i
Ownership precedes use
A record about you should be governed by you. Custody sits with the patient by default; clinicians, researchers and services are granted access — they are not the owners of record.
Health-data sovereignty
The record is yours.
So is the key.
Your health history is the most personal record you will ever generate — and the one most readily extracted, brokered and re-sold without you. personalised.health inverts the default: the record is held by the individual it describes, and nothing moves without a consent you grant and can withdraw.
No surveillance. No silent secondary use. Portability as a right, not a favour.
01 — The thesis
Personal means personal.
ii
Consent is the only gate
Every disclosure is bound to a specific purpose, recipient and duration. Consent is explicit, legible, revocable, and logged. Absence of consent is a closed door, not an open one.
iii
Privacy is the architecture
Confidentiality is not a setting bolted on afterwards; it is the structure the system is built from. Data is minimised, encrypted, and never the product on sale.
iv
Portability is a right
You may take a complete, machine-readable copy of your record to any clinician, service or jurisdiction, at any time, without permission and without penalty.
02 — How it works
A record you hold, a ledger you control.
-
Hold
Your record lives with you
Histories, results, prescriptions and devices feed into a single record under your custody. There is one canonical copy, and it answers to you.
-
Grant
Access is granted, scoped, timed
A clinician requests what they need. You grant a precise scope — these results, this episode of care, until this date — and not a byte more.
-
Trace
Every access leaves a trace
Who looked, when, under which consent, for what purpose. The audit trail is yours to read, in plain language, in full.
-
Revoke
Withdrawal is immediate
Change your mind and the door closes. Consent withdrawn is access ended — no negotiation, no retention by default, no exceptions buried in terms.
Consent receipt
active
- Granted to
- Cardiology, NHS Trust
- Scope
- ECG & lipid panel
- Purpose
- Direct care
- Expires
- 90 days · auto-revoke
- Secondary use
- None permitted
- Held by
- The patient
Revocable at any time · logged to your audit trail
03 — Who it is for
Built for the people the record concerns.
Patients
People who want their own history in one place, legible and portable — and who refuse to be the unwitting product of a data market.
Clinicians
Practitioners who need a complete, trustworthy picture at the point of care, with consent that is unambiguous and defensible.
Advocates
Privacy and health-data advocates building toward a settlement where sovereignty over one's own body extends to the record of it.
“Your body is not a dataset to be mined. Neither is the record of it.”