Wellbeing data, handled with care.
Mood scores, recognitions, anonymous feedback — workplace wellbeing is some of the most sensitive data your team will ever produce. Here's exactly how we handle it.
Just enough to make the ritual work.
We collect
Daily check-in signals
Mood, energy, stress, belonging, confidence — five sliders, 1–5 each. Optional gratitude note.
We collect
Recognitions
Sender, recipient, message, optional pillar tag. Stored as written by you.
We collect
Sparks + streaks
Counters derived from your activity. No third-party tracking, no advertising IDs.
We collect
Optional profile bits
Display name, role, email (only used for auth + nudges). You can change or clear any of these.
We collect
Anonymous feedback
Stored with NO member ID. Even our database can't tell you who sent what.
We collect
Workspace metadata
Workspace name, industry, join code, billing status. Standard SaaS stuff.
The single most important thing on this page.
You (the packmate)
Sees
- All your own check-ins, mood history
- Your sparks, streaks, badges, goals
- All recognitions you've sent or received
- The pack-wide leaderboard
Doesn't see
- Other packmates' individual mood scores
- Other packmates' anonymous feedback
Pack lead (admin)
Sees
- Aggregated trust scores per pillar
- Pack-wide engagement counts
- Recognition wall (public sender + recipient)
- Early-warning flags (e.g. inactive members)
Doesn't see
- Individual mood scores
- Anonymous feedback senders
- Individual gratitude notes
Us (BetterUs)
Sees
- Aggregate, de-identified system metrics
- Customer support tickets (only if you write to us)
Doesn't see
- Anonymous feedback senders
- Individual member moods unless explicitly opted into a debug session
- Anything we'd ever sell or share
EU-hosted. Encrypted. Never trained on.
Data lives in the EU
Frankfurt region. GDPR-compliant. Backups encrypted at rest. We don't replicate to non-EU regions.
Encrypted in transit + at rest
TLS 1.3 in transit. AES-256 at rest. Database access restricted to two senior engineers, audited monthly.
No AI training, ever
Your data is never used to train any model — ours, OpenAI's, anyone's. We don't have the right to it, and we never will.
No selling, no sharing
We don't sell, license, share, or rent your data to anyone. No data brokers. No advertising partners. Full stop.
It's your data. We just look after it.
Export anytime
One click in your profile downloads everything — check-ins, recognitions, sparks history. CSV or JSON.
Delete anytime
Permanent delete request: 24-hour SLA. Backups purged within 30 days. We email a confirmation when done.
Port anywhere
GDPR Article 20 — your data, in a machine-readable format, ready to take with you. Always.
Anonymous feedback stays anonymous.
Our database doesn't store the sender's ID alongside the message. We can't identify who said what — even with a court order, we wouldn't have it. That's the architecture, by design.
Talk to a real human.
Privacy, security, GDPR, DPA requests, audit reports — write to us.
privacy@thebetterusproject.com