For organizers, event leaders, and studios

Anonymous.
Encrypted.
Both directions.

The feedback channel your members will actually use when something is wrong. Reports are anonymous. Your replies are anonymous. Identities are never linked—not in transit, not at rest, not by us.

?
Anonymous thread · #418Relay encrypted · Identity unknown
Open
Anonymous memberMon · 2:30 PM
Last Tuesday in the 7pm class, something happened that I haven't felt safe bringing up in person. I want to talk about it, but I need it to stay anonymous for now.
You · OrganizerMon · 4:15 PM
Thank you for trusting me with this. Take whatever time you need—I'm here when you're ready. You don't have to share anything you're not ready to.
Reply… the member will receive this through the relay.
Send →
How it works
01
A member sends a report.
Identified, anonymous, or anonymous-with-relay. The member chooses.
02
You read it on the dashboard.
Filtered, categorized, and sorted by severity.
03
You reply through the relay.
You never see their email. They never see yours.
04
Nothing is ever linked.
End-to-end encrypted. Identities are never stored—not even by us.
How it works · 01–04

Four steps. Both directions. No identities, ever.

End-to-end encrypted from the moment a member starts typing to the moment your reply lands in their inbox. The dashboard never sees who sent what. Neither do we.

01

A member sends a report.

They open your TellSafe link—from a QR code, an email, or your community's site. They pick a category, choose how anonymous they want to be, and write what they need to write.

Westside Dance Collectivetellsafe.co/westside-dance
🔒 Encrypted
Share what's on your mind.
We read every message. We never know who sent it.
Identified
with your name
Anonymous
no reply
Anonymous + reply
via relay
Category
SafetySuggestionPraiseScheduleOther
Something happened in last Tuesday's 7pm class. I want to talk about it but I'm not comfortable saying it in person yet.
Your email is used only to receive replies. It's never visible to the organizer.
Send →
02

You read it on the dashboard.

Every message arrives in your inbox tagged, time-stamped, and sorted by severity. You can filter, search, and triage. Members' choice of identity is shown plainly.

Inbox · 47 messagesWestside Dance Collective
3 unread
All · 47Safety · 8Suggestions · 21Praise · 12Other · 6
SafetyAnonymous + relaySomething happened last Tuesday in the 7pm class…2h
SafetyAnonymousA few of us felt unsafe during the networking…5h
SuggestionAnonymous + relayThe registration step is confusing—could we add…1d
PraiseMaya R.Just wanted to say last week's workshop was…2d
ScheduleAnonymousAny chance of an evening intermediate class…3d
03

You reply through the relay.

Your reply goes through TellSafe's encrypted relay and lands in the member's inbox—your email is never exposed. Their reply comes back the same way. As many turns as the conversation needs.

Thread · #418Anonymous + relay · Open
Relay active
Anonymous memberMon · 2:30 PM
Something happened in last Tuesday's 7pm class. I want to talk about it but I'm not comfortable saying it in person yet.
You · OrganizerMon · 4:15 PM
Thank you for telling me. Take whatever time you need—I'm here when you're ready. You don't have to share anything you're not ready to.
04

Nothing is ever linked.

We store the encrypted message and a category. We don't store who sent it—not their email, not their IP, not even a device fingerprint. There is nothing to leak, nothing to subpoena, nothing to lose.

What we store about thread #418Audit · public schema
Verifiable
Stored
Message text
AES-256 encrypted, per-org key
Category & timestamp
For your dashboard filters
Thread ID
Anonymous identifier only
Not stored — anywhere
Member name
Member email address
IP address
Device fingerprint
Browser metadata
Location data
We can't tell you who sent a message. Neither can anyone else with our database.
Privacy

What we know about your members: nothing.

TellSafe is a relay, not a record. The whole product is designed around what we don't keep. If we don't have it, no one can ask us for it, leak it, lose it, or sell it.

Member
writes message
Identity stripped
before leaving the browser
TellSafe relay
encrypted msg
identity
email · ip · device
Organizer
reads · replies
Reply travels back
through the same relay

We never see who sent it.

When a member sends an anonymous message, their email and IP are stripped before the message ever touches our database. We literally cannot tell you who said what — and neither can anyone with our login credentials.

Encryption you can verify.

Messages are AES-256 encrypted in transit and at rest. Encryption keys are isolated per organization. Our security model is published — read it, audit it, hand it to your privacy counsel.

Serious reports don't break the rules.

If a report mentions imminent harm, we help you escalate appropriately—without breaking anonymity, and only along paths your community has agreed to in advance. No surprises.

For organizers

Built for the people who actually run real communities.

Not an enterprise HR tool. Not a Google Form. Something in between, designed for groups where everyone roughly knows everyone—and where saying the hard thing in person is the thing nobody can do.

The dance studio director.

When a student needs to report something about a teacher, the politics of saying it out loud are impossible. TellSafe gives them a path that doesn't end their relationship with the studio.

Typical use
Teacher conduct
Schedule disputes
Class-floor safety

The small-nonprofit board chair.

Anonymous channels for staff and donors during board transitions, leadership disputes, or financial concerns—without the overhead of building an HR system from scratch.

Typical use
Leadership feedback
Donor concerns
Workplace issues

The event organizer.

Real-time anonymous incident reporting during conferences and gatherings. Code-of-conduct violations handled discreetly while the event is still happening, not in a post-mortem.

Typical use
Live incident reports
Post-event surveys
Speaker feedback
What TellSafe is for

One channel for every conversation that matters.

The relay is the heart of the product, but most organizers also need a way to run a survey or get a waiver signed. Same trust posture, same branding, same calm dashboard.

Anonymous feedback

Members tell you. You write back.

The two-way relay. Reports come in anonymously and stay that way—even when the conversation goes back and forth for weeks. The differentiator: you can actually reply.

Thread · #418Anonymous + relay · Open
Relay active
Anonymous memberMon · 2:30 PM
Something happened in last Tuesday's 7pm class. I want to talk about it but I'm not comfortable saying it in person yet.
You · OrganizerMon · 4:15 PM
Thank you for telling me. Take whatever time you need—I'm here when you're ready. You don't have to share anything you're not ready to.
End-to-end encrypted · Identity never linked
Anonymous surveys

Real answers, not "we crushed it."

Post-event polls, course-feedback forms, board-pulse checks. Responses are anonymous by default—and the relay works on individual answers, so you can follow up on one honest comment without breaking anonymity.

End-of-event survey42 anonymous responses · closed
Closed
How would you rate today's event overall?
Excellent21 · 50%
Good14 · 33%
Average5 · 12%
Poor2 · 5%
Open responses · 18 written
The schedule ran 20 mins over — would appreciate stricter time-keeping next time.
Anonymous + relay openReply privately →
Per-response relay · Bar-chart results · CSV export
Waivers & releases

Liability releases that aren’t a lawsuit.

Custom release text, attendance checkboxes, your branding. Members sign in 30 seconds; you get a signed PDF on file. Every waiver footer invites the signer to leave anonymous feedback for your community—a quiet on-ramp built into every signature.

WOW event waiver & releaseWest Orlando Westies
Required
Maya R.
Romero
email (optional)
What are you attending tonight?
Level 1
Level 2
Dance social
I HEREBY ASSUME ALL RISKS of participating in any/all activities associated with West Orlando Westies, including any risks arising from negligence, and release the organizers from claims related to…
I have read and agree to the above.
Sign & submit
Custom fields · Signed PDFs · Feedback footer
Also included

The rest of what you'll actually use.

Categories.

Route reports, survey responses, and waivers by tag. Custom categories on Pro.

QR codes.

Every form gets a printable QR. Stick it on flyers, table tents, lobby signs, programs.

Brand it.

Your logo, your colors, your community name. Members see your brand on every surface, not ours.

Sentiment tagging.

Every message and open-text response is auto-tagged on tone. Urgent items surface to the top.

Team access.

Add admins with scoped roles. Limit who can read what. Audit who replied when across feedback, surveys, and waivers.

Exports & webhooks.

Every channel exports to CSV or JSON. Webhooks fire on new submissions—plug TellSafe into Slack, Discord, or your tools.

Common worries

What people ask before they sign up.

What if someone uses anonymity to harass us?+
You can mute, block, or close any thread. Repeated abuse from the same relay address is rate-limited automatically. Anonymous doesn’t mean consequence-free—it means the consequence isn’t "everyone knows who you are."
Can I still find out who reported something if it’s a safety emergency?+
No. We can’t either—we don’t have it. If your community has reporting obligations under law, we help you design a flow that meets them while still respecting the anonymity promise. Usually that means making "report with identity" a separate, opt-in option on the form, not a back door we can open later.
What does it actually cost?+
Free for the first 25 messages per month. $3.99/month if you outgrow that. $7.99/month if you run multiple communities. No per-seat charges, no upsells, no surprise fees. See the pricing table below.
What happens to my data if I leave?+
You can export every message, thread, and survey to CSV or JSON before you cancel. Then we delete it. We don’t keep customer data after cancellation—there’s nothing to keep.
Is this overkill for a small studio?+
It’s intentionally not. We built it for a 40-person community, not a 4,000-person one. The Free tier exists because we want the smallest groups using this—a single dance class, a 30-person nonprofit, a one-off conference.
Can we customize the form for our community?+
Yes—categories, prompts, identity options, even which fields appear on the member form. Available on Community and Pro plans.
Pricing

Simple, honest pricing. Lock it in forever.

Every account starts with a free 30-day Pro trial. No credit card required. Downgrade anytime. Prices will rise as we grow — sign up now and keep your rate, no matter what we charge in the future.

You're saving 20% — billed once per year.
Free
$0
forever
Trying it out, the smallest communities.
1 organization
1 admin
25 submissions per month
Identified & anonymous modes
QR code generator
Kiosk / tablet mode
Start free
Continues as Free plan after trial.
Most popular
Community
$3.99$4.99
per month, billed annually
Active communities with regular feedback.
1 organization
3 admins
Unlimited submissions
Anonymous relay messaging
Custom branding & colors
In-app replies & categories
Start free trial
Starts at $3.99/mo after trial.
Pro
$7.99$9.99
per month, billed annually
Multi-community leaders and events.
Up to 3 organizations
5 admins per org
Everything in Community
AI sentiment analysis
Surveys & response templates
CSV export & analytics
Multi-language forms
Slack / Discord integration
Start free trial
Starts at $7.99/mo after trial.
Open a TellSafe channel

Give your community a way to actually tell you.

30 days free. No card. No setup beyond a name and a link. Cancel anytime — your data goes with you.

Start now