Plain English
Privacy & data
What we collect, who can see it, how AI is used, and when it's deleted. We describe only what the product actually does.
Draft. This page will be reviewed before the service opens to everyone.
Who we are
Feedback Assist is a free service run by Benjamin T. Cooke, an individual based in Abu Dhabi, United Arab Emirates. You can contact us about privacy at privacy@feedbackassist.ae.
What we collect
From Feedback Seekers
Your name and email, and if you choose, a photo, job title and organisation. The names, emails, perspectives and languages of the people you invite. Your mentor's name and email, your personal note, your target date and, if you write one, your self-reflection.
From mentors
Your name and email, your comments on the circle, your edits to the summary and your note to the Seeker.
From contributors
Your name and email, as given by the Seeker, and your preferred language. Your answers, and a reason if you choose to give one when declining. You never need an account.
Our promise to contributors
Every contributor sees this before they write anything.
It's anonymous and bundled.
Your name is removed and your feedback is combined with everyone else's.
The mentor reads it as written.
The Seeker's mentor sees all the feedback exactly as you wrote it, and which part of the circle each comment came from, but not who wrote it.
The Seeker gets a summary.
Their report is a summary of everyone's feedback, focused on the key themes. It may include positive things you've said, quoted word for word.
How a response is separated from its writer
While you write, your answers are saved as a draft linked to your invitation, so you can come back to it. When you submit, in a single step, the draft is deleted and your answers are stored with no link to you, no precise time and a random reference. Nothing afterwards can connect them to you, because the link no longer exists.
This also means that once you've submitted, we can't find your response to show, export or delete it for you. It's deleted with the rest of the round's raw feedback.
What the Seeker and mentor can see about you
They can see whether each person is outstanding or done, so they can send reminders. Taking part and declining look the same. They can't see whether you declined, when you finished, or which comments are yours.
If you ask us to stop reminding you, you still appear as outstanding.
What the mentor sees about each comment
The mentor reads every comment exactly as written, without names. Each comment shows which of the four groups it came from: the Seeker's leaders, their peers, their team, or people outside their organisation. This helps the mentor read feedback in context.
Where a group has only two or three people, the mentor may be able to guess who wrote a comment. We tell contributors this before they write. The mentor is asked not to try to work it out, and which group a comment came from is never passed on to the Seeker.
The Seeker's summary names a group only when at least three people in it responded, at least two-thirds of them raised the same point, and few others in the circle did.
Sharing your comments with your name
Feedback is anonymous by default. On the last step, a contributor can choose to share their comments with the Seeker in full, with their name. The box is never ticked for them, and it isn't remembered from one round to the next.
If they tick it, everything they wrote appears word for word under their name, in a separate section at the end of the Seeker's summary, after the mentor has read it. Their comments still go into the anonymous themes as well. For that section only, we keep a copy of their name, encrypted, with their response.
If they don't tick it, nothing changes: their response has no link to them. The Seeker and mentor can't see who chose not to share.
Who sees what
Exactly what each person in a round can see. It's the same table as on How it works.
| Information | Seeker | Mentor | Contributor | Platform staff |
|---|---|---|---|---|
| Names, emails and perspectives of the people in the circle | Yes | Yes | No | NoNo admin screen for reading rounds |
| Who the Seeker expects to challenge them | Not recorded | Not recorded | No | No |
| The Seeker's confirmation that challenging voices are included (yes or no) | Yes | Yes | No | No |
| How many have responded, and how many are outstanding | Yes | Yes | No | No |
| Which people are outstanding or done (taking part and declining look the same, with no times) | Yes | Yes | No | No |
| Whether someone declined rather than took part | No | No | Their own only | No |
| Comments, exactly as written | No | YesWithout names | Their own onlyUntil they submit | No |
| Who wrote which comment | NoUnless they chose to share their name | NoUnless they chose to share their name | Not applicable | No |
| Comments shared in full, with a name, by a contributor who chose to | YesWhen the summary is released | YesBefore the summary is released | Their own onlyTheir own choice | No |
| Positive quotes from any question, word for word, approved by the mentor | Yes | Yes | Not applicable | No |
| Critical or development comments, word for word | NoParaphrased themes only | Yes | Not applicable | No |
| Which perspective a comment came from | NoOnly in report themes, under strict rules | YesA tag on each comment, never passed on to the Seeker | Not applicable | No |
| The mentor's draft report and AI versions | No | Yes | No | No |
| The final summary | Yes | Yes | No | No |
Names, emails and perspectives of the people in the circle
- Seeker
- Yes
- Mentor
- Yes
- Contributor
- No
- Platform staff
- NoNo admin screen for reading rounds
Who the Seeker expects to challenge them
- Seeker
- Not recorded
- Mentor
- Not recorded
- Contributor
- No
- Platform staff
- No
The Seeker's confirmation that challenging voices are included (yes or no)
- Seeker
- Yes
- Mentor
- Yes
- Contributor
- No
- Platform staff
- No
How many have responded, and how many are outstanding
- Seeker
- Yes
- Mentor
- Yes
- Contributor
- No
- Platform staff
- No
Which people are outstanding or done (taking part and declining look the same, with no times)
- Seeker
- Yes
- Mentor
- Yes
- Contributor
- No
- Platform staff
- No
Whether someone declined rather than took part
- Seeker
- No
- Mentor
- No
- Contributor
- Their own only
- Platform staff
- No
Comments, exactly as written
- Seeker
- No
- Mentor
- YesWithout names
- Contributor
- Their own onlyUntil they submit
- Platform staff
- No
Who wrote which comment
- Seeker
- NoUnless they chose to share their name
- Mentor
- NoUnless they chose to share their name
- Contributor
- Not applicable
- Platform staff
- No
Comments shared in full, with a name, by a contributor who chose to
- Seeker
- YesWhen the summary is released
- Mentor
- YesBefore the summary is released
- Contributor
- Their own onlyTheir own choice
- Platform staff
- No
Positive quotes from any question, word for word, approved by the mentor
- Seeker
- Yes
- Mentor
- Yes
- Contributor
- Not applicable
- Platform staff
- No
Critical or development comments, word for word
- Seeker
- NoParaphrased themes only
- Mentor
- Yes
- Contributor
- Not applicable
- Platform staff
- No
Which perspective a comment came from
- Seeker
- NoOnly in report themes, under strict rules
- Mentor
- YesA tag on each comment, never passed on to the Seeker
- Contributor
- Not applicable
- Platform staff
- No
The mentor's draft report and AI versions
- Seeker
- No
- Mentor
- Yes
- Contributor
- No
- Platform staff
- No
The final summary
- Seeker
- Yes
- Mentor
- Yes
- Contributor
- No
- Platform staff
- No
Platform staff: there is no screen for reading rounds, and we don't access round data in normal operation. Whoever runs the service could still reach stored data technically, so our Privacy page explains how that risk is handled.
How AI is used
We use Google's Gemini API, on a paid plan, to suggest follow-up questions when a contributor reviews their answers, to sort pasted notes into the questions, to flag harmful comments, to translate comments for the mentor, and to group comments into themes and draft the summary.
On the paid plan, Google doesn't use this content to train its models. We never use Google's free tier, where it might.
Google may process this content outside your country. Google may keep it for a limited time to detect abuse.
AI never decides on its own: the mentor reads every comment and approves the summary before the Seeker sees it.
How long we keep it
- Contributors' drafts: deleted when they submit, or when the round stops collecting. Drafts are never kept.
- Raw feedback, AI working data and the links between themes and comments: deleted 30 days after the round is marked complete, or 90 days after the summary is released if it never is. The 30 days can be set anywhere from 7 to 90.
- Backups: deleted data is removed from backups within 30 days.
- The final summary: kept for the Seeker and mentor until they delete it.
- Accounts: deleting your account removes your rounds and summaries and deletes raw feedback straight away. A mentor deleting their account doesn't delete a Seeker's summary.
Encryption and logs
Data is encrypted in transit and in our database. Contributors' answers, drafts and self-reflections are also encrypted separately, with a key for each round that is held outside the database.
Each round's feedback is encrypted with its own key, kept apart from the database in storage that keeps no backups. When the raw feedback is deleted, that key is destroyed for good, so copies still in database backups can never be read again.
Our logs and error reports never contain what anyone writes.
What we can't rule out
We've designed Feedback Assist so that no one in a round can link comments to the people who wrote them. There is one limit we want to be open about. Whoever operates the service has technical access to its systems, and could in theory compare when a contributor's status changed with when a response appeared, using backups or request logs.
Our protection against that is policy and deletion, not technology: there is no admin screen for reading rounds, we don't access round data in normal operation, and raw feedback and its keys are destroyed on schedule.
Your rights
We follow the principles of the GDPR and the UAE Personal Data Protection Law.
If you have an account, you can see, export and delete your data from your account at any time.
Anyone can email privacy@feedbackassist.ae to ask what we hold about them, to correct it, or to have it deleted. As explained above, a submitted response can't be traced to you, so it can't be singled out.
You can also complain to the data protection authority where you live.