Architectural Anonymity

We Don't Know
Who You Are.

No name. No email. No identification. Your account is anonymous. Your data is separated. There is no persistent readable link between them. By design — not by promise.

AES-256 Encryption
Zero-Knowledge Architecture
PIPEDA-Aligned
No Ad Tracking
Structural Integrity

The Layered
Fortress

Architectural permanence meets unbreakable privacy. Experience our signature two-layer defense system designed for the digital era.

Layer 1

Your Account Is Anonymous

Rilev does not collect or store your real-world identity. When you create an account, no name, email address, phone number, or any other personal identifier is required. Your account is anonymous from the moment it is created.

Rilev doesn't know your name
Rilev doesn't know your email
Rilev doesn't know your phone number
Rilev doesn't store your IP address
Rilev doesn't know your physical address
Rilev doesn't link your payment identity
Layer 2

Your Data Is Separated

Your assessment results are stored in a completely separate location from your account. There is no persistent readable link between the two — only your private key can resolve the connection. Without that key, there is no way to determine which results belong to which account.

Account and data live in separate, unlinked collections
There is no persistent link — only your private key can resolve the connection
Your private key exists only on your device — Rilev never sees it

What It Takes to Break It

Connecting your identity to your data would require both layers to fail independently.

Identify the Account
No personal info exists to find
Not Possible
+
Resolve the Private Key
The only bridge between account and data
Only You Hold It

Even with full database access, your results remain anonymous to everyone — including us. Only your private key can resolve the connection.

Full Transparency

What We Do Retain

We believe you should know exactly what we keep and why. No surprises.

Crisis Safety Records
If a crisis-level situation is triggered during an assessment, an encrypted crisis event will be recorded for legal compliance. These records contain no identity — only anonymous, encrypted references.
Consent & Audit Records
Records of all your consents are retained for legal compliance. These records contain no identity — only anonymous, encrypted references.
Professional Sharing
If you choose to share your results with a therapist or coach, a share record exists while you authorize it. Your professional is the only one who can identify you — because they already know you outside of Rilev. Rilev still doesn't. These records contain no identity — only anonymous, encrypted references. Deleted when you revoke access.

These records contain only encrypted, pseudonymous references. They point to accounts with no personal information — protected by the same two-layer anonymity architecture that separates your identity from your data.

The Difference

Anonymity vs. Privacy

Most mental health apps promise privacy. We deliver true anonymity.

Feature
Typical Apps
"We promise privacy"
Rilev
True anonymity by design
📧Email Required
Always required
Never collected
👤Name Required
Full name required
Never asked
🌐IP Address Tracking
Logged & stored
Not logged by Rilev
📊Ad & Identity Tracking
Ad pixels & analytics
No ad or identity tracking
👁️Who Sees Your Results
Platform admins
Architecturally resistant to result-linking
🔑Account Recovery
Password reset available
User-controlled: Authenticator + security questions
🔓Data in Breach
Name + health data exposed
Anonymous data only
⚖️Subpoena Risk
Can identify you
No identity to provide

Unlike privacy promises, our anonymity is architectural. Even with full database access, your results remain anonymous to everyone — including us. Only your private key can resolve the connection.

Data Flow

How The Two Layers Work Together

From the moment you create an account, both layers are active

1

Your Device

Assessment happens entirely in your browser. Your private key stays on your device.

2

Layer 1 — No Identity

Your account holds no name, email, phone, or any personal identifier. Your real-world identity is never collected.

3

Layer 2 — Separated Data

Results stored separately from your account. Only your private key can resolve the connection.

4

The Result

Anonymous account. Anonymous data. No persistent link between them — only your private key can resolve the connection.

Never Collected

What We Don't Track

These fields don't exist in our database. Not encrypted. Not hashed. Not collected.

NOT COLLECTED
Full Name
Sarah Chen
Email Address
sarah.chen@gmail.com
IP Address
192.168.1.1
Phone Number
(604) 555-1234
Physical Address
123 Main St, Vancouver
Credit Card
**** **** **** 4242
Device ID
A1B2C3D4E5F6
Browser Fingerprint
Hash: 7f9a2b3c8d...
What We Actually Store
Random user ID: usr_kdgkkmmsb251d
Assessment scores and clinical reports (not raw responses)
Timestamps (when tests were taken)
A pseudonymous device-level identifier for consent tracking and crisis safety — cannot be linked to your name, email, or personal identity

You Choose When to Bridge the Gap

Your anonymity remains intact. If — and only if — you choose to work with a therapist, you decide when to share your report.

You Control Visibility
Share your full report or just specific sections
Revoke Anytime
Change your mind? Remove therapist access instantly
Separate Records
Therapy notes never linked to your anonymous assessment
The Bottom Line

Honesty Requires
Invisibility.

Layer 1: we don't have your real-world identity — because we never collected it. Layer 2: we can't link your account to your data — because only your private key can bridge the two, and we don't have it.

    Rilev | Anonymous Mental Health Assessment