Nabd: a clinic platform with a patient app and a staff app
Project status: delivered to a client and completed. A complete clinic platform: server and API, a patient app, a staff app, a web administration console and public booking pages, in Arabic, English, Turkish and Albanian. Paymentery delivered the whole project, from requirements and design to development, testing and release preparation.
The problem the platform solves
Small and mid-sized clinics usually run on separate tools: an appointment book, paper files or an old program on the front-desk PC, WhatsApp messages with patients, and accounts in a spreadsheet. Patients only see their results or prescriptions by visiting or calling, and doctors and managers only see the day from the office.
The client asked for one platform covering the patient's journey from booking to invoice, giving every staff member what their role needs on their phone, with health data protected to the level its sensitivity demands.
What was built
The patient app
Booking, rescheduling, cancelling and a waitlist; the health record with visits, diagnoses, results, prescriptions and documents, digitally signed and verifiable; invoices and payments; messages with the clinic; and family management with delegation of chosen sections. Sign-in with the phone number and a biometric lock.
The staff app
One interface that adapts to the role. Doctors see their day, document visits and issue prescriptions; nurses record vital signs; the front desk runs arrivals, the queue, payments and the cash drawer; the lab enters results with critical-value alerts. Management has approvals, branches, services, prices, team, settings and reports, all on the phone.
Administration console and public booking
A web console for administration, accounting and audit, and a public booking page per clinic so patients can book without installing the app.
Privacy and security
Each clinic is isolated in the database with row-level security policies, and sensitive data is encrypted with a separate key per clinic. Permissions come from a matrix of 70 capabilities and nine roles, enforced by the server on every request.
Staff sign-in uses a second step, and every access to a medical record is written to a tamper-evident, hash-chained audit log. The apps exclude their data from cloud backup, never save photos to the gallery, and carry no ads or tracking.
Engineering
One server, several front ends
An API on Node.js with Fastify and PostgreSQL, background jobs for reminders, notifications and scheduled reports, and live updates over WebSocket. The mobile apps use React Native and Expo from one codebase for Android and iOS, the console React, and the booking pages Next.js, all in one repository with shared libraries for contracts, translations and design.
Four languages without clutter
The interface is in Arabic, English, Turkish and Albanian with correct right-to-left layout. Names and text entered by users are stored in a single field and shown as written, so nobody is asked to type them in every language.
Tests before delivery
More than 240 automated server tests cover permissions, isolation between clinics, and the financial and clinical flows, plus end-to-end tests of the core journeys. Every screen of both apps was also checked automatically on a real Android device for errors, missing text and clipped content.
Delivery stages
- Requirements: patient and staff journeys, roles and permissions, acceptance criteria.
- Design system and screens in Figma, in Arabic and English, light and dark.
- The server, database, clinic isolation and encryption.
- The patient app, the staff app, the console and the booking pages.
- Automated tests and on-device checks, fixing what they found.
- Release preparation: a demo server with fictional data, the app website and privacy policy, and store materials.
Outcome
A complete platform was delivered: patients book and follow their record and invoices from their phone, every staff member runs their work from one app according to their role, and full administration is available on mobile. A demo with fictional data lets the client and their team try every role.
Have a platform or app idea?
Describe the users and the problem you want to solve. Scope and the right technology are reviewed before work starts.