bloom.
A little knowledge. A world of possibilities.
Language
Colour theme

Optional: choose a calmer colour, a quieter layout and the tone Patient Genie uses for general trial explanations. This is not a health assessment, is never guessed from what you type, and is not saved or sent anywhere. Choose “No preference” to reset.

No preference selected. Colours and Patient Genie wording stay neutral.

Text size
Explorer
Transparency • choice • control

Privacy & Terms

A notice for this deployment and the account service. This page is not a promise that every legal requirement in every country has been met.

Privacy by design

How Bloom protects your privacy

Bloom is built on the privacy-by-design principles of the EU and UK GDPR and uses safeguards modelled on the US HIPAA Security Rule.

  • Only what is needed

    Reading, study searches, primers and Patient Genie work without an account. An account holds your email, a hashed password and a small profile. Bloom asks for a postal address, a phone number or health information only in features the site has switched on, and only after you choose to use them.

  • Encrypted

    Connections use HTTPS. Your account email and profile are encrypted in the database, and passwords are kept only as a one-way hash.

  • Protected sign-in

    Secure session cookies, automatic sign-out when you are inactive, limits on repeated sign-in attempts, and a list of signed-in devices that you can sign out.

  • Kept on your device

    Eligibility answers, saved studies and searches, checklists and primer progress stay in this browser. They are never sent to Bloom or to your account. Patient Genie answers the safety questions it recognises on this device and sends other general questions through Bloom’s server to an AI service for an answer; Bloom does not save the chat.

  • Your rights, built in

    In My account you can see and correct your details, download a copy of them, or delete your account at any time.

  • No ads or tracking

    Bloom adds no advertising, analytics or tracking cookies. Its server logs contain no email addresses, IP addresses or passwords.

Privacy laws we design for

GDPR · UK GDPR

Data minimisation, purpose limitation and security by default, plus the rights of access, correction, portability and erasure in My account. The operator’s Privacy Policy names the data controller, the lawful basis for each use and how to complain to a data protection authority.

HIPAA

On its own, the account service does not collect protected health information such as medical records. If the operator switches on the optional Health Passport, it stores the health information you choose to enter, encrypted, and the operator’s Privacy Policy states whether HIPAA applies to it. Its safeguards follow the approach of the HIPAA Security Rule: access control, encryption, audit records and automatic sign-out. HIPAA applies to health-care providers, health plans and their business associates; the operator’s Privacy Policy states whether it applies to this site.

These safeguards are built into the software. They are not a certification: the organisation that runs this site is responsible for its Privacy Policy and for meeting the laws that apply to it, including other national privacy laws.

Draft — operator configuration required

Your privacy is important to us

The responsible organisation, contact, legal jurisdictions, policies, retention and transfer arrangements must be configured before new account details can be collected. This file cannot certify legal compliance by itself.

Account creation does not authorise the collection of medical records, sharing with a study team, automated calls or SMS. Health records have their own separate Health Passport choice where the site offers it; sharing, calls and SMS are not enabled. The Next step records only the specific account acknowledgements displayed before the form.

Contact the deployment operator for the applicable Privacy Policy and Terms of Use. Do not enter personal or sensitive information into an unconfigured deployment.

Understand the boundaries

  • Creating an account is not informed consent to a clinical trial and does not confirm eligibility, enrollment or benefit.
  • This account service collects the listed account/preferences fields only. The profile form collects no phone number, medical record, study data or consent to marketing. An optional address and phone number (where switched on) and the separate Health Passport have their own notices and choices.
  • Local eligibility answers stay in the page session and are not sent to the account database or a study team. They can be sensitive: use them only after the local-use notice and do not enter identifiers.
  • Public registry search sends the entered disease and location to the registries you choose (ClinicalTrials.gov and ISRCTN directly; EU CTIS, NCI and MFDS through Bloom’s server); US ZIP distance searches may also use Zippopotam.us. Such queries may reveal health interests. Use general, non-identifying terms.
  • Public images and online map tiles are external resources; their providers may receive technical connection information. No optional advertising/tracking consent is implemented here.
  • Study contact links open a separate email or phone app only when selected. This does not authorize the platform to share a profile or to contact you automatically.

Access, deletion and questions

Signed-in users can review/edit their profile, export account/profile information and privacy acknowledgements, or delete their account after password confirmation. Consent to receive calls or texts is not stored because those services are not enabled.

A new notice is shown before registration or profile editing. If you decline, no new profile is submitted; declining does not erase an existing account. Use Delete account to remove it, or contact the configured privacy contact to exercise applicable rights, make a complaint or discuss a request.

Account deletion removes the live account/profile, associated sessions, consents and linked privacy acknowledgements. Unlinked security-event entries and operator-controlled backups may remain according to the stated retention arrangements. Previously downloaded files and external recipients’ records are not remotely deleted.

Where processing relies on consent, withdrawal does not by itself undo processing that was lawful before withdrawal. Any legally required retention or alternative legal basis must be explained by the responsible operator under the applicable policy and law.

Before any future research contact service is enabled

Sensitive-health processing, sharing with named study personnel, automated/prerecorded calling and SMS require their own reviewed purpose-specific controls where applicable. Unchecked opt-ins must describe who contacts you, why, what is shared and how to stop contact. Phone/SMS choices must not be bundled into the account “Next” button.

A text programme must disclose applicable message/data rates and message expectations and implement the stated opt-out/help process before soliciting permission. This release does not send texts or calls, use phone numbers for texts or calls, or claim to process STOP requests.

Confirm action

Area illustration

100%1 / 1

Information is educational and does not replace medical advice. A picture does not diagnose a condition or demonstrate treatment effectiveness.