What happens to the things your teams type in.

The sessions you build (exercise wording, reference material, any client logo you upload), the answers people type during a session, their chosen display name, which room they sat in, which exercises they finished, requests for help, and moments you save.

Facilitator accounts store an email address and a password that is never stored in readable form. Participants have no account: they join with a link and pick a name.

In a managed Postgres database and file store operated on our behalf by our hosting provider, in the cloud, encrypted at rest and in transit. Uploaded logos sit in a private store and are served only through the session that owns them.

The facilitator who owns the session, plus anyone that facilitator has explicitly shared it with as a co-facilitator. Access rules are enforced by the database itself, not just by the screens, so one facilitator cannot reach another's sessions.

Participants see their own answers, plus the shared answers of the room they are in. They cannot see other rooms or other people's individual answers.

Our own staff access is limited to what is needed to run and support the service.

Each session has a keep-for setting: keep until deleted, or clear answers 30, 90 or 365 days after the session ends. When the window passes, a nightly job removes the answers, names, rooms and help requests and leaves the session structure so it can be reused.

A facilitator can also clear a session's participant data at any time with one button, and deleting a session removes everything belonging to it.

A facilitator can ask for a written summary of the themes in a room's answers. That feature is switched off for every new session. When a facilitator turns it on for a session, the answer text from that session is sent to an AI service to be summarised and the summary comes back to the facilitator. The text is not used to train models and is not kept by the service afterwards.

With the setting off, no answer text leaves the app.

Important actions are recorded and cannot be edited or removed from inside the app: a session being created, published or deleted, answers being exported, participant data being cleared, an answer being shown on the big screen, an AI summary being generated, and access being shared or withdrawn. Each entry records who, what and when.

When a facilitator exports a session, the file leaves the app and becomes the facilitator's responsibility to store or delete under their own organisation's rules.

A facilitator can delete any session or clear its participant data themselves. For anything else, including deleting an account and everything in it, email shane@shanemcgrath.co.uk and it will be actioned.

If you think you have found a weakness, please email shane@shanemcgrath.co.uk with enough detail to reproduce it. Please do not test against other people's sessions or data.

Leargas does not hold an external certification or audit report, and nothing here should be read as one. If your procurement process needs a questionnaire completed, get in touch and it will be answered honestly.