Accounts are created on the website and then used by the mobile app, web app and API.
Consent is recorded with date, time, IP and device context for compliance audit.