How do you handle privacy and compliance?

The default is the policy. By default, no individual user data is shared with managers or admins. They see aggregate only. The individual owns the primary view of their granular data, and they can choose, in the app, at any time, to share any or all of it. They can revoke that sharing the same way, and revocation is immediate.

Sharing is per-user and per-data-element. It is never bulk, never automatic, and never implied by enrollment. The learning paired with the signal follows the same rule. This is the same architecture the most trusted consumer devices use, applied to the enterprise, where nobody else has.