Privacy and your data

What stays private, the three Team Health sharing levels, how to export your data, and how to delete your account.

Onward asks you to record mood, energy, and reflections next to your work. That only works if you know exactly where that data goes. This page is the answer.

Settings for all of it live at Settings → Privacy.

What is always private

The following is visible only to you, at every sharing level, with no setting that exposes it:

  • Journal entries and wellness reflections
  • Gratitude entries
  • Energy check-in notes
  • Focus session notes and your answers to "What got in the way?"
  • Your daily plan in Plan My Day
  • Your adaptive interface mode and appearance theme

Your free text is never surfaced to teammates, summarised for them, or included in a Team Health digest.

Team Health sharing levels

If you're in a multi-person workspace using Team Health, you choose what your wellbeing data contributes. There are three levels:

Level What your workspace sees
No sharing Nothing. You're excluded from Team Health aggregates entirely.
Basic — counts only Counts of participation, without underlying detail
Detailed — full participation Your full contribution to aggregated team signals

Even at Detailed, Team Health shows aggregated signals — never your journal, never your individual entries as raw text.

Choosing No sharing is a legitimate, fully supported choice. It doesn't disable any feature for you personally; you keep the entire wellness dashboard, and your data simply stays out of the team view.

How to think about the choice

Team Health exists to catch workload problems before they become resignations, and it needs enough participation to be meaningful. But it's only honest if opting out is real. If you're unsure, Basic is a reasonable middle: your team gets a sense of participation without your specifics.

If you're a workspace admin, pushing individuals toward Detailed undermines the data you'd get — people who feel monitored stop logging honestly, and an inaccurate wellbeing signal is worse than none.

Task and project visibility

Separate from wellness sharing, individual tasks have their own visibility controls in the task details drawer, and projects are shared explicitly. Changing your Team Health sharing level has no effect on who can see your tasks.

Exporting your data

Settings → Privacy → Export Your Data → Request Data Export.

Worth doing before you delete your account, before a plan change, or just periodically if you've been journaling for a while and want your own copy.

Deleting your account

Settings → Privacy → Delete Your Account → Permanently Delete Account.

This is permanent. Export first if you want anything kept — you can't export afterwards.

If you own a workspace with other members, transfer ownership before deleting so your teammates don't lose access. Leaving a workspace and deleting your account are different actions; see Account, login, and appearance.

Common questions

Can my manager read my journal entries?

No. Journal, gratitude, reflection text, and check-in notes are private to you at every sharing level, including Detailed — full participation.

If I choose No sharing, do I lose features?

No. Your wellness dashboard, habits, routines, and focus check-ins all work exactly the same. You're simply excluded from team aggregates.

Can an admin change my sharing level for me?

Your sharing level is yours, set under your own Settings → Privacy.

What does Team Health actually show about me?

Aggregated signals at the level you've chosen — counts at Basic, fuller participation at Detailed — and never raw journal or reflection text. See Team Health and Team Boosts.

How do I get a copy of my data?

Settings → Privacy → Request Data Export.

Is deleting my account reversible?

No. Export your data first.