hum ← Back to hum

Privacy Policy

Hum is a daily wellbeing practice. What you record is private to you. We keep the least we can, store it in the UK, and let you export or delete everything at any time.

Who we are

Hum (“we”, “us”) provides a workplace wellbeing app for employees, and anonymous, aggregated wellbeing trends for the employers who offer it. For the personal data described here, we are the data controller. You can contact us at maria.gilani@gmail.com.

The short version

• Your check-ins, reflections and scores are private to you. Your employer can never see anything with your name on it.
• Employers only ever see anonymous, grouped trends — and never for any group smaller than ten people.
• Wellbeing data is sensitive, so we collect the minimum needed to run the app.
• Everything is stored in the United Kingdom (AWS London region).
• You can export or delete all of your data from inside the app at any time.
• No ads, no tracking across other apps or websites, no selling your data — ever.

What we collect, and why

Data	Why we hold it
Email address	To create your account and sign you in securely (via Amazon Cognito).
Daily check-ins (your five-point response, and any private note you add)	To run your daily practice and show you your own trend over time. Notes are for your eyes only.
Practice completions	To rotate practices sensibly and avoid repeating them too soon.
WHO-5 responses (the optional weekly wellbeing check)	To show your personal wellbeing index over time. The WHO-5 is a wellbeing index, not a clinical or diagnostic test.
Consent record	To record that you agreed to this policy, and which version.
A pseudonymous account ID	A random identifier that links the above to your account without needing your name.

We do not collect your name, phone number, postal address, location, contacts, photos, or any advertising identifier. We do not use third-party analytics or tracking SDKs.

Special-category (health) data

Wellbeing information is “special-category” data under the UK GDPR (Article 9). We process it only with your explicit consent, which you give at first run and can withdraw at any time by deleting your data. Our lawful bases are your consent (Article 6(1)(a)) together with explicit consent for the health element (Article 9(2)(a)).

What your employer can and cannot see

This is the heart of Hum, so we are precise about it:

• Employers never see your check-ins, notes, scores, or anything identifying you.
• Employers only see aggregated trends for a whole group — for example, an average wellbeing index and a response rate.
• Aggregates are only ever produced for groups of ten or more people, and small groups are suppressed. This limit is enforced in our systems, not just hidden in a screen.
• Individual data and employer aggregates are held in separate systems so there is no path from a trend back to a person.

Where your data lives

All personal data is stored and processed in the United Kingdom, on Amazon Web Services in the London (eu-west-2) region. Data is encrypted in transit (HTTPS) and at rest. We use AWS as our data processor under appropriate data-protection terms.

How long we keep it

We keep your data for as long as your account is active. When you delete your account, your personal data is erased from our live systems promptly, and removed from routine backups within the normal backup cycle (up to 35 days). Aggregated, anonymous trends are not personal data and may be retained.

Your rights

Under UK GDPR you can access, correct, export, restrict, object to, or delete your personal data, and withdraw consent at any time. Two of these are built directly into the app:

• Export — You → Export my data downloads a copy of your data as a JSON file.
• Erase — You → Delete everything permanently deletes your account and all of its data.

For any other request, contact us at maria.gilani@gmail.com. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Notifications

If you allow it, the app schedules a single gentle daily reminder as a local notification on your device. This does not send any data to us. You can turn it off in your device settings, and declining it does not affect the app.

Children

Hum is intended for adults in a workplace setting and is not directed at children under 16.

Not a medical service

Hum is a wellbeing companion, not a medical device. It does not diagnose, screen, or treat any condition. If you are struggling, the in-app Support screen always shows how to reach real help.

Changes to this policy

If we make material changes, we will update the version and date above and, where appropriate, ask you to review the policy again in the app.