Health Pro - Blockchain Health Records

Inspiration

Health Pro is a privacy-preserving health records app that empowers patients to securely store their medical files and selectively share them with doctors. Patients remain the true owners of their data, and doctors can only access records with explicit patient permission. Powered by the Midnight blockchain, Health Pro ensures both data privacy and verifiable access control.

Healthcare data is one of the most sensitive and heavily regulated domains (HIPAA, GDPR). Yet, patients today often have little say over who can view their information. Health Pro changes that by putting control back in the patient’s hands. While our hackathon demo showcases the core concept, the vision is to scale into hospital patient portals, insurance claim systems, and research data-sharing tools.

What it does

Health Pro is a demo app that gives patients full control over their medical records using blockchain wallets as their digital identities. Patients can upload files (PDFs, images, or text) which are encrypted and stored securely off-chain, while a reference is recorded on the Midnight blockchain. Doctors can request access through their own wallet addresses, but only the patient via their wallet, can approve or deny. Once approved, the doctor’s wallet is granted permission to view the file; if denied, access is blocked. Every action is signed with wallets and recorded on-chain, ensuring transparency, auditability, and privacy.

Demo flow:

Alice uploads her medical record (linked to her wallet).

Dr. Bob requests access using his wallet.

Alice approves the request with her wallet → Bob can view the file.

Dr. Eve tries without approval → access denied.

How we built it

[Frontend React]
       |
       |  (HTTP / WebSocket)
       v
[Backend Flask]
       |
       +--> encrypt file
       |
       +--> store in IPFS/local
       |
       +--> submit hash/reference to Midnight
       |
       +--> check access for requests
       v
[Midnight Blockchain]
       |
       +--> store record hash
       |
       +--> manage access permissions

Challenges we ran into

Time constraints: We had to scope the project down to its core demo features (upload, request, approve, and view) instead of aiming for a full healthcare platform.

Midnight integration: While Midnight provides privacy-preserving tools, our challenge was that storing files directly would still expose sensitive health data. We needed to design a hybrid model where encrypted files live off-chain while only hashes and permissions are on-chain.

Identity with wallets: Shifting from the usual username/password model to wallet-based identities meant rethinking our access control. Patients had to remain the sole owners of their data, while doctors interacted only through wallet addresses.

Frontend–backend–blockchain flow:Getting React (frontend), Flask (backend), and the Midnight blockchain to work together smoothly was tricky. We had to carefully coordinate the sequence of actions, from uploading and encrypting a file to recording the hash on-chain to verifying permissions when a doctor requests access.

Accomplishments that we're proud of

Building the entire infrastructure from scratch in just 48 hours: frontend (React), backend (Flask), and blockchain (Midnight).

Integrating wallet-based identity, ensuring that every patient and doctor interaction is tied to a verifiable cryptographic identity.

Even though the blockchain integration is still not fully functional as intended, we’re proud of the groundwork we laid and the learning we gained while bridging frontend, backend, and decentralized tech.

What we learned

We came in with little knowledge of how to connect a privacy-focused blockchain to a real-world app, but now we have a much better understanding of the Midnight architecture than we did just days ago.

What's next for Health Pro

We plan to fully integrate Midnight’s privacy features so sensitive health data stays hidden while using wallets as the core for identity and access control. Encryption will be strengthened across all record types, text, PDFs, and images to ensure complete security. Finally, we aim to scale storage into HIPAA- and GDPR-compliant systems, preparing Health Pro for real-world healthcare adoption.

Built With

• flask
• midnight
• python
• react
• sqlite