Clinik

Clinik is a product I build and run under FourB, my own software company. It’s a multi-tenant platform for clinics and physiotherapy practices, and it ships as two distinct surfaces: an iOS app that therapists and patients carry with them, and a web panel where the clinic is actually managed.

On mobile, a therapist opens their day as a calendar, completes a session in two taps and writes the note straight into the patient record; the patient sees their own appointments, requests a slot from the therapist’s real availability, follows their exercise program and rates the session afterwards. On the web side the clinic runs everything else — patients, staff, scheduling, financials and reporting. The app is live on the App Store with a 5.0 star rating.

The part I care most about is underneath. Every clinic is isolated at the database level with PostgreSQL row-level security driven by JWT claims, not by application code — a clinic simply cannot read another clinic’s rows, even if the client asks for them. Field ownership is bound per role at the service layer, so a therapist and a patient writing to the same session record can only touch the fields that belong to them. Web and mobile share types and validators from one place but keep separate UIs, because the two audiences need different things.