Privacy Policy
How we handle personal data on this website and in the ACR Companion mobile application.
Last updated:
This page is published in several languages. Where the versions differ, the English text is the authoritative one.
1. Who we are
The controller of the personal data described in this policy is Cornerstone Research International Ltd ("CRIL"), the operator of www.acragent.com and the publisher of the ACR Companion mobile application. BlockEnergy ACR is the name of the research programme CRIL runs with University College Dublin, Ireland, and Zhengzhou University, People's Republic of China.
- Registered address
- Cornerstone Research International Ltd, c/o NovaUCD, Belfield Innovation Park, University College Dublin, Dublin 4, D04 V2P1, Ireland
- Data protection contact
- info@acragent.com
This policy covers two things, described separately below: this website, and the ACR Companion mobile application. The research platform itself is not open to the public and is covered by the agreements held with each participating institution.
2. This website
2.1 Cookies
This website sets no cookies. It uses no advertising, no analytics, no tracking pixels and no visitor profiling of any kind.
Some pages store a small amount of information in your own browser, which never leaves your device and is not sent to us: your chosen display language; any synthetic case data you enter on the demonstration pages, so that it survives a page reload; and, in the restricted research areas, a short-lived sign-in marker. You can clear all of it at any time through your browser's settings for this site.
2.2 Information our provider processes
This website is delivered and protected by Cloudflare, Inc. To serve a page and to defend the site against attack, Cloudflare processes your IP address together with basic technical request information such as the time, the address requested, your browser type and the outcome. We use this only for security and service availability, and we do not use it to identify you.
Two pages also load standard display components — an icon font and a message-sending library — from the public distribution networks cdnjs.cloudflare.com and cdn.jsdelivr.net. Requesting a file from those services discloses your IP address to them in the ordinary way of the web.
2.3 If you contact us
The contact page asks for your institution and an e-mail address, and sends a one-time verification code to that address through our message provider, EmailJS. We use the address to reply to you and to confirm an institutional affiliation. We do not add it to any mailing list and we do not pass it to anyone else.
2.4 The clinical demonstration pages
The demonstration pages accept synthetic, invented case values only, so that visitors can see how the reasoning engine works. Entries are sent to our research service at api.acragent.com to produce a result, and the values are not stored afterwards.
Never enter real patient data, or any information that could identify a real person, on any page of this website.
This is a research prototype. It is not a medical device, it makes no diagnostic claim, and nothing it displays should be used in the care of any patient.
2.5 The research assistant panel
The assistant panel on the home page runs entirely inside your browser and returns prepared answers. Nothing you type into it is transmitted to us or to any other party.
3. The ACR Companion mobile application
ACR Companion is distributed privately to named reviewers taking part in an invited evaluation. It is not offered for public download. This part of the policy is the same notice that appears inside the application itself, under “Privacy and Cookies”.
3.1 Cookies
The application uses no cookies, web beacons or tracking technology.
3.2 What the application processes
- Collected: the label and organisation tag of your invitation; a random device identifier created by the application, held only in hashed form; the dates on which your access begins and expires; the application version; and security events and request records — time, route and outcome, never content.
- Network data: your IP address is processed by our network provider, Cloudflare, Inc., to deliver and protect the service.
- Not collected: your name, your contact details, or any patient data. Synthetic case entries are processed only to return a result and are not stored.
3.3 Purpose, basis and recipients
- Purpose
- Running and securing this invited evaluation, and recording that it took place.
- Legal basis
- Our legitimate interest in operating and securing a restricted research evaluation, and in keeping a record of it (Article 6(1)(f) UK/EU GDPR). Taking part in the evaluation is voluntary and by invitation.
- Recipients
- Cloudflare, Inc., which may process data outside your country. No other recipient.
- Retention
- Your access ends 30 days after pairing, or on revocation. Records are deleted 30 days after the evaluation ends. CRIL may amend this period.
4. Your rights
You have the right to ask us for a copy of the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable form where that applies. Write to info@acragent.com and we will reply within one month.
If you are in the European Union, the European Economic Area or the United Kingdom and you are not satisfied with our answer, you may complain to your data protection authority. In Ireland this is the Data Protection Commission, www.dataprotection.ie.
Where data is processed outside your country by the providers named above, that transfer relies on those providers' standard contractual clauses.
5. Changes to this policy
We will publish any change on this page and update the date at the top. Where a change materially affects people taking part in the evaluation, we will also tell them directly.