Handles all user identity. Email/password and Google SSO. Role-based routing on login. Session management and token refresh.
Used by: Login, Sign Up, Invite Accept, all authenticated pages
Primary database. Stores all structured data: users, families, parents, medications, care plans, tasks, conversations. Real-time sync for the care updates feed.
Used by: Every authenticated page. Core data layer.
Binary file storage for documents (PDFs, images). All PHI files stored here with access control enforced by Firebase Security Rules. BAA required.
Used by: Document Vault, Family Documents, Crisis Card (photo)
Powers all AI features. Intake → care plan summarization (anchor feature), session note drafting, Medicare Q&A, family communication drafting, facility matching, AI assistant. BAA required before PHI enters prompts.
Used by: Intake, Care Plan, Session Notes, AI Research, Care Updates, AI Assistant, Appointments
Subscription billing for all three tiers. Manages beta flags (free), $149/$199 practitioner plans, $39 family self-serve. Webhook events handled in FastAPI. Billing portal for practitioners.
Used by: Practitioner Sign Up, Family Sign Up, Settings, Admin Dashboard
The Python API layer. Handles all AI requests (intake → Claude, session notes → Claude, Q&A → Claude), Stripe webhooks, and any server-side business logic. Containerized, auto-scales to zero.
Used by: Intake Interview, Session Notes, AI Research, AI Assistant, billing webhooks
Browser-native voice-to-text. No third-party cost. Used in Intake Interview and Session Notes. Transcription happens client-side before sending to Claude.
Used by: Intake Interview, Session Notes
Push notifications for medication reminders, care update alerts, task due dates, and overdue flags. Works on web and mobile (PWA).
Used by: Medication Tracker, Care Updates, Task List, Appointments
Transactional emails via Brevo REST API: welcome, family invite links, password reset, care plan published, invoice delivery, document shares, appointment reminders, overdue task alerts, session summaries, system alerts. Sent from FastAPI /notifications/email.
Used by: Login, Sign Up, Care Plan, Document Vault, Session Notes, Billing Tracker, Task Manager, Medication Tracker, Care Updates Feed, Documents, Task List, Appointment Calendar, Admin Dashboard
Time-sensitive SMS alerts via Twilio REST API: medication reminders, crisis card emergency contact alerts, appointment reminders (24hr + 1hr), high-priority care updates, overdue task nudges, task assignments to family. Sent from FastAPI /notifications/sms.
Used by: Medication Tracker, Crisis Card, Appointment Calendar, Care Updates Feed, Task Manager, Task List
HIPAA audit log. Records PHI access events: document views, downloads, shares, and crisis card accesses. Required for HIPAA compliance. Not visible to end users.
Used by: Document Vault, Crisis Card, Family Documents (all PHI access points)