VQ Healthy
Health & Wellness
Project Overview
The Problem: Health tracking apps are either too simple (just a weight log) or too complex (medical-grade systems that require training). People trying to lose weight or manage medications need something in between — comprehensive enough to be useful, simple enough to actually use daily.
The Approach: Build a HIPAA-compliant health platform that covers the daily workflow: log weight, track calories and macros, manage medications, record vitals. Smart calculators (BMR, TDEE, macro splits) do the math so users don't have to. 7-day analytics with Chart.js show trends, not just data points. The entire UI is bilingual (English/Spanish) because the target audience includes Spanish-speaking communities.
What Was Hard: HIPAA compliance drove every architectural decision. All health data is AES-256 encrypted at rest — not just "in the database" but actually encrypted per-field so a database dump is useless without the encryption keys. Email-based 2FA with 6-digit codes adds a second layer. Audit logging captures every data access event. The compliance work was invisible to users but represented about 30% of the total development effort. PWA support for mobile installation meant careful service worker management — health data cached offline has to be encrypted too.
The Result: Three-tier SaaS pricing with Stripe billing, full PWA mobile experience, bilingual UI, and HIPAA compliance. Live at vqhealthy.com.
The Approach: Build a HIPAA-compliant health platform that covers the daily workflow: log weight, track calories and macros, manage medications, record vitals. Smart calculators (BMR, TDEE, macro splits) do the math so users don't have to. 7-day analytics with Chart.js show trends, not just data points. The entire UI is bilingual (English/Spanish) because the target audience includes Spanish-speaking communities.
What Was Hard: HIPAA compliance drove every architectural decision. All health data is AES-256 encrypted at rest — not just "in the database" but actually encrypted per-field so a database dump is useless without the encryption keys. Email-based 2FA with 6-digit codes adds a second layer. Audit logging captures every data access event. The compliance work was invisible to users but represented about 30% of the total development effort. PWA support for mobile installation meant careful service worker management — health data cached offline has to be encrypted too.
The Result: Three-tier SaaS pricing with Stripe billing, full PWA mobile experience, bilingual UI, and HIPAA compliance. Live at vqhealthy.com.
Project Details
Client
VisionQuest LLC
Category
Health & Wellness
Year
2026
Technologies
View Live Site
Start a Similar Project
PHP 8.1
MySQL
Bootstrap 5
Chart.js
Stripe
PWA
AES-256
2FA