Aggregation only. No individual reports visible by default.
Sharing requires explicit opt-in from each individual.
