JESS MOVEFor organisations

For employers, schools, care groups and councils

A wellbeing command centre
that cannot see an individual.

You get participation, engagement and campaign performance above a privacy threshold. You do not get a person. That is not a policy you are asked to trust — the individual view does not exist in the type system, so no role, escalation or support ticket can produce one.

The command centre

Three numbers, and none of them is a name.

Employers, schools, care groups and councils get participation, engagement and campaign performance above a privacy threshold. Below it, the answer is suppressed — for you as well as for everyone else. The first card is an example of the shape a result takes; no organisation has run a cohort yet, so there is no real figure to put there and inventing one is how a number nobody measured ends up in a procurement document.

Example week
68%

of enrolled employees completed at least one movement break. Illustrative — not a measured result.

Team Score
4 terms

Participation, consistency, improvement and mutual support. Capability is absent by design.

Individual view
Absent

Not permission-gated. It does not exist in the type system, so no role can produce it.

Privacy as architecture

The query returns nothing, not less.

Health and wearable information is special-category data under UK GDPR. That cannot be bolted on afterwards, so the engine was built to need as little of it as possible — and the reporting layer was built so that the interesting question is the one it refuses to answer.

  • k-anonymity of 8 in the query planner, with intersection-attack checks across filter combinations — and again as a database constraint, so it survives a refactor of the service that enforces it.
  • Calendar events are classified on the member’s own device as busy, free, focus or travel. Titles and attendees are never transmitted, and never sent to any language model.
  • 11 consent switches, each independent and each revocable without disabling the product. A member who withdraws one keeps the rest.
  • Employees see exactly what you can see, on a permanent transparency screen. Export and deletion are self-service and do not route through you.
workforce.query_plannerk ≥ 8
SELECT avg(movement_breaks)
FROM cohort
WHERE site = 'Leeds'
  AND dept = 'Finance'
  AND tenure = '0–6 months'

-- 3 contributing users
-- below threshold

SUPPRESSED
Privacy floor
k ≥ 8

Enforced in the query planner and again as a database constraint. No override role exists.

Delivery tiers
4

Down to SMS and WhatsApp, so a workforce without company phones is still reachable.

Entry point
Workplace

Hybrid and remote teams first: clear problem, measurable value, lowest safeguarding load.

01Workplaces

Workplaces

Hybrid and remote teams are the first commercial entry point: a clear sedentary problem, measurable participation and no safeguarding complexity on day one.

What it does

  • SSO, department structure and employee invitation
  • Challenge builder and a wellbeing campaign calendar
  • Aggregate participation, office versus remote engagement
  • Meeting-culture insight — which blocks never leave a gap
  • Branded company challenges and reward management

The boundary

non-negotiable

An employer never sees health conditions, movement history, heart rate, sleep, disability, declined activities, calendar content or an individual risk score.

02Schools & education

Schools & education

Teacher-controlled movement breaks that fit inside a lesson, with safeguarding and parental consent as the default rather than a setting.

What it does

  • Timetable integration and teacher-triggered classroom breaks
  • Class and house challenges; revision-reset mode
  • Parent consent workflows and age assurance
  • Accessibility adaptations for every routine
  • Aggregate school reporting only — no public child profiles

The boundary

non-negotiable

Children's data is never used in a way detrimental to their physical or mental wellbeing, never targeted for advertising and never exposed to unknown adults.

03Care & later life

Care & later life

Seated, bed-compatible and carer-assisted movement, delivered on a television or by voice, producing activity evidence as a by-product.

What it does

  • Resident profiles with representative and consent controls
  • Group sessions and a seated movement library
  • Smart-TV mode and voice-guided sessions
  • Family participation and celebration
  • Participation records suitable for inspection evidence

The boundary

non-negotiable

Stable-support reminders, seated defaults, slow transitions, pain and dizziness stop prompts, and an explicit non-medical position on every screen.

04Councils & public health

Councils & public health

Population-scale movement for people that every other product designs out — reached over SMS and WhatsApp where there is no app and no wearable.

What it does

  • Regional and multi-site licensing
  • Sponsored public-health programmes
  • Lightweight delivery to any phone that receives a message
  • Privacy-protected outcome reporting at cohort level
  • Multilingual UK support

The boundary

non-negotiable

A general wellness programme. It does not diagnose, does not treat and is not a substitute for any NHS pathway.

05Families

Families

One household, four decades. Intergenerational movement is the mechanic no single-audience competitor can copy.

What it does

  • Up to six profiles across every mode
  • Grandparent and grandchild streaks
  • Household missions and weekend expeditions
  • Guardian controls and shared rewards
  • Remote family celebration across distance

The boundary

non-negotiable

A guardian sees participation and safety, not a child’s private check-ins or free-text conversation with the coach.

The privacy firewall

An employer buys outcomes, not visibility.

The individual view is not permission-gated. It does not exist in the type system, so there is no role, no escalation and no support ticket that can produce it.

Never visible to an employer

  • individual health conditions
  • exact movement history
  • heart rate
  • sleep readings
  • disability status
  • declined activities
  • personal calendar details
  • medical information
  • individual risk scores

Available, above the threshold

  • aggregate participation, above the k-anonymity floor
  • office versus remote engagement
  • which meeting structures never leave a gap
  • campaign and challenge performance
  • anonymous free-text feedback

Reach

The lowest tier defines the product.

A council programme cannot assume smartphones. A care group cannot assume wearables. Messaging and assisted delivery are first-class tiers with their own funnels, not an accessibility afterthought.

Tier mix

4tiers
  • T1
  • T2
  • T3
  • T4
T1Fused
Wearable + phone + calendar
app push · watch haptic
T2Phone-only
Phone motion, calendar
app push
T3Lightweight
Self-reported schedule only
whatsapp · sms
T4Assisted
Carer / coordinator input
large format tablet · tv cast · smart speaker · ivr

What it costs

A floor, not a teaser.

Organisation pricing is a contract, so the exact figure is agreed rather than picked at checkout — but the range is published here rather than hidden behind a form, and the bottom of it is a real price somebody pays.

Organisation
from £2
per employee per month

Employers, schools, care providers and councils.

  • From £2 per seat at the 10-seat minimum — the floor, not a teaser.
  • Up to £5 per seat depending on sector, seat count and support level. Organisation deals are contracts, so the exact figure is agreed, not picked at checkout.
  • SSO and directory integration
  • Challenge builder and campaigns
  • Privacy-protected aggregate analytics
  • Branded programmes
  • Minimum 10 seats, minimum annual contract
  • Setup and integration support
Talk to us

What a seat does not buy

no upgrade path

There is no tier, no enterprise agreement and no support escalation that returns an individual. It is not a feature that has been withheld from your plan — the query planner has no code path that produces one, and the database will not store the shape. If a supplier has offered you individual-level wellbeing reporting, that is the difference between the two products.

  • No individual dashboards
  • No risk scores by name
  • No re-identification support tier

Members can see everything you can see about their group, at any time, without asking you.

Run an eight-week pilot.

Group reporting never resolves to a person, at any group size. If you would rather see it from the inside first, an individual account takes two minutes and costs nothing.

Free to create. 150 AI credits a month for 2 months, then AI features need a plan — everything that is not AI carries on either way. Premium is £5.99 a month and cancels in one click. Under 18 a guardian confirms before the account opens.