of enrolled employees completed at least one movement break. Illustrative — not a measured result.
JESS MOVEFor organisations
For employers, schools, care groups and councils
A wellbeing command centre
that cannot see an individual.
You get participation, engagement and campaign performance above a privacy threshold. You do not get a person. That is not a policy you are asked to trust — the individual view does not exist in the type system, so no role, escalation or support ticket can produce one.
The command centre
Three numbers, and none of them is a name.
Employers, schools, care groups and councils get participation, engagement and campaign performance above a privacy threshold. Below it, the answer is suppressed — for you as well as for everyone else. The first card is an example of the shape a result takes; no organisation has run a cohort yet, so there is no real figure to put there and inventing one is how a number nobody measured ends up in a procurement document.
Participation, consistency, improvement and mutual support. Capability is absent by design.
Not permission-gated. It does not exist in the type system, so no role can produce it.
Privacy as architecture
The query returns nothing, not less.
Health and wearable information is special-category data under UK GDPR. That cannot be bolted on afterwards, so the engine was built to need as little of it as possible — and the reporting layer was built so that the interesting question is the one it refuses to answer.
- k-anonymity of 8 in the query planner, with intersection-attack checks across filter combinations — and again as a database constraint, so it survives a refactor of the service that enforces it.
- Calendar events are classified on the member’s own device as busy, free, focus or travel. Titles and attendees are never transmitted, and never sent to any language model.
- 11 consent switches, each independent and each revocable without disabling the product. A member who withdraws one keeps the rest.
- Employees see exactly what you can see, on a permanent transparency screen. Export and deletion are self-service and do not route through you.
SELECT avg(movement_breaks)
FROM cohort
WHERE site = 'Leeds'
AND dept = 'Finance'
AND tenure = '0–6 months'
-- 3 contributing users
-- below threshold
→ SUPPRESSEDEnforced in the query planner and again as a database constraint. No override role exists.
Down to SMS and WhatsApp, so a workforce without company phones is still reachable.
Hybrid and remote teams first: clear problem, measurable value, lowest safeguarding load.
01 — Workplaces
Workplaces
Hybrid and remote teams are the first commercial entry point: a clear sedentary problem, measurable participation and no safeguarding complexity on day one.
What it does
- SSO, department structure and employee invitation
- Challenge builder and a wellbeing campaign calendar
- Aggregate participation, office versus remote engagement
- Meeting-culture insight — which blocks never leave a gap
- Branded company challenges and reward management
The boundary
non-negotiableAn employer never sees health conditions, movement history, heart rate, sleep, disability, declined activities, calendar content or an individual risk score.
02 — Schools & education
Schools & education
Teacher-controlled movement breaks that fit inside a lesson, with safeguarding and parental consent as the default rather than a setting.
What it does
- Timetable integration and teacher-triggered classroom breaks
- Class and house challenges; revision-reset mode
- Parent consent workflows and age assurance
- Accessibility adaptations for every routine
- Aggregate school reporting only — no public child profiles
The boundary
non-negotiableChildren's data is never used in a way detrimental to their physical or mental wellbeing, never targeted for advertising and never exposed to unknown adults.
03 — Care & later life
Care & later life
Seated, bed-compatible and carer-assisted movement, delivered on a television or by voice, producing activity evidence as a by-product.
What it does
- Resident profiles with representative and consent controls
- Group sessions and a seated movement library
- Smart-TV mode and voice-guided sessions
- Family participation and celebration
- Participation records suitable for inspection evidence
The boundary
non-negotiableStable-support reminders, seated defaults, slow transitions, pain and dizziness stop prompts, and an explicit non-medical position on every screen.
04 — Councils & public health
Councils & public health
Population-scale movement for people that every other product designs out — reached over SMS and WhatsApp where there is no app and no wearable.
What it does
- Regional and multi-site licensing
- Sponsored public-health programmes
- Lightweight delivery to any phone that receives a message
- Privacy-protected outcome reporting at cohort level
- Multilingual UK support
The boundary
non-negotiableA general wellness programme. It does not diagnose, does not treat and is not a substitute for any NHS pathway.
05 — Families
Families
One household, four decades. Intergenerational movement is the mechanic no single-audience competitor can copy.
What it does
- Up to six profiles across every mode
- Grandparent and grandchild streaks
- Household missions and weekend expeditions
- Guardian controls and shared rewards
- Remote family celebration across distance
The boundary
non-negotiableA guardian sees participation and safety, not a child’s private check-ins or free-text conversation with the coach.
The privacy firewall
An employer buys outcomes, not visibility.
The individual view is not permission-gated. It does not exist in the type system, so there is no role, no escalation and no support ticket that can produce it.
Never visible to an employer
- individual health conditions
- exact movement history
- heart rate
- sleep readings
- disability status
- declined activities
- personal calendar details
- medical information
- individual risk scores
Available, above the threshold
- aggregate participation, above the k-anonymity floor
- office versus remote engagement
- which meeting structures never leave a gap
- campaign and challenge performance
- anonymous free-text feedback
Reach
The lowest tier defines the product.
A council programme cannot assume smartphones. A care group cannot assume wearables. Messaging and assisted delivery are first-class tiers with their own funnels, not an accessibility afterthought.
Tier mix
- T1
- T2
- T3
- T4
What it costs
A floor, not a teaser.
Organisation pricing is a contract, so the exact figure is agreed rather than picked at checkout — but the range is published here rather than hidden behind a form, and the bottom of it is a real price somebody pays.
Employers, schools, care providers and councils.
- From £2 per seat at the 10-seat minimum — the floor, not a teaser.
- Up to £5 per seat depending on sector, seat count and support level. Organisation deals are contracts, so the exact figure is agreed, not picked at checkout.
- SSO and directory integration
- Challenge builder and campaigns
- Privacy-protected aggregate analytics
- Branded programmes
- Minimum 10 seats, minimum annual contract
- Setup and integration support
What a seat does not buy
no upgrade pathThere is no tier, no enterprise agreement and no support escalation that returns an individual. It is not a feature that has been withheld from your plan — the query planner has no code path that produces one, and the database will not store the shape. If a supplier has offered you individual-level wellbeing reporting, that is the difference between the two products.
- No individual dashboards
- No risk scores by name
- No re-identification support tier
Members can see everything you can see about their group, at any time, without asking you.
Run an eight-week pilot.
Group reporting never resolves to a person, at any group size. If you would rather see it from the inside first, an individual account takes two minutes and costs nothing.
Free to create. 150 AI credits a month for 2 months, then AI features need a plan — everything that is not AI carries on either way. Premium is £5.99 a month and cancels in one click. Under 18 a guardian confirms before the account opens.