Privacy Policy: Bias Screener
Last updated 22 July 2026. This policy covers the Aperio bias screener at bias.aperioprofiles.co.uk. The ADHD screener, the autism screener, and the Aperio Workplace Profile have their own privacy policies on their own sites, because they process different data.
Who we are
Aperio Profiles is a trading name of Liberation Academy Ltd, a company registered in England and Wales (company number 16087057). We are the data controller for the personal data described in this policy and we are registered with the Information Commissioner's Office (ICO). Data protection contact: enquiries@liberationacademy.co.uk.
What we collect
Your email address, so we can send you your results, and your name if you choose to give it. The name field is optional. We also record the access code you used and, if that code was issued by an organisation, which organisation issued it.
Intake answers describing you. These cover gender identity, age, ethnicity, whether you identify as disabled, whether you identify as neurodivergent, significant personal or family experience of mental health difficulties, body size, religion or belief, sexual orientation, class identity, your household's financial circumstances growing up and now, your proximity growing up to environments of wealth and institutional power, your seniority at work, how much contact you had growing up with people different from yourself, and whether you experienced significant adversity or instability in childhood. Every one of these is optional, most offer a "prefer not to say" option, and the screener scores you whether or not you answer them.
Your answers to the screener modules. Some are written answers in your own words, some are multiple choice, and some are responses to described workplace situations.
The scores we compute from your answers: your scores on each bias axis, your combined scores, your score bands and overall band, and any response-pattern flags.
Technical data recorded with your consent
When you give or withdraw consent, we also record your IP address and your browser's user-agent string alongside the exact wording you were shown and the time. We keep this only as evidence that consent was properly given, which UK GDPR Article 7(1) requires us to be able to demonstrate. It is not used for tracking, profiling, or advertising.
Special category data, and where the line falls
Some of your intake answers are special category data under Article 9 of the UK GDPR: your ethnicity (racial or ethnic origin), those about your health (disability, neurodivergence and your own mental health), and those about your religion or belief and your sexual orientation. A family member's mental health, if you mention it, is their special category data and we treat it the same way. Your answers about your upbringing, class and finances, and about childhood adversity, are personal data but are not in themselves Article 9 data unless your answer reveals one of these categories. We process the special category data only on the basis of your explicit consent under Article 9(2)(a), given on the consent screen before the screener starts, and we record the exact wording you were shown along with your consent.
Your bias scores are not special category data. They are sensitive profiling, and we treat them carefully, but they are not Article 9 data and we do not claim otherwise.
Our lawful basis under Article 6 is performance of our contract with you (Article 6(1)(b)) where you bought access yourself, and your consent (Article 6(1)(a)) where an organisation gave you the code. Taking the screener is voluntary and confidential, and you can withdraw your consent at any time.
Your written answers and OpenAI
Some questions ask for short written answers. These are sent to OpenAI, acting as our data processor and based in the United States, and analysed by an AI scoring system to detect implicit bias indicators. This is necessary to produce your results. OpenAI does not use your written answers to train its models, but may retain them on its own systems for up to 30 days for service delivery and abuse monitoring before deleting them. That retention is OpenAI's, not ours, and we tell you about it rather than describing this as zero retention.
We do not keep your written answers after scoring. You receive a copy of them by email, and they are deleted from our systems as soon as that email is confirmed sent. A scheduled job independently clears any written answers still present two hours after scoring, whether or not the email went out, so the deletion does not depend on the email succeeding.
How your scores are produced, and what they are not
Your scores are computed on our servers from the answers you submit, using a fixed scoring method, not from a value your browser sends us. This is a reflective screening instrument. It does not diagnose bias, prejudice, or any psychological or medical condition, it is not medical or legal advice, and it does not make any automated decision about you with legal or similarly significant effect.
Who sees it
Your results go only to the email address you give us. We do not share them with employers, third parties, or advertisers, and we do not sell your data.
If you used an access code issued by an organisation, that organisation's dashboard shows the codes it issued, who each code was sent to, and whether each one has been redeemed. It is not told whether you consented or declined. If you decline, that is recorded for our own accountability, but it is not sent to your employer's dashboard. Screener completions are shown to the organisation only as an organisation-wide count, never named. It never shows your scores, your bands, your intake answers, or anything you wrote. That boundary is enforced in the software, not merely promised in this policy.
Where it is stored and who processes it for us
Your data is stored with Supabase in the UK region (AWS London), with row-level security locked to server-side access only. The site runs on Vercel. Results emails are sent via Resend. If you bought access yourself, payment is processed by Stripe and we never see or store your card details. Written answers are scored by OpenAI as described above. Each provider processes your data under a data processing agreement.
Vercel, Resend, Stripe and OpenAI process some data on US infrastructure. Those transfers are safeguarded by the UK Addendum to the EU Standard Contractual Clauses, or the UK IDTA, in our agreement with each provider.
How long we keep it
We keep each type of data only as long as we need it. Your intake answers are deleted or anonymised about 90 days after your report is produced, and your scores are kept while your Aperio account is active. Your written free-text answers are the exception: they are deleted on delivery as described above, so we hold them for minutes or hours rather than months. These deletions run automatically and are logged.
Access codes and session tokens are kept for up to 12 months. Codes issued to an organisation and not yet redeemed expire 180 days after issue. Consent records are kept for up to 6 years, because the law requires us to be able to demonstrate the consent you gave.
Your rights
You can exercise most of your rights yourself from your Aperio account: see what we hold about you, download a copy, withdraw your consent, and request erasure. You can withdraw consent at any time, and withdrawal does not affect processing already carried out before you withdrew.
We action erasure requests within one calendar month. We delete everything the law allows us to delete; where the law requires us to keep something, we will tell you what is kept and why. For rectification, restriction, objection, or anything else, email enquiries@liberationacademy.co.uk. You also have the right to complain to the ICO at ico.org.uk.
Age
This screener is for adults. You must confirm you are 18 or older before you can begin.
Cookies
See our cookie policy. Analytics run only if you opt in, and you can change your choice at any time from the cookie preferences link in the footer.
Contact
Data controller: Liberation Academy Ltd, trading as Aperio Profiles, registered in England and Wales (company number 16087057). Email: enquiries@liberationacademy.co.uk.