Anonymous has to mean nobody can work out who said what

People only tell the truth when they are sure it cannot be traced back to them. Privacy on LunchVoice is not a setting you find later. It is how answers are stored and how every result is shown, on every plan. Who answered and what they said are kept apart. The check that you are allowed to answer is stored separately from your answer. On an anonymous survey there is no screen, export or API call that puts them back together. Withheld is not zero. A result that would point at one person is shown as Withheld, with the reason. You always know the difference between nobody chose this and someone is being protected. Small groups are merged. Hidden answers are combined into one Withheld bucket, and averages that could give a group away are hidden too. Guests stay guests. Someone who answers without an account never becomes a member, never counts toward member totals, and is labelled as unverified in results.