Security

Accounts and sign-in. There are no passwords. Signing in uses a code sent to your work email, which removes the whole category of risks that come with stored, reused or leaked passwords. Accounts can be deactivated instantly by an administrator.

Separation between organizations. Every row of your data - members, questions, survey answers, games - is tagged to your organization and enforced at the database level with row-level security, not merely filtered in application code.

Who can see survey answers. Administrators and leaders in your own organization can see survey responses.

Payments. Card details are handled entirely by Stripe and never touch our servers. We store no card numbers.

AI processing. Game questions are generated by an LLM. Survey answers and player names are sent to that LLM at the moment questions are generated. Data is not used to train models.

Reporting a problem. If you believe you have found a security issue, please contact us through our support page with enough detail to reproduce it. We will acknowledge it and will not pursue anyone who reports in good faith and does not access other people’s data.