Privacy Policy
Twentyfifty Data Collection ("we", "us") is a platform that organisations use to design surveys and assessments, collect responses in the field, review the results and analyse them. This policy explains what personal information we handle, why, who we share it with, and the choices you have. It covers our website, web dashboard and mobile apps.
1. Two roles: our users and the people they survey
We handle information in two different ways:
- Account holders (organisation administrators, project managers, reviewers and field researchers). We decide how your account information is used, and we are the controller of it.
- People who take part in surveys (respondents). Survey content is collected by a researcher on behalf of the organisation running the assessment. That organisation decides what is collected and why, and we process it on its behalf. If you are a respondent, please direct questions about a specific survey to the organisation or researcher who surveyed you.
2. Information we collect
Account information
Name, email address, password (stored hashed, never in plain text), preferred language, and, if you provide them, phone number, job title, postal address, date of birth, gender and profile image. We also record your organisation and role.
Survey and assessment data
Depending on how an assessment is set up, researchers may record: answers to questions (text, numbers, dates, selected options); audio recordings, voice notes and file attachments; researcher notes and reflections; GPS coordinates, country, region and village or town of the response; and, for group responses, the group size and male and female counts. Some of this can identify a person, and some may be sensitive depending on the assessment topic. Organisations should only collect what they have a lawful basis and any needed consent to collect.
Documents you upload
If you upload documents to your profile, we store the file and its description. Documents may be checked by an automated text and image analysis service to help verify them.
Technical and security information
Sign-in history including IP address and time, session and refresh-token records used to keep you signed in securely, and, if you enable notifications on a mobile device, a push notification token.
Support and privacy requests
Messages, diagnostics and screenshots you send when reporting a problem, and the name, email and reason you give when you request deletion of your data.
Client and organisation contacts
Organisations can record contact details for their clients (contact name, email, phone). The organisation is responsible for having the right to share this.
3. How we use information
- To create and secure accounts, verify your email or phone number, and sign you in.
- To run the service: assign researchers to assessments, collect and review responses, and produce charts, maps, exports and insights.
- To send service messages such as invitations, password resets, review and assignment notifications, and push notifications.
- To respond to support reports and privacy requests.
- To monitor errors, prevent misuse and keep the service reliable and secure.
We do not sell personal information, and we do not use it for advertising.
4. AI-generated insights
The insights feature uses Google's Gemini models to write summaries and answer questions about assessment results. The information sent is limited to aggregated results, such as the assessment, project and client names, response counts, locations and question-level totals, together with the question a user types into the chat. Individual response records, audio files and attachments are not sent. Requests and generated replies are kept in our logs, which are visible to superuser administrators only, and generated summaries are cached to avoid repeated requests. Please avoid entering personal information into the insights chat.
5. Who we share information with
| Recipient | Purpose |
|---|---|
| The organisation running an assessment, and its authorised members | Access to the responses and results collected for that organisation, according to each member's role. |
| Google (Cloud Vision, Firebase, Gemini) | Document analysis, push notifications, and AI summaries as described above. |
| Twilio | Sending one-time verification codes by SMS or WhatsApp to your phone number. |
| Email delivery provider | Sending invitations, password resets and notifications. |
| Sentry | Error monitoring. Error reports may include technical details about the request that failed. |
| Authorities | Where required by law or to protect rights, safety and security. |
These providers process information under their own terms and only to provide their service to us. Your information may be processed in countries other than your own.
6. How long we keep information
We keep account information while your account is active. Survey data is kept for as long as the organisation that owns the assessment needs it, or until it is deleted. Records deleted in the application are first marked as deleted and hidden from users. Sign-in and security records are kept only as long as needed for security. When we delete your account we also remove or anonymise the personal information linked to it, except where we must keep something to meet a legal obligation or to protect the integrity of survey data that belongs to an organisation.
7. Security
We use encrypted connections, hashed passwords, short-lived access tokens with rotating refresh tokens, and role-based access so that people only see the data for organisations they belong to. No system is completely secure, so please use a strong, unique password and tell us right away if you suspect unauthorised access.
8. Your choices and rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can update most account details in your profile settings.
To delete your account and data, use our data deletion request form. We will confirm your identity, and we aim to complete verified requests within 30 days.
For other requests, or to ask about a survey you took part in, contact us. If you believe your rights have been infringed, you may also complain to your local data protection authority.
9. Children
The service is intended for adults working in a professional capacity. We do not knowingly create accounts for children under 16. Organisations that survey minors are responsible for obtaining any required parental or guardian consent.
10. Changes to this policy
We will update this page when our practices change and revise the "Last updated" date above. If a change is significant, we will notify account holders in the app or by email.
11. Contact
To request deletion of your data, use the data deletion form.