Marée - Private, Bilingual Women's Health App and Staff Console
Women's Health App for a Canadian Health Company
Designed a private, English and French cycle, fertility, pregnancy and perimenopause app for users across Canada, and built a clickable staff console for it: clinical review of every article, support tools that never see health logs, and privacy requests tracked against a 30-day deadline.
Most of our work is under NDA. Per agreement, we can share the work but not the company details - all names and identifying information shown here have been changed.
Impact
Dashboard, support inbox with ticket detail, clinical review queue, review workspace and privacy requests with a request drawer. Every ticket, review and request in the demo opens its own detail.
Support sees account-level data only: sign-in method, devices, sync status, encrypted data size, subscription and privacy choices. Never mode, symptoms or predictions. The email stays masked until a logged Reveal.
Approve is disabled when the reviewer wrote the version, the topic is outside their licensed scope, or their licence check is older than 12 months. Reviews are due in 10 working days.
Titles in English and French, 14 clinical reviews, 14 support tickets, 14 privacy requests across 9 provinces, 4 licensed reviewers and 11 staff users.
The Problem
Larchmere's research with 400 Canadian users found three reasons people abandoned other tracking apps. They did not trust what happened to their reproductive health data, especially before travelling to the United States. Predictions were shown as exact dates, so a period four days "late" caused needless worry and people using the fertile window as birth control got false confidence. And when something felt wrong, the app offered an article, not a person. French-speaking users in Quebec also found most apps only partly translated.
Our Solution
Marée encrypts health logs on the phone so Larchmere cannot read them, offers a local-only mode with no account, shows predictions as ranges with a confidence level, labels the fertile window for awareness and trying to conceive, never contraception, and hands off to a licensed virtual care partner with a summary the user approves. Every screen and article ships in English and French. Staff work in a console built around those limits.
The Challenge: Health Content and Support Without Seeing Health Data
Reproductive health data is sensitive under federal and provincial privacy law, Quebec adds its own rules, and the product must stay on the wellness side of Health Canada's medical device line. The staff console has to run content, support and privacy work without ever holding a readable copy of anyone's logs.
Privacy Law at Two Levels
PIPEDA calls for express consent for health information and a 24-month record of breaches. Quebec's Law 25 adds the most protective settings by default, a confidentiality incident register and a privacy impact assessment before data leaves Quebec. Alberta and British Columbia have their own PIPA.
Support That Cannot See Logs
Agents still have to fix sign-in, sync and subscription problems for people whose health data is end-to-end encrypted, and for local-only users who have no account at all. Resetting a sync cannot be done behind the user's back.
Clinical Content in Two Languages
Every article needs a named, licensed clinician's approval, cited sources and a review date, in English and French at the same time under Quebec's Charter of the French language. Words like "prevent pregnancy" or "diagnose" would push the app towards a medical device licence it does not hold.
Privacy Requests on a Clock
Access, correction, portability, deletion and consent-withdrawal requests arrive in the app, by email and by mail, from every province, and each must be verified, completed against a checklist and answered within 30 days, or extended with a reason.
Our Approach: From Privacy Rules to a Clickable Console
Spec and Rules Research
Mapped 9 user roles and 46 screens: 23 in the mobile app and 23 in the staff console. Defined where every piece of data lives (device, encrypted sync or server) and wrote down the rules the design follows: PIPEDA, Quebec Law 25, provincial PIPA, the Charter of the French language, Health Canada's medical device boundary, CASL, urgent-symptom guidance with 911 and 811, and WCAG 2.1 AA.
Clickable Demo on a Production UI Kit
Built the staff console's 5 key screens on a production support-desk kit: the dashboard with thresholded KPIs, work by role and a needs-attention list, the support inbox and ticket detail with safe account tools, the clinical review queue, the review workspace with side-by-side changes and a claims check, and privacy requests with days left and the regulator by province. All actions run on local state.
What a Production Build Adds
The iOS and Android app itself, with on-device encryption, recovery keys and local-only mode. Hosting in Canadian cloud regions, sign-in through Auth0 or AWS Cognito, the virtual care hand-off to a partner such as Maple or Dialogue, HealthKit, Health Connect and Oura, a CMS and translation workflow, self-hosted flags and analytics, Zendesk and Postmark. Staff single sign-on with MFA and a tamper-evident audit log.
Why It Works: Privacy Built Into Every Staff Tool
The Server Never Holds Readable Logs
Health logs are encrypted on the phone and synced as ciphertext, so no console page or role can show a person's mode, symptoms or predictions. Support works from account reference, devices, sync status and encrypted data size, and local-only users show no account data at all.
Sensitive Actions Leave a Trail
Revealing a masked email asks for a reason and is logged. Resetting sync only sends a confirmation to the user, and nothing is cleared until they confirm in the app, because Larchmere holds no key to restore the data.
Clinicians Approve Only What They Can
The review workspace shows the proposed and last approved versions side by side with changes highlighted, the sources, a claims check for words such as "diagnosis", the reviewer's licence and scope, and the other language's status. Approval needs an attestation and sets the next review, 12 months by default.
Deadlines and Thresholds Are Visible
Privacy requests show the 30-day due date with 7 or fewer days left in red, extensions with their reason and the right regulator for the province. The dashboard shows only aggregated numbers from groups of 50 or more, and flags overdue reviews, unassessed incidents and requests due within 7 days.
Related case studies
View all: Telehealth & patient apps
Nadi - Video Consult Platform with Guideline-Aware Prescribing
Designed and built a clickable ops console for an Indian telemedicine provider's video consult platform: a live queue across four specialties, every consult with its guideline evidence and signed e-prescription, refunds within role limits, and prescribing flags raised when a doctor tries a medicine the Telemedicine Practice Guidelines do not allow.
Pistill - E-Rezept Redemption, Pharmacist Release and Home Delivery Console
Designed and built a clickable pharmacy operations console for a pharmacist-owned group in northern Hesse with a mail-order permit: one queue for E-Rezepte from every channel, a validation workbench with substitution and co-payment rules, a pharmacist release step, and a cold-chain board for fridge medicines.
Enterprise Software Engineering - Human + AI
Contact Us
© 2026 - Copyright. All Rights reserved Oceanlab
Location
Global Headquarters
21 Merchant Road, 3rd Floor, Singapore 058267
Main corporate office and leadership operations
North America Office
548 Market Street, PMB 12345, San Francisco, CA 94104
Client operations and business development
India Office
402 Shivalik Shilp II, SG Highway, Ahmedabad 380015
Engineering and delivery center
Enterprise Software Engineering - Human + AI
Contact Us
Locations
Global Headquarters
21 Merchant Road, 3rd Floor, Singapore 058267
Main corporate office and leadership operations
North America Office
548 Market Street, PMB 12345, San Francisco, CA 94104
Client operations and business development
India Office
402 Shivalik Shilp II, SG Highway, Ahmedabad 380015
Engineering and delivery center
© 2026 - Copyright. All Rights reserved Oceanlab