at the application layer.

You can, at any time:

• Export everything we have on you, CSV or JSON, from your profile page. One click. Includes check-ins, recognitions, sparks, badges, the lot.
• Deleteyour account and all associated data. Requests are processed within 24 hours; backups are purged within 30 days; we email you a confirmation when it's done.
• Correct any inaccuracy in your account profile, directly in-app.
• Objectto specific processing, email us and we'll work it out.
• Lodge a complaint with the Office of the Australian Information Commissioner (oaic.gov.au) or your local data protection authority if you're in the EU/UK.

While your account is active, we keep your data so the product works. After you delete your account, we erase identifiable data within 30 days. Aggregated, fully anonymised stats (e.g. “average mood across all workspaces”) may be retained indefinitely for product research, this contains nothing traceable to a person.

Billing records are kept for 7 years to satisfy Australian tax law.

Admin audit logs are retained for 12 months (36 months on Enterprise).

• Vercel, web hosting and edge runtime.
• Replit, application hosting and database (Australian data region).
• Firebase (Google), real-time multiplayer infrastructure for live team games.
• Stripe, billing and subscription management.
• Resend, transactional email delivery.
• PostHog, product analytics (anonymised event stream).
• Sentry, error monitoring (PII masked by default).
• OpenAI, powers optional AI features. When a Pack Lead asks for coaching suggestions we send first names alongside numeric check-in scores and trends, plus workspace counts. We never send your written reflections, check-in notes or recognition free-text, and your data is never used to train any model.

We'll update this list before adding any new subprocessor. For Enterprise customers we provide a Data Processing Agreement (DPA) covering all of the above , request a DPA.

We use a small number of essential cookies, for keeping you signed in, remembering your dark-mode preference, and keeping your session secure. We don't set advertising or third-party analytics cookies. Stripe sets its own cookies during checkout for fraud prevention (their privacy policy applies on checkout pages).

BetterUs Workplace is for adults at work. It's not intended for under-16s. The Better Us Project Children app is built separately under stricter rules and isn't part of this policy.

We'll email all admin users at least 30 days before any material change. Routine clarifications get a “Last updated” bump above and a note at the bottom.

Questions? Concerns? Want to talk through how we handle a specific scenario in your workspace? We answer every email ourselves , support@theschoolofplay.co.