At a glance
The whole policy in one table — what we handle, why, and what never happens to it. The sections below give the full detail.
| Data | Why we process it | Sold or used for ads? | Kept until |
|---|---|---|---|
| Survey answers & uploaded files | Delivering results to the team that asked | Never | The programme ends or you ask for deletion |
| Contact details a survey asks for | Follow-up about that survey only — no marketing | Never | Same as the answers they came with |
| Staff account data | Sign-in, roles and the audit trail | Never | The account is deleted |
| Sign-in details from Google, Microsoft or Apple | Signing you in, matching your account, showing your picture | Never | You remove the link or delete the account |
| Technical signals on submit (IP, browser) | Bot protection and duplicate control | Never | Shortly after verification |
| Dashboard page views (staff only) | Improving the product — nothing else | Never | Aggregated; not tied to you over time |
| Visits to this website (only if you accept) | Seeing which pages help people — nothing else | Never | Cookies expire after 13 months; withdraw any time |
What we collect
If you answer a survey, submitting your response means you accept this Privacy Policy. A note under every survey's submit button says so, with a link to this page.
Depending on how you use the platform, we process:
- Survey responses — the answers you choose to submit, including any files a survey asks you to upload.
- Bot-protection signals — survey submissions are protected by Cloudflare Turnstile, which runs invisibly (there is nothing to click and no puzzle to solve) and processes technical signals such as your IP address, TLS fingerprint and browser user-agent to tell humans and bots apart. This processing is described in the Cloudflare Turnstile Privacy Addendum linked below. It sets no advertising cookies.
- Duplicate-response control — for surveys limited to one response per person, we store a technical identifier so the same person can't submit twice.
- Contact details — when a survey asks for your name, email address or phone number, those answers are also saved to a contact list, alongside which survey you answered and when, so the team running that program can reach you about it.
- Messages you send us — when you write to us through the contact page, we keep your name, email address, organisation and message, with the reference number you were shown, for 180 days, so we can answer you and find the message again if you quote the reference. A hashed version of your network address is kept with it to stop the page being used to send mail in bulk; the address itself is not stored.
- Staff account data — name, email, sign-in credentials (passwords are stored hashed, never in plain text), optional passkeys, and an audit log of administrative actions.
- Sign-in from Google, Microsoft or Apple — if you choose it, the details listed under “Signing in with Google, Microsoft or Apple” below.
- Emails — we send staff verification codes and invitations through Resend, our email delivery provider.
- Visits to this website — only if you accept analytics in the cookie notice, this website records which of its pages are viewed, with an approximate location and the type of browser and device. How that works, and how to turn it off, is set out under “Analytics on this website” below.
Signing in with Google, Microsoft or Apple
You can create an account or sign in with an account you already have at Google, Microsoft or Apple. The provider confirms who you are and sends us a small set of details. We never see your password for that account.
What each provider sends us:
- Google: your name, your email address, whether Google has verified that address, the address of your profile picture, and an identifier for your Google account.
- Microsoft: your name, your email address, an identifier for your Microsoft account and, for a work or school account, for the organisation that manages it, and signals that show whether Microsoft has verified the address. At sign-in you also allow us to read your profile and to keep that permission, so our servers can fetch your profile photo from Microsoft after you have signed in.
- Apple: your email address, or a private relay address if you choose Hide My Email; your name, which Apple sends only the first time you sign in; and an identifier for your Apple account. Apple does not provide a profile picture.
How we use sign-in details
We use these details to create your account or sign you in, to show your name and picture in the app, and to send account emails such as verification codes. We ask only for the basic sign-in permissions. We never request access to your mailbox, contacts, calendar or files, and we never post or act on your behalf at the provider.
If the email address from a provider matches an account that already exists here, we open that account only when two things are true: the provider has confirmed the address belongs to you, and the account's own address has been confirmed. Otherwise we ask you to sign in the way you did before. If you later confirm your address with an emailed code, we remove any sign-in link on that account that no one confirmed.
We store the provider's identifier for your account and the tokens it issues at sign-in. The tokens that grant access are encrypted with a key that never leaves the running application. Your profile picture itself is not stored: for Google we keep its address, and for Microsoft our servers fetch the photo when the app shows it. Your browser keeps a copy for up to one day and never contacts the provider for it.
We do not sell information from these providers, use it for advertising, or use it to train artificial intelligence systems. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Your choices with sign-in providers
Signing in this way is your choice: you can use an email code or a password instead. Each provider handles your account under its own privacy policy and may record that you signed in to us.
A provider stays linked to your account until you ask us to remove it or you delete your account. Both delete the stored tokens. You can also end the connection at the provider at any time, using the pages linked below. Your Microsoft picture then stops showing, and signing in with that provider asks for your permission again.
Your organisation manages a Microsoft work or school account and can withdraw this access too.
If you use Hide My Email with Apple, our emails reach you through Apple's relay. If you turn off forwarding for us at Apple, you will not receive verification codes, invitations or notifications.
Google: apps linked to your accountMicrosoft personal account: app permissionsMicrosoft work or school account: My AppsApple: manage apps that use Sign in with AppleGoogle API Services User Data PolicyGoogle Privacy PolicyMicrosoft Privacy StatementApple Privacy Policy
How we use your contact details
Your name, email address and phone number are used only to contact you about the survey you answered and the program it belongs to — for example to follow up on your response, confirm a place, or share a result you asked for.
They are not used for marketing. We do not send promotional messages, we do not add you to a mailing list, and we do not sell, rent, share or otherwise pass your contact details to anyone outside Jawab for their own use.
Only team members who need them can see these details, and every export of them is recorded in our audit log. You can ask us to remove your contact details at any time, whether or not you keep your survey response.
What we don't do
We do not sell or rent your data, we do not run ads, and we use no advertising trackers anywhere on the platform. Public survey pages carry no analytics at all — if you are answering a survey, nothing on that page measures you.
Usage analytics in the dashboard
Within the signed-in dashboard we measure page views in order to understand how the product is used and to improve it. This is the only purpose: it is never used for advertising, never used to build a profile of an individual, and never used to follow anyone across other websites.
What is measured is the page address visited, an approximate region derived from the network address, and the type of browser and device. Survey responses, contact details, uploaded files and anything else a workspace stores are never included.
Vercel Web Analytics performs this measurement and stores no identifier on your device. PostHog performs it in more detail and does set a cookie, and because it links what it records to the account, your name and email address are held with it. Where the operator has enabled it, Google Analytics is used in addition and also sets a cookie. This dashboard measurement is limited to the dashboard and the sign-in pages, and none of it runs on a public survey. The public website measures its own visits separately, and only with a visitor's consent — see “Analytics on this website” below.
It applies to signed-in account holders, who agree to it when they create an account or sign in — the sign-up and sign-in screens say so beside the button. If you would rather your account were not measured, you can ask us to stop at any time by writing to us through the channels under Contact below.
Analytics on this website
This website — its public pages, the help centre and these legal pages — measures nothing about your visit until you choose Accept in the cookie notice. If you choose Reject, or your browser sends a Global Privacy Control signal, neither Google Analytics nor Vercel Analytics loads, and the site works exactly the same.
Where the operator has enabled it, Google Analytics 4 (Google Ireland Limited, with Google LLC as its processor) sets two cookies on this website: _ga, which tells one browser's visits apart, and _ga_<ID>, which keeps the current session. Both expire after 13 months. Google Signals and every advertising feature are switched off, so the data is not used for advertising or linked to a Google account, and Google Analytics does not store IP addresses.
Vercel Analytics (Vercel Inc.) sets no cookies and stores nothing on your device. It counts page views using a hash of the request that is discarded within 24 hours, so it cannot recognise you on a later day.
Both services may process this data in the United States. Google LLC and Vercel Inc. are certified under the EU–U.S. Data Privacy Framework, and both use standard contractual clauses where that framework does not apply.
We measure visits to this website only on the basis of your consent (Article 6(1)(a) GDPR). You can withdraw it at any time: choose Cookie settings — in the site footer, or at the end of the help centre's menu — and then Reject. Google Analytics stops at once and its cookies are deleted; withdrawing does not affect measurement that took place before.
Your answer is kept in your browser's local storage for 12 months, after which we ask again. It is not a cookie and is never sent to us.
Where your data lives
Survey responses and account data are stored in our managed database. Files you upload are stored in our object storage. These providers process data on our behalf under their own security and privacy commitments.
Dashboard usage analytics are processed by Vercel, by PostHog in the European Union, and — where enabled — by Google. That processing covers the activity of signed-in account holders only. One event is raised when a survey receives a response: it records which workspace and when, and carries no answers, no identifier for the person who answered, and no network address. No survey response, contact detail or uploaded file is ever sent to any of them.
Measurement of this website, when a visitor accepts it, is processed by Vercel and — where enabled — by Google, as set out under “Analytics on this website” above.
Cookies
A public survey page sets no cookies at all. In the signed-in dashboard we use strictly necessary cookies — a session cookie that keeps staff signed in, a cookie that remembers your language choice, and device preferences such as reduced motion — plus PostHog's measurement cookie and, where the operator has enabled Google Analytics, its measurement cookie. Account holders agree to those two measurement cookies when they sign up or sign in.
On this website, nothing sets a measurement cookie unless you accept analytics in the cookie notice. Only then, and only where Google Analytics is enabled, does Google set its two cookies, _ga and _ga_<ID>, which expire after 13 months. Your answer to the cookie notice is kept in your browser's local storage rather than in a cookie, and the help centre remembers which sections of its menu you opened the same way; both stay on your device and are never sent to us.
There are no advertising or cross-site tracking cookies anywhere.
Retention and your rights
Responses and contact details are kept for as long as the related program needs them, then removed. You can ask us to show you, correct, or delete the responses you submitted — and the contact details saved with them — at any time. Deleting a response deletes the contact entry it created.
You can also withdraw your consent to analytics on this website at any time under Cookie settings, and ask us to stop measuring your dashboard account by writing to us (see Contact).
Security
Data is encrypted in transit (HTTPS), staff access is role-based, and administrative actions are recorded in an audit log.
Changes to this policy
If this policy changes, the "last updated" date on this page changes with it. Significant changes will be highlighted on the surveys affected by them.
Contact
If you have any questions about this page, contact the Jawab team through our official channels, or reach out to the person or programme that shared the survey with you.