When it’s someone’s health, the product has to be trusted before it can be clever. We design the experience and the data handling together.
Digital products that make a real difference to real people.
The product is clever before it is trustworthy. Someone is sharing personal information, but nobody can say clearly where it’s stored or who can see it. The interface was designed around the data model rather than around them. Trust goes first, and it doesn’t come back easily.
Users are asked for personal health information before the product has earned it. They hesitate, drop off or tell you less than you need.
The app needs a signal, a new phone and a calm moment. Your users have none of those when they actually need it.
You’re handling health data and can’t say clearly where it’s stored, who can access it or how it’s protected. That one question stalls partnerships and procurement.
What we build
Products people can rely on when it matters, built around the person using them. Privacy, access control and security are part of the design from day one.
01
Mobile and web apps for the people delivering care, built for busy shifts and patchy signal. They replace paper forms, spreadsheets and group chats.
Visit notes
Observations and assessments
Shift handovers
02
Systems that store and share health information with clear access controls, encryption where required and audit trails. Every field collected has a reason, and we document how the data is protected. As a Secureframe partner, we get you ready for ISO 27001, SOC 2 Type II and HIPAA.
Role-based access
Encrypted storage
Audit logs
Compliance readiness
03
Apps that understand movement through an ordinary phone camera, with the analysis running on the phone itself. For Pristine Condition, we used TensorFlow to assess lifting technique on the spot.
Movement assessment
Technique checks
Offline analysis
04
Tools that match people, appointments and availability without the back-and-forth. We digitised scheduling for The Home Help Company, a growing home care provider.
Appointment booking
Staff rotas
Reminders by email and text
A health and safety company with Olympic lifting heritage needed its manual-handling assessment to work on a phone, anywhere in the world. The old software had under ten percent adoption.
We built a movement-tracking app on TensorFlow that assesses lifting technique in real time through an ordinary phone camera, even with no connection. Managers get a reporting hub showing who needs more training.
Usage has grown by around 9,000% since the rebuild. The platform is now used by around 150,000 warehouse staff worldwide.
How it works
Four stages, each with something you can see and test before the next one starts.
01
Typically a few weeks
We map the users, the data you genuinely need and the risks, then agree a plan and a fixed price. If the plan isn’t right, you get your money back.
02
Typically a few weeks
We design the product and build an interactive prototype you can test with real users. Privacy choices are designed in here, not bolted on later.
03
Set by the scope
We build the app, the infrastructure and any AI features, sharing working versions as we go. Security and device testing run throughout.
04
Then ongoing
We launch with training and documentation, and you own the code and IP. Support after launch is agreed with you before the build starts.
Users come first, especially when it’s personal or health data.
We know how to handle sensitive data, secure infrastructure and compliance, from ISO 27001 and SOC 2 to HIPAA.
We can turn an idea into a usable product without losing sight of privacy and security.
Trust is part of the experience, from the interface to how data is stored and accessed.
We’ll use AI and data where they genuinely improve the product.
We’ll stay involved as the product develops.
People may be sharing personal information, relying on your product for their wellbeing, or opening it when they’re short of time and patience. They need to know their information is handled responsibly and access is controlled. So we design privacy and security in from the start, alongside the experience.
Start with the person
We design for the person using your product, not for what their data makes possible. Every piece of information has a clear reason to be collected, and privacy is considered from the outset. We never mine people’s personal data.
Make something people trust
We apply access controls so people only see what they need, and encrypt data where it’s required. The infrastructure is designed around the product, not bolted on afterwards. We explain each choice, so you can explain it to your users and partners. As a Secureframe partner, we get healthtech teams ready for ISO 27001, SOC 2 Type II, HIPAA and GDPR.
Use technology where it helps
Our work with Pristine Condition combines AI, data, product design and infrastructure in a movement-tracking product that helps prevent workplace injury. That’s the test: it does something for a person. We handle the data with the same care as the UX.
Start with the person
Make something people trust
Use technology where it helps
Yes. Health data is special category data under UK GDPR, so you need a lawful basis and an extra condition before processing it. We design access controls, encryption and audit trails around that from the start. We’ll also help you prepare a data protection impact assessment. This is general information, not legal advice.
Only the people who need to. We set access by role, so a clinician, a manager and an administrator each see what their job requires and nothing more. Sensitive actions are logged in an audit trail, and data is encrypted where required. We document the setup so you can explain it to users and partners.
Yes. As a Secureframe partner, we get healthtech products ready for ISO 27001, SOC 2 Type II, HIPAA if you sell into the US, and UK GDPR. We don’t issue the certificate. We build the controls, evidence and infrastructure an auditor looks for, alongside the product itself. That includes penetration testing and the monitoring that spots problems first.
We can help you prepare for the Data Security and Protection Toolkit. It’s the self-assessment organisations complete before accessing NHS patient data and systems. We build the technical controls it asks about and help you gather the evidence. The submission is yours to make, and we don’t hold the certification ourselves.
It can, if your users need it to. Pristine Condition’s app works with no connection at all, because a spot check might happen in a cargo hold at 35,000 feet. We store data securely on the device and sync it when a signal returns. We’ll tell you early whether offline use is worth the extra build.
We build for iPhone and Android from one codebase, and test on both during QA. Websites work on current versions of Chrome, Safari, Firefox and Edge. Pristine Condition’s AI assessment runs in real time on old handsets and new, so we design for the phone your users actually have.
It depends on the scope. LaunchPad is our fixed-price way to design, build and launch a product, with packages sized to the work. Each includes design, build, infrastructure and launch support. If the plan isn’t right after Discovery, you get your money back. The price covers everything up to launch, including developer accounts and hosting. Support after launch is agreed before you start.
Tell us who it’s for, what it has to do and what data it will handle. We’ll give you an honest view of where to start.
Our newsletter
Occasional emails about what we’re building and what we’ve learned the hard way
You may unsubscribe from these communications at any time. For information please review our privacy policy.