Privacy architecture
Nothing is public
until she says so.
Participant information is private by default. Publication happens only where a participant has granted explicit, recorded, revocable permission for that specific kind of material.
The rules we build to
- 01
Private by default. No participant information is public unless she has explicitly granted permission for that specific material.
- 02
Seven separate decisions. Challenge data, personal story, photography, magazine feature, creative work, video and community sharing are never granted as one.
- 03
Silence is not consent. A request that has not been answered is treated exactly like a refusal.
- 04
Consent is scoped. A grant applies to a named season and the material shown at the time it was given.
- 05
Consent is revocable. Withdrawal takes effect immediately, everywhere, and requires no reason.
- 06
No invention. Where consent is absent, the platform prints an empty labelled slot — never a substitute, a composite or a stock stand-in.
- 07
A profile stays unpublished until its owner publishes it, whatever individual grants exist.
Seven decisions, never one
The consent record
This is the founder’s own record, shown exactly as any participant’s would be. She is the only fully authorized participant in the prototype — she is the subject of the first issue and has given written permission for every domain below.
Future participants
The consent workflow
- 01Founder acts
Invitation
The founder sends a request naming exactly which domains are being asked for, what would be published, and where. Nothing is bundled; a request for photography is not a request for your story.
- 02Participant acts
Review
The participant sees the material as it would appear — the goals, the words, the frames — before deciding. There is no time pressure and no default answer.
- 03Participant acts
Decision, domain by domain
Each of the seven domains is granted or declined separately, with an optional scope note limiting the grant. Declining one domain never affects another.
- 04Founder acts
Recording
A grant is written to the consent ledger with a timestamp, a season and the method of capture. High-sensitivity domains additionally require a countersigned release.
- 05Participant acts
Proof before print
Before an issue is published, the participant approves the final spread — the crop, the pull quote, the caption. An unapproved proof is never printed.
- 06Participant acts
Withdrawal, at any time
Any grant can be withdrawn in one action, without explanation. The material comes down from every surface immediately and the profile returns to unpublished.
Beta cohort
Four reserved, unpublished profiles
Four other women completed the founding season. None has been asked for permission, so none appears anywhere on this platform: no name, no goals, no story, no photograph. Their profiles exist only as empty ledgers waiting for a decision that is theirs to make.
Inside the app
Your sharing controls live in My Compass.
Community Mode, per-item sharing and instant withdrawal sit beside your challenge, where the decisions actually get made.