The patient side turns every check-in into progress — the single biggest driver of follow-through between visits, so the practitioner gets real, consistent data at the next appointment.
LV 3
Consistent
9 / 15 logs to Level 4
🔥 5
day streak
📆 This week's challenge
4 / 5 days logged
🌱 First Step🔥 On Fire💪 Drink water ×5⭐ Double Digits · 8/10🏆 Drink water ×10
🎉 Levels (1 → Legend), 🔥 daily streaks, 🏅 badges that adapt to the plan (e.g. "Drink water ×5"), and a rotating 📆 weekly challenge. Unlocking a badge or leveling up fires a celebration — confetti + a pop-up — turning each log into a small win.
👩⚕️ Practitioner
The chiropractor / provider — sets the plan before each visit and reviews progress.
Step 1
Sign in
Secure single sign-in with the provider email (set up by the admin). One identity, no password to manage.
→
Step 2
Pick patient & visit
Select the patient, create a visit, set the appointment date, and choose the check-in frequency — any cadence (e.g. 2× per week for 10 weeks). Progress is then scored against the schedule you prescribe.
→
Step 3
Build the plan
Add assignments — nutrition, goals, exercises, stretches, posture, sleep, supplements, or a pain log. Add private clinical notes only you see.
→
Step 4
Save & send
Saving emails the patient that their plan is ready. The Provider Coach can suggest goal ideas.
→
Step 5
Review before the visit
See exactly what the patient logged, so appointment time goes to care — not catch-up.
✉️ Invite a patient. From the Case Manager (or Admin), enter the patient's name + email and hit Save & send — they get a link-only invitation to join. No health details are ever emailed; the plan is visible only after they sign in.
👥 Invite another practitioner. Any signed-in practitioner can add a colleague from the Case Manager (✉️ Invite a colleague) — or an admin can do it in Provider Setup (✉️ Register & invite). The colleague gets a link-only email to set up their own separate Case Manager; nothing is shared between practitioners.
🛡️ How the invite keeps PHI out of email
Invitations are link-only by design. The email can never contain a diagnosis, lab, condition, plan, or clinical note — this is enforced in code on the server, not just by policy.
1 · Hard allow-list
The invite function reads only to, provider, patientName, programs, and greeting. Any other field is dropped and logged — so plan items, notes, or records can't ride along, even if the code that calls it changes later.
2 · Programs are re-validated
Suggested programs are checked on the server against a fixed safe list (below). None names a diagnosis, condition, or lab. Anything not on the list is dropped and logged — a clinical goal like "lower blood pressure" physically cannot be emailed.
3 · Greeting is sanitized
The optional greeting is escaped and length-capped. Providers are warned in the form to keep it general — it's a welcome note, not a place for health details.
4 · Plan stays behind login
The actual plan, assignments, private notes, and any records are visible only after the patient signs in with their own email (secure single sign-in). They never travel by email.
Safe program tags (the only health-adjacent text allowed in an invite): Weight management · Nutrition coaching · Movement & mobility · Stress & sleep management · Massage therapy · Posture & ergonomics · Hydration & healthy habits · General wellness check-in
📄 Where it lives: server enforcement in netlify/functions/invite-patient.js (ALLOWED allow-list + SAFE_PROGRAMS validation); invite UI in provider-case.html and provider-admin.html. The only identifiers in the email are the recipient's own name and the provider's name — sent to the patient themselves, not disclosed to a third party.
📨 Recommended content to send a patient
A simple onboarding sequence to help a new patient get going. Send these as you invite them (or over their first week).
1 · Welcome
👋 Welcome to PatientPower
A warm intro to what it is and why it helps — their own private space to follow the plan you built together, see progress between visits, and reach their goals with less guesswork. Sets the tone that you're in this with them.
"Welcome aboard! I've set up PatientPower so we can stay connected between visits. Your personal care plan is waiting inside — log your progress as you go, and I'll review it before our next appointment so we make the most of your time. Looking forward to working with you!"
2 · Access
🔑 How to sign in
Secure single sign-in with their email — no password to manage. Cuts "I can't log in" friction.
3 · AI coach
🤖 Meet your Health Coach
Tap the avatar to chat, ask about any assignment, and use voice-to-text instead of typing.
4 · Motivation
🎮 Earn rewards
How to level up (1 → Legend), build a 🔥 daily streak, unlock badges, and finish the weekly challenge.
5 · Daily use
📝 How to log your plan
Quick daily check-ins on each assignment so progress is captured before the next visit.
6 · Trust
🛡️ Your privacy
Their data stays private; nothing health-related is sent by email — the plan lives behind their login.
7 · Prep
📅 Before your next visit
What to review/update so appointment time goes to care, not catch-up.
🧪 Try it — send a test message
Email works today. Text messaging is a Future feature — live as soon as carrier (Twilio toll-free) verification is approved.
📱 Send by text, too (future feature). From the Case Manager you can text any of these to a patient's cell (📱 Text a patient) — same link-only, PHI-safe rules as email. It requires the patient's consent (TCPA), auto-adds a STOP opt-out, and goes live once Twilio toll-free verification is approved (submitted — typically 1–3 business days).
📧 Plan is saved → patient is emailed → loop continues on the patient side
💖 Patient
Tracks the plan between appointments — and earns rewards for showing up.
Step 1
Get the email
"Your pre-visit plan is ready." One tap opens it.
→
Step 2
Sign in & confirm
Secure sign-in with your email — no password to remember. A one-time consent confirms the app supports your provider's care and doesn't replace it, and that notification emails carry no health details.
→
Step 3
See your plan
Your assignments, your next appointment date, and your progress — all in one place.
→
Step 4
Log as you go
Check off nutrition, goals, and rate pain/symptoms day to day. Quick and easy.
→
Step 5
Earn rewards 🎮
Build a streak, level up, and unlock badges for staying consistent.
🔥 Streaks⭐ Levels 1–7🏆 Badges
🎯 Why gamify it? Showing up daily is the hardest part of any health plan. Streaks, levels, and badges (e.g. "Drink water ×5") turn each log into a small win — which means the practitioner sees real, consistent data at the next visit.
🔐 Coming soon — Sharing health records with your provider Planned
A patient-controlled permission step so the provider (and the Provider Coach) can reason over your actual health data — only with your explicit consent.
Step 1
Patient grants permission
You choose to share specific records — labs, conditions, medications, or journal entries. Opt-in, never automatic.
→
Step 2
Scoped & time-bound
Pick exactly what to share and for how long. You can revoke access at any time.
→
Step 3
Provider gains context
The provider — and the Provider Coach AI — can factor your records into the plan and advice.
→
Step 4
Audited & revocable
Every access is logged. Turn sharing off and the provider's view closes immediately.
🛡️ Privacy first. Until a patient explicitly consents, the provider and the AI coach cannot see labs, conditions, or journal entries — they only see the plan and what the patient chooses to log. Sharing is built on a dedicated consent layer (PP_SHARE), not a back-door, and is designed to meet PHI / HIPAA handling expectations before any real patient data flows.