Privacy and ethics
Your institution sees groups, never individuals.
The privacy and ethics rules behind every Glim deployment, in plain words, so your data privacy officer, guidance head or HR director can check them before anyone answers.
- Group totals only
- Reports show totals for each level of your structure. Answers are never linked to names in any report, export or screen your institution receives.
- No group under 5
- Any group with fewer than 5 answers is merged into "Other groups" at its level. If the merged group is still under 5, only the number who answered is shown. Written answers never appear in group results.
- Individual results only by choice
- For schools, and for quizzes that are not about mental health, the join screen may ask a person whether to share their own result with you. It is shared only if they say yes, and they can see exactly who receives it. Workplaces and government never see individual wellbeing results.
- Reach-out is the person's choice
- Anyone can ask your named support contact to reach out. Only their name and the contact details they type are shared, never their answers or reading. Your managers see these requests; viewers never do.
- Learners under 18
- Deployments for minors ask for a parent or guardian's consent and the learner's own agreement before the first question.
- Consent and the Data Privacy Act
- Health information is sensitive personal information under RA 10173. Each person is told what is collected and why, and agrees before answering. Your institution remains the personal information controller for the deployment; Glim processes on your instructions under a data sharing or processing agreement.
- National Privacy Commission
- Registration with the National Privacy Commission is in progress.
- Supervised by a licensed psychologist
- Reports are prepared under the supervision of Riyan Portuguez, RPsy, PRC license no. 0001183, as the Philippine Psychology Act (RA 10029) requires for assessment used by institutions.
- When someone may be in danger
- Any answer that points to risk shows crisis lines to that person right away, including the NCMH Crisis Hotline 1553. Institutions see risk only as counts in the group report. We disclose identifying information only where a life is at imminent risk or the law requires it, as RA 11036 allows.
- Retention and deletion
- Group reports stay available for your agreement period. Readings never claimed by an account are deleted three years after they were taken. You can ask us to delete a deployment's data at the end of your agreement.
These rules sit on top of Glim's Privacy Notice and Terms of Use. Sources: RA 10173, RA 10029, RA 11036.