private by designfor every employeeand every report

Counselling and coaching live in the Care tab, locked with the employee’s own four-digit Care PIN, or Face ID and fingerprint where the phone supports it. The PIN stays on the device and is never sent to our servers. Care locks again when the app has been in the background.

Employers never see who booked counselling, what was discussed or which issues came up. Counsellors’ clinical notes are encrypted and readable only by the counsellor who wrote them.

Reports show totals such as utilisation, sessions and wellbeing trends. Any group smaller than five people is hidden, so no number can point to an individual.

An employee gives consent in the app before counselling starts. Sessions, chat and homework stay closed until they do, while crisis help never waits for it.

“Need help” opens without the Care PIN and outside every lock. The crisis support directory is always on and is one of the services HR cannot switch off.

A master admin plus separate admin roles. Access can be provisioned and revoked, limited to the locations an admin is responsible for, and capped by spend.

From the privacy centre in the app, employees can download a copy of their own data or ask for their account and data to be deleted.