Privacy and deletion
This MVP is designed to work without an account and without retaining your assessment after the active browser session ends.
What this MVP does today
- No account is required.
- No employer or manager access.
- No cookies are used for assessment state.
- No localStorage assessment persistence.
- No database persistence.
- No Supabase.
- Limited, anonymous product-usage analytics are collected (see “Usage analytics” below).
- Your answers live only in active, in-memory application state.
- Refreshing or closing the active session may restart the review.
- “Start over” clears the active assessment state.
- No raw calendar data exists, because Outlook is not enabled.
- No payment or paid-report data is collected in the current implementation.
In-memory state is cleared when you start over or the session ends. This is not a guarantee of secure deletion from device memory or browser internals.
Usage analytics
Your questionnaire answers and calculated results stay in your browser and are not sent to analytics. Separately, HealthIT IQ collects a small, fixed set of anonymous usage events to understand where people progress or stop.
- Usage events cover product actions only — for example: starting the review, reaching a question, completing a question, viewing results, selecting a share action, or opening the illustrative sample.
- Usage events never include your questionnaire answers, calculated results, workload level, ticket information, reflection content, employer, or the contents of the PDF.
- Anonymous browser and session identifiers are used only for aggregate measurement. They are not linked to your name, email, or an account, and are not shown in the interface.
- As with any website, our analytics provider necessarily receives ordinary network metadata (such as your IP address and browser type) to receive an event. This metadata is not combined with your questionnaire answers.
- The illustrative Workload Conversation Prep sample is a common example and remains unrelated to your answers.
In short: no questionnaire content is collected; only limited product-usage analytics are.
Information not collected
- Employer name
- Manager name
- Patient information
- Ticket descriptions
- Workplace-dispute narratives
- Medical history
- Mental-health diagnosis
- Disability information
- Calendar subjects
- Attendee names
- Email addresses
- Locations
- Join URLs
- Attachments
Paid report
- The $9 offer is currently an inactive demand-test surface.
- Payment and fulfilment are not enabled.
- No paid-report information is collected.
- A legal and privacy review is required before accepting the first paid report.
Future connected-calendar processing
Future intended behaviour — not enabled in this MVP.Connected calendar data would be processed temporarily into aggregate values, and raw calendar content would be discarded after processing.
- Account-less access tokens would be discarded after aggregate processing.
- No refresh token would be retained without explicit account creation and consent.
- The Microsoft Graph field set remains unverified.
- Restrictive enterprise tenants may block access.
Retention period
Paid-report retention has not yet been finalised. Paid checkout and fulfilment must remain disabled until a specific retention period, access controls, and deletion process are approved.
This is separate from the current free manual flow, which does not persist your assessment answers.
Deletion
- “Start over” clears the active review state.
- Closing or refreshing may end the in-memory session.
- No account or stored assessment record currently exists to delete.
The product would provide:
- A clear deletion request method.
- Deletion confirmation.
- Immediate deletion of any connected access token.
- Deletion of retained data within the approved retention period.
See also How the workload review works.