CareVault

CareVault is a privacy-first Flutter healthcare application designed around a simple principle: patients should have control over their own health information . The application allows patients to manage their health profiles and records, grant specific healthcare providers access to selected categories of information for a defined period, revoke access at any time, and review how their information has been accessed. CareVault supports three distinct roles - Patient, Provider, and Administrator . Patients manage their own records and consent decisions, providers can access only currently authorized information, and administrators handle user management, consent oversight, and formal data requests. The application emphasizes data minimization, granular consent, role-based authorization, auditable access, and Firestore-level security enforcement . From a compliance perspective, CareVault demonstrates GDPR-style privacy principles and HIPAA-relevant healthcare data protection and security practices , including patient-controlled consent, granular access control, auditability, data export, and controlled deletion workflows. CareVault is a portfolio and learning project and is not formally HIPAA- or GDPR-certified/compliant . It should not be used with real personal health information without additional legal, security, infrastructure, and regulatory assessment.