The key is made here
Records are encrypted on the device with a key held per profile. What reaches the server is ciphertext it has no way to open.
Swipe sideways, or use the arrows
Act II — what it does
The complete list of what the application does.
Lab results with reference bands and trends237 test definitions with canonical parameters; a cited source appears where the catalogue carries one.Shipped
Vaccinations, schedules and certificatesForecasting, dose timeline, certificate wallet, travel checklist, reminders scheduled on the device.Shipped
Vitals, symptoms and diagnostic studiesWith freshness, red-flag guidance and crisis contacts that never sit behind a paywall.Shipped
Dental chartAdult, deciduous and mixed dentition, FDI and Universal notation.Shipped
Child growth on WHO percentiles, and cycleGrowth, milestones, cycle insights, and encrypted sharing with a partner.Shipped
Family profiles and emergency cardSeparate profiles for the people you care for, each with its own key.Shipped
Senses, screening schedules and custom testsVision acuity, smell, taste, balance; screening forecasts; and tests you define yourself.Shipped
Export as a password-protected PDFGenerated offline, in your language, with your national ID and policy number left out.Shipped
MedicationsYour list and sharing work. Turning a photographed prescription into structured entries does not yet.In development
A list of who holds a copy, with a revoke buttonRevocation works today and re-cuts your key. The screen that lists every live copy is being built.In development
Documents and attachmentsNo document vault yet. Photographs attach to insurance cards only.Planned
One merged timeline across every recordActivity history and medical history exist separately. Merging them is the next core piece.Planned
Capture
Photograph a lab sheet. Nothing becomes a medical fact until you confirm it.
Text recognition runs on the device. Each line is claimed by the analyte with the longest matching alias, so a value reported as “PLT” always lands on platelet count in the right unit — with the original value and unit kept beside it, always.
Where this stops: reports in Latin script are read on the device. Cyrillic reports are not read yet.
Recognised
Platelet count
253 × 10⁹/L
As the lab wrote it: PLT 253 10^9/L
Nothing is saved until you confirm it.
Act III — what it holds
Sealed before it leaves. Not sealed after we promise.
A microphone with the wire cut
Speech recognition runs on the device with the network path disabled — not local by preference, but with no fallback by which audio could go anywhere.
It leaves in a sealed envelope
Export is an AES-256 password-protected PDF generated offline, with your national ID and policy number deliberately left out.
Where the seal stops: the sync envelope, your identity and your billing details stay readable to us. Conflict detection needs the first; running a service needs the others.
Get the application
One record, on whichever device you actually use.
iPhone and iPad
iOS 15.5 or later. Sealed on the device, synced encrypted.
Android
Android 8.0 or later. Same record, same keys.
In your browser
Open your record on a laptop. Your key is handed over from the phone by QR, and never stored on the server.
Open the web appLinux
A packaged desktop build for people who keep their archive on a machine they control.
Not built yet
Apple and the Apple logo are trademarks of Apple Inc.; App Store is a service mark of Apple Inc. Google Play and the Google Play logo are trademarks of Google LLC.
One account across all of them. The record is sealed on whichever device created it, and the key travels only when you move it yourself.
The Journal
Plain answers to the questions people arrive with.
2026-08-18 · Understanding results
What a reference range actually is
Why two laboratories can report the same blood in different units and both be right — and why the issuing lab's range always wins.
2026-08-11 · Keeping records
How to build a health history from a shoebox of paper
A practical order of work: what to photograph first, what to type by hand, and what is safe to leave undone for now.
2026-08-04 · Privacy
What end-to-end encryption does and does not cover
A short, honest map of which parts of a health record can be sealed, which cannot, and why claiming all of it overstates.
2026-07-28 · Vaccination
Reading a vaccination schedule that changed country
National schedules disagree on names, intervals and dose counts. How to line up what you had against where you live now.
2026-07-21 · Families
Keeping a record for a parent without taking over their life
Where help ends and control begins, and how to set up access the person themselves can withdraw at any moment.
2026-07-14 · Before a visit
The four things worth writing down before an appointment
Structure, not guesswork: what changed, what you take, what you reacted to, and what you want answered.