Skip to main content
Prototype · fake data · nothing is saved or sent · Start here · All prototype screens
Feedback Assist

Plain English

Privacy & data

What we collect, who can see it, how AI is used, and when it's deleted. We describe only what the product actually does.

Draft. This page will be reviewed before the service opens to everyone.

Who we are

Feedback Assist is a free service run by Benjamin T. Cooke, an individual based in Abu Dhabi, United Arab Emirates. You can contact us about privacy at privacy@feedbackassist.ae.

Benjamin T. Cooke on LinkedIn

What we collect

From Feedback Seekers

Your name and email, and if you choose, a photo, job title and organisation. The names, emails, perspectives and languages of the people you invite. Your mentor's name and email, your personal note, your target date and, if you write one, your self-reflection.

From mentors

Your name and email, your comments on the circle, your edits to the summary and your note to the Seeker.

From contributors

Your name and email, as given by the Seeker, and your preferred language. Your answers, and a reason if you choose to give one when declining. You never need an account.

Our promise to contributors

Every contributor sees this before they write anything.

  1. It's anonymous and bundled.

    Your name is removed and your feedback is combined with everyone else's.

  2. The mentor reads it as written.

    The Seeker's mentor sees all the feedback exactly as you wrote it, and which part of the circle each comment came from, but not who wrote it.

  3. The Seeker gets a summary.

    Their report is a summary of everyone's feedback, focused on the key themes. It may include positive things you've said, quoted word for word.

How a response is separated from its writer

While you write, your answers are saved as a draft linked to your invitation, so you can come back to it. When you submit, in a single step, the draft is deleted and your answers are stored with no link to you, no precise time and a random reference. Nothing afterwards can connect them to you, because the link no longer exists.

This also means that once you've submitted, we can't find your response to show, export or delete it for you. It's deleted with the rest of the round's raw feedback.

What the Seeker and mentor can see about you

They can see whether each person is outstanding or done, so they can send reminders. Taking part and declining look the same. They can't see whether you declined, when you finished, or which comments are yours.

If you ask us to stop reminding you, you still appear as outstanding.

What the mentor sees about each comment

The mentor reads every comment exactly as written, without names. Each comment shows which of the four groups it came from: the Seeker's leaders, their peers, their team, or people outside their organisation. This helps the mentor read feedback in context.

Where a group has only two or three people, the mentor may be able to guess who wrote a comment. We tell contributors this before they write. The mentor is asked not to try to work it out, and which group a comment came from is never passed on to the Seeker.

The Seeker's summary names a group only when at least three people in it responded, at least two-thirds of them raised the same point, and few others in the circle did.

Sharing your comments with your name

Feedback is anonymous by default. On the last step, a contributor can choose to share their comments with the Seeker in full, with their name. The box is never ticked for them, and it isn't remembered from one round to the next.

If they tick it, everything they wrote appears word for word under their name, in a separate section at the end of the Seeker's summary, after the mentor has read it. Their comments still go into the anonymous themes as well. For that section only, we keep a copy of their name, encrypted, with their response.

If they don't tick it, nothing changes: their response has no link to them. The Seeker and mentor can't see who chose not to share.

Who sees what

Exactly what each person in a round can see. It's the same table as on How it works.

  • Names, emails and perspectives of the people in the circle

    Seeker
    Yes
    Mentor
    Yes
    Contributor
    No
    Platform staff
    NoNo admin screen for reading rounds
  • Who the Seeker expects to challenge them

    Seeker
    Not recorded
    Mentor
    Not recorded
    Contributor
    No
    Platform staff
    No
  • The Seeker's confirmation that challenging voices are included (yes or no)

    Seeker
    Yes
    Mentor
    Yes
    Contributor
    No
    Platform staff
    No
  • How many have responded, and how many are outstanding

    Seeker
    Yes
    Mentor
    Yes
    Contributor
    No
    Platform staff
    No
  • Which people are outstanding or done (taking part and declining look the same, with no times)

    Seeker
    Yes
    Mentor
    Yes
    Contributor
    No
    Platform staff
    No
  • Whether someone declined rather than took part

    Seeker
    No
    Mentor
    No
    Contributor
    Their own only
    Platform staff
    No
  • Comments, exactly as written

    Seeker
    No
    Mentor
    YesWithout names
    Contributor
    Their own onlyUntil they submit
    Platform staff
    No
  • Who wrote which comment

    Seeker
    NoUnless they chose to share their name
    Mentor
    NoUnless they chose to share their name
    Contributor
    Not applicable
    Platform staff
    No
  • Comments shared in full, with a name, by a contributor who chose to

    Seeker
    YesWhen the summary is released
    Mentor
    YesBefore the summary is released
    Contributor
    Their own onlyTheir own choice
    Platform staff
    No
  • Positive quotes from any question, word for word, approved by the mentor

    Seeker
    Yes
    Mentor
    Yes
    Contributor
    Not applicable
    Platform staff
    No
  • Critical or development comments, word for word

    Seeker
    NoParaphrased themes only
    Mentor
    Yes
    Contributor
    Not applicable
    Platform staff
    No
  • Which perspective a comment came from

    Seeker
    NoOnly in report themes, under strict rules
    Mentor
    YesA tag on each comment, never passed on to the Seeker
    Contributor
    Not applicable
    Platform staff
    No
  • The mentor's draft report and AI versions

    Seeker
    No
    Mentor
    Yes
    Contributor
    No
    Platform staff
    No
  • The final summary

    Seeker
    Yes
    Mentor
    Yes
    Contributor
    No
    Platform staff
    No

Platform staff: there is no screen for reading rounds, and we don't access round data in normal operation. Whoever runs the service could still reach stored data technically, so our Privacy page explains how that risk is handled.

How AI is used

We use Google's Gemini API, on a paid plan, to suggest follow-up questions when a contributor reviews their answers, to sort pasted notes into the questions, to flag harmful comments, to translate comments for the mentor, and to group comments into themes and draft the summary.

On the paid plan, Google doesn't use this content to train its models. We never use Google's free tier, where it might.

Google may process this content outside your country. Google may keep it for a limited time to detect abuse.

AI never decides on its own: the mentor reads every comment and approves the summary before the Seeker sees it.

How long we keep it

  • Contributors' drafts: deleted when they submit, or when the round stops collecting. Drafts are never kept.
  • Raw feedback, AI working data and the links between themes and comments: deleted 30 days after the round is marked complete, or 90 days after the summary is released if it never is. The 30 days can be set anywhere from 7 to 90.
  • Backups: deleted data is removed from backups within 30 days.
  • The final summary: kept for the Seeker and mentor until they delete it.
  • Accounts: deleting your account removes your rounds and summaries and deletes raw feedback straight away. A mentor deleting their account doesn't delete a Seeker's summary.

Encryption and logs

Data is encrypted in transit and in our database. Contributors' answers, drafts and self-reflections are also encrypted separately, with a key for each round that is held outside the database.

Each round's feedback is encrypted with its own key, kept apart from the database in storage that keeps no backups. When the raw feedback is deleted, that key is destroyed for good, so copies still in database backups can never be read again.

Our logs and error reports never contain what anyone writes.

What we can't rule out

We've designed Feedback Assist so that no one in a round can link comments to the people who wrote them. There is one limit we want to be open about. Whoever operates the service has technical access to its systems, and could in theory compare when a contributor's status changed with when a response appeared, using backups or request logs.

Our protection against that is policy and deletion, not technology: there is no admin screen for reading rounds, we don't access round data in normal operation, and raw feedback and its keys are destroyed on schedule.

Your rights

We follow the principles of the GDPR and the UAE Personal Data Protection Law.

If you have an account, you can see, export and delete your data from your account at any time.

Anyone can email privacy@feedbackassist.ae to ask what we hold about them, to correct it, or to have it deleted. As explained above, a submitted response can't be traced to you, so it can't be singled out.

You can also complain to the data protection authority where you live.

Cookies and analytics

We use only the cookies the service needs: to keep you signed in, and to remember your language and theme. We don't use analytics or any tracking.

If we change how we handle data, we'll update this page and tell account holders about significant changes.