Clinical records that never leave your clinic.
MediVault is an Android records system for private practices. Patient histories, prescriptions and reports stay encrypted on your own devices — not on ours, and not on anyone else's. It runs with no internet connection at all, because the clinics it was built for can't depend on having one.
Free for 14 days. Email admin@solvitpro.com and we'll get you set up on your own device.
Most records systems assume two things your clinic can't promise.
That the connection will be up, and that you're willing to keep patient data on someone else's server. MediVault assumes neither.
The line goes down. The clinic doesn't.
A cloud records system stops being a records system the moment the connection drops — usually while a patient is sitting in front of you. MediVault has no such dependency: every clinical function works offline, indefinitely.
Nobody else holds your patients' data.
There is no server of ours with patient records on it, because there is no copy to hold. Clinical data lives on the devices in your practice and nowhere else — which is a far simpler thing to explain to a patient than a data-processing agreement.
One subscription, not a bill per record.
Storage is your device's storage. There are no per-patient fees, no egress charges, and no bill that grows with your history. You pay for seats and that's the end of it.
Built around a consultation, not a database.
Everything here exists because a clinic asked for it — not because it rounded out a feature matrix.
Patients and visit history
Demographics, vitals, symptoms, diagnostics and prescriptions on one timeline, with every past visit a tap away during the next one.
Today's queue
A per-site waiting list your receptionist runs and the consulting room sees live. Drag to reorder, one patient in consultation at a time, no shouting down the corridor.
Prescribing with the national registry
Around 6,500 registered medicines bundled in the app — start typing a generic or brand name and it filters as you go. Anything missing, you add yourself.
Photograph the report, there and then
Capture a report against the specific diagnostic it belongs to — not loose in a folder — straight from the visit you're writing. Crop and straighten before it saves, take a long report in several parts, or attach a PDF instead. Encrypted on the device like everything else.
Say it instead of typing it
Record a consultation and have it transcribed on the phone itself — the audio never leaves the device and is never uploaded to be processed. Patient documents scan the same way, filling the intake form from a photo without a round trip to anyone's server.
This visit against the last one
Put two dated reports side by side and zoom into the same detail on each. For a report captured in parts, step through each one's sections independently — so you're comparing the part you mean to.
Make it your specialty's app
Symptoms, diagnostics and medicines arrive with sensible defaults and are yours to edit — add what you use, remove what you don't. Build your own categories too, either as quick-pick tags or as full entries with their own detail and notes.
Backups that happen without you
Set it to run daily or weekly at a quiet hour and it writes an encrypted backup to the folder you choose, keeping the last few and retiring older ones. The one task everybody means to do and nobody does.
More than one site
Consultants working across several hospitals get each site's records kept separate, with a device bound to the site it belongs to.
The parts worth asking hard questions about.
Local-first only means something if the local copy is properly protected. Here is exactly what protects it.
Encrypted at rest, with the key in hardware
The records database is encrypted on the device using SQLCipher, and the key that opens it is held in the Android Keystore — backed by the phone's secure hardware, and not extractable from it. A stolen phone is a brick without the credentials.
Every change is signed
Each edit is recorded as a cryptographically signed entry naming the device and the user that made it. Records aren't overwritten in place — they accumulate a signed history, so "who changed this, and when" always has an answer.
A tamper-evident audit trail
The audit log is hash-chained: each entry commits to the one before it. Removing or altering an entry after the fact breaks the chain, and the app checks that chain and flags it.
Roles, and a lock on the door
Admin, clinician and receptionist each see and do only what their role allows — enforced in the data layer, not just hidden in the interface. The app itself is behind a PIN, with biometric unlock if the device supports it.
Devices sync to each other, not through us
Enrol a second device and the two exchange records directly over your own network. Each device carries a certificate issued by your clinic; one that's lost or stolen can be revoked so the others stop trusting it.
The AI runs on the phone
Transcription and document scanning happen entirely on-device, using models shipped inside the app. No consultation audio and no patient document is sent anywhere for processing — there is nowhere for it to go.
What we don't claim
MediVault holds no compliance certification, and we won't imply otherwise — compliance is a property of how a practice operates, not something an app can confer. What we can tell you precisely is where your data sits and what protects it, which is what the section above is for.
One design detail worth knowing before you buy: records sync between your devices, but attached images and audio stay on the device that captured them. Large files are deliberately kept out of the sync channel. They're included in your encrypted backups, and we'd rather tell you that now than have you discover it later.
An example of how far the detail goes: ECG.
Any records app can hold a photo. Handling a rhythm strip properly is a different problem, and it's the kind we build for.
- Capture a long strip in sections, each at full resolution, instead of one distant shot of the whole thing
- Wide images open filling the screen's height and pan along their length, instead of shrinking to an unreadable ribbon
- Double-tap to actual pixels, so the 1 mm grid is shown at the resolution it was captured at
- Rotate and crop before saving, so the stored image is upright and the detail is in the trace, not the desk
- Compare two dated reports side by side, stepping through each one's sections independently
Sections are shown separately and never stitched into one continuous image. Automatic stitching can duplicate or drop a beat at the seam, and a fabricated arrhythmia is a worse outcome than a visible join.
Practices where the connection is optional.
One consultant, one device
Everything on the phone in your coat pocket, encrypted, backed up on your terms. No IT to administer and nothing to configure beyond your own PIN.
Reception and consulting room in step
A receptionist registers and queues patients on one device; the consulting room sees the queue and writes the record on another. The two stay in step over your own network.
Several hospitals, one app
Each site's patients stay separate, and a device bound to a site only ever holds that site's records — which matters when the sites are different organisations.
Start free for 14 days.
Subscriptions are billed through Google Play, monthly or yearly. Seats are staff logins; every plan includes one admin device.
Consultant Basic
5 staff seats
A solo practice or a single consulting room.
Consultant Pro
20 staff seats
A clinic with reception, nursing and more than one consulting room.
Consultant Enterprise
50 staff seats
Multi-site practices and consultants working across several hospitals.
Ask us for current pricing in your own currency. See our payment terms for billing, renewal and refund details.
The ones people actually ask.
Does it need an internet connection?
Not for clinical work. Adding patients, recording visits, prescribing, attaching reports, syncing between your own devices and taking backups all work with no connection. The app does check your licence online roughly once a month, which needs a connection briefly — and it tells you well before that matters.
What happens if I lose the phone?
The data on it is encrypted and useless without your PIN. To get your practice back you need two things kept off the device: an encrypted backup, and a recovery key you export when you set the clinic up. The app prompts you to do both, and keeps prompting until you have. If you have another device already enrolled, it still holds the records.
Where exactly is my patient data?
On the devices in your practice, encrypted, and nowhere else. We operate a licensing service that knows your email address, your device registrations and your subscription — and holds no patient data of any kind. Our privacy policy sets out the split in full.
Can I get my data out?
Yes. The app produces a full encrypted backup you control, including attached images and audio, which you can store wherever you choose. It is your data on your hardware — there is no lock-in to engineer our way out of.
What happens when a subscription ends?
You keep your records and can keep reading them. What pauses is creating new ones — new patients, visits, staff and device enrolments — until the subscription resumes. Nothing is deleted and nothing is held hostage.
Does it work on iPhone?
Not today. MediVault is Android only, and several of the things it relies on — hardware-backed key storage, on-device transcription, direct device-to-device sync — are built on Android specifics.
Try it with a week of real clinic days.
Fourteen days, free, no card. If it doesn't survive contact with your actual workflow, you've lost nothing. Write to admin@solvitpro.com and a person replies.