Privacy
Privacy, by architecture.
Most privacy pages are promises. This is how the system is built.
What is kept
Eight pathway scores and your conversations with the coach, stored under a handle you choose.
What is never collected
Real name, work email, location, IP, device identifiers. Your employer does not give us a list of you.
What the organization sees
Only patterns across at least six people. The organization never sees who you are, never an individual answer, never a guess.
The six-person floor, as architecture
The dashboard's data layer is a function that refuses to return any aggregate computed from fewer than six participants. It is not a setting that can be flipped. It is how the system is built.
Real consent
Before your baseline, you actively agree. Nothing is pre-ticked. The agreement names what is stored and why, in plain language.
See and delete
You can view everything held about you and delete it in one action, any time.
Data minimization
Only your scores and your coach conversation. Nothing more.
Security
Encrypted in transit and at rest. No human at your organization reads individual conversations. No human at our organization reads them as a matter of course.
Not sold, not shared
Your individual answers are not sold and not shared with advertisers or third parties.
Forming-tense candor
A reading for reflection, not a diagnosis. The instrument is early and being validated. We will keep saying so until that is no longer true.
The measure underneath this is an open standard, free for anyone to use, and lives at thrivability.ai. We do not own how flourishing gets measured. We built one good way to do it.