Full-Stack SaaS
HeroGeneration
Built a HIPAA-Compliant Caregiving SaaS from Scratch
- Role
- Sole developer
- Timeline
- Architecture to deployment
- Team
- Solo
- Live link
- www.herogen.co ↗
- Solo-built
- architecture to deployment
- HIPAA
- compliant from day one
- 2
- subscription tiers
The problem
Unpaid family caregivers coordinate medications, appointments, insurance, legal documents, and care contacts across text threads and memory — usually splitting the work with people who each need different access. The client needed one platform to hold all of it, built to handle protected health information under HIPAA from day one.
My approach
Architecture & backend
Nest.js/TypeScript API over PostgreSQL on Supabase, modeling each LovedOne profile as a shared workspace with scoped caregiver access. Row-level security bounds access by role on a specific care team.
Security & compliance
Implemented a HIPAA consultant's requirements directly — OAuth with two-factor auth and session timeouts, role-scoped access enforced at the database layer, PHI handling and encryption built into schema and API.
Subscriptions & billing
Stripe for a freemium model with a paid Care+ plan per LovedOne — monthly/annual billing, trials, upgrades/downgrades, webhook-driven entitlement changes.
Real-time collaboration
Team messaging and shared notes on Stream Chat, scoped to care teams, plus two-way Google Calendar sync for appointments.
AI guidance
Built the pipeline behind personalized weekly guidance emails and the in-app AI caregiving assistant, matched to each caregiver's profile and care context.
System shape
Frontend
Next.js, TypeScript, Tailwind CSS, Shadcn
Backend
Nest.js, Node.js
Data
PostgreSQL, Supabase
AI
AI Integration
Stack
Frontend
- Next.js
- TypeScript
- Tailwind CSS
- Shadcn
Backend
- Nest.js
- Node.js
Data
- PostgreSQL
- Supabase
AI
- AI Integration
Result
A live production platform serving caregivers across a free and paid tier, handling protected health information under HIPAA with multi-user care team access, subscription billing, real-time messaging, and calendar sync in a single product.