Who can see what

Blumi uses a "least access by default" model.

The basics

• Participants see their own data and any resources their team has shared.
• Practitioners and support workers see only the participants they're matched with.
• Family members and carers see only the participants they're linked to.
• Org admins can see the list of participants and team members, plus billing — but not individual case notes unless they're also matched.

Sensitive content

• Journal entries — only the participant.
• Private notes — only the team member who wrote them.
• Behaviour logs — the participant's matched team.

Audit log

Every view of a participant record is logged. Org admins can review the log under Settings → Audit log.