How your data is handled
The work people do here is personal. This is exactly who can see it and how it's protected.
Who can see your work
- Only a mentee and their coach can see that mentee's answers, Map, wins, assessment, reps, artifacts, and career details.
- Career details are the mentee's to edit, and theirs to leave blank. A coach can read them but cannot change them.
- Where more than one coach works here, only the coach assigned to a mentee can open their work.
- No mentee can see another mentee’s data. Every request is scoped to the signed-in person and checked on the server — not just hidden in the interface.
- There is no public profile, directory, or sharing — this is a private portal.
How it's protected
- Passwords are stored only as bcrypt hashes — never in plain text.
- Your session is an encrypted, http-only cookie (it can’t be read by scripts).
- In production the app is served over HTTPS, and the database is hosted with encryption at rest.
- Every read and write is access-controlled on the server by who you’re signed in as.
What we don't do
- No third-party analytics or ad trackers run on these pages.
- Your reflections are never used to train anything or sold to anyone.
- No files are uploaded — evidence artifacts are just links you choose to add.
Your data is yours
A mentee can request an export or deletion of their data at any time. A one-file workbook export is on the roadmap.