Trust & boundaries

Trust is product work,
not a paragraph at the bottom.

Ren holds personal context. That makes the edges as important as the experience: what Ren can see, what the person can change, what an organisation cannot access, and when a human must take over.

Built aroundVisible
Correctable
RemovablePrivate beta principles

The trust commitments

Plain enough to test against the product.

You can see the memory

Ren surfaces aims, reflections and learned patterns so they do not become an invisible profile.

You can correct or remove it

The useful promise is not that every item requires a confirmation tap. It is that what Ren holds can be reviewed, corrected and removed.

You choose the handover

Professional preparation is editable and person-led. Ren does not silently send a therapist, employer or clinician your context.

Organisations stay outside

Personal conversations and individual activity are not an employer reporting feed. Any future organisational learning must be explicitly enabled and broad group-level.

How context moves

From your life, into a working understanding, back into your hands.

1
You share or connect
Conversation, check-ins, reflections and optional connected context form the input. Apple Health raw samples remain on the phone; only bounded aggregates are sent to the service.
2
Ren holds a bounded thread
Personal context is stored per user. It is not pooled into personal employer reporting or turned into a universal health score.
3
You inspect and shape
Memory, aims, patterns and reflections can be reviewed, corrected and removed. Off-record can prevent writes for a conversation.
4
You decide what leaves
A preparation note stays editable. Sharing happens through the route you choose, after your review.

Off-record

A quieter lane when you do not want a conversation held.

Off-record prevents transcript, memory, event, tracker and learning writes. If a hard crisis phrase is detected, the system may keep only a dated routing marker. The words themselves are not retained in that marker.

What off-record does not mean

It is not a promise of legal or clinical confidentiality.
It does not turn Ren into an emergency monitor.
It does not replace speaking directly with a qualified person when support is needed.

Private-beta posture

Early enough to be honest about what is not complete.

BetterMinds is not presenting Ren as enterprise-ready or as a finished security programme.

In place

Per-user isolation and visible controls

Personal context is separated by user, with in-product memory, correction, deletion, off-record and explicit-sharing controls.

Before broader onboarding

Tighten authentication

The current beta has been operating through a permissive migration window. Strict enforcement is a gate before new-user onboarding.

Not complete

Formal operational controls

Account recovery, application-level encryption, audit logs, retention/DSAR tooling and enterprise certification require further work.

The clinical and safety boundary

Ren supports the person. People provide care.

Ren uses deterministic crisis phrases to present a bounded support route. It does not continuously assess, monitor or predict crisis, and it cannot call emergency services in the background.

If you or someone else may be in immediate danger, contact your local emergency service or a qualified crisis service directly. Do not wait for Ren.

Ren does not

diagnose or provide therapy
make a clinical assessment
guarantee confidentiality or outcomes
interpret dreams or assign hidden meaning
analyse hormones or microbiomes
estimate calories or health from a meal photo
infer causation from wellbeing or health signals
replace professional judgement

Want the plain-language data detail?

Read the privacy approach

Want to question the product boundary?

Start a conversation

An open door

Trust should get sharper under challenge.

We welcome thoughtful questions from prospective users, professionals, organisations and partners. If a promise feels vague, ask us to make it testable.