Sandbox terms of use

For the free IWE developer sandbox at sandbox.wellbeingengine.io. Last updated 13 August 2026.

The one rule that matters: the sandbox is for synthetic test data. Do not send us real people's information. Not names, not email addresses of your employees, not real user identifiers. If you want to measure real people, that is a production deployment and a separate conversation.

What you get

A client id and secret, issued instantly, valid for 30 days
Scopes checkin:write, aggregates:read and usage:read
A quota of 2,000 answer submissions
A synthetic workforce to develop against, with real closed cycles and real aggregates

Sandbox keys deliberately do not carry respondents:write or webhooks:manage. That is not an oversight - it means a self-serve key cannot enrol a person or cause us to send outbound requests.

Fair use

Signups and token requests are rate limited. Please also do not:

Load-test or benchmark the sandbox without asking us first - we will usually say yes, we would just like to know
Attempt to circumvent the minimum group size, or to re-identify any individual respondent
Mint keys in bulk, or share a key publicly
Use the sandbox to provide a service to your own customers - it has no availability guarantee

The anonymity floor is not configurable

Any measure covering fewer than five respondents is returned with no value. Severe-distress measures need ten. This is enforced inside the database, not in the API, so there is no parameter, scope or support request that will lift it - including for you, and including for us. If that is inconvenient for your product design, it is worth designing around rather than asking about.

No warranty, no availability commitment

The sandbox is provided free and as-is. We may change, suspend or withdraw it, reset the synthetic data, or revoke a key, at any time and without notice. It carries no service level and must not sit behind anything you are relying on.

What we do with your details

See the privacy notice. In short: your email, a hashed IP and your referring link, all deleted 30 days after the key expires.

Going to production

A production licensee is a separate deployment with its own database, its own per-deployment salt and its own agreement. Nothing in these terms grants any right to use the IWE with real people's data. Pricing is on the rate card; talk to us when you are ready.

Contacting us

For data deletion requests, abuse reports, or questions about sandbox access, email hello@wellbeingengine.io.

We aim to respond to data protection requests within one month, as required by the UK GDPR.