Privacy Policy
Working draft — pending final legal review before public launch (see BLOCKERS B-7).
What we collect
Account data (email, password hash, language), your questionnaire answers, score events, evidence files you choose to upload, consent records and technical logs. We collect the minimum needed to operate the score and nothing else.
How it is protected
Passwords are hashed with Argon2id. Sessions use HttpOnly secure cookies or secure mobile storage. Evidence is stored in private storage and served only through short-lived signed links to authorized reviewers. Every privileged access is written to an audit log.
Your rights
You can export your data, request correction, revoke any optional consent at any time, and request deletion of your account from Settings. Aggregate statistics never include you without your explicit consent and are suppressed below minimum participant thresholds.