0 to 90 days
Responses remain linked only for private dashboard trends and employee-controlled erasure.
Privacy lifecycle
How MindSafe forgets safely.
Personal check-ins are only linked long enough to power private insight. Long-term reporting keeps patterns, not identities.
90 days onward
The link to the employee and source token is severed. Aggregate trend data can remain without identity.
Immediate erasure
Employees can erase from their private dashboard. HR can offboard and purge from the admin workspace.
Audit trail
Lifecycle actions append non-identifying audit records with counts and timestamps. The audit log is append-only, so erasure events can be proved without keeping personal response links.