Curably is an institution-first platform — there is no patient dashboard product. Beneficiary consent is still required for cross-org record access, but it is captured at the point of care: kiosk check-in, pharmacy counter, or provider-assisted intake.

Curably uses granular scopes — not blanket chart access. Each institution requests only the data types needed for the current interaction. Consent is org-scoped, time-bounded, and revocable.

Scopes map to record types in GET /api/records. Request minimum necessary scopes per workflow.

• Kiosk / provider device (primary) — beneficiary grants scopes after a plain-language summary at check-in (English, French, Swahili). Use auto_approve: true on POST /api/consents when capture happens on-site.
• Pharmacy counter — allergy and medication scopes granted during verified dispense (see Pharmacy integration)
• Pending + notification (optional) — when a request cannot be captured on-site, Curably can SMS/email a one-time review link. Approval completes the consent record; there is no standalone patient portal dashboard.
• Smart Consent AI — comprehension assist in the provider workspace for low-literacy contexts
• Dependent coverage — guardian grants on behalf of dependents via family_members.cura_id

{
  "org_id": "uuid",
  "subject_cura_id": "CURA-XXXX",
  "scopes": ["medications.read", "allergies.read"],
  "purpose": "Pharmacy dispense — allergy check",
  "expires_in_hours": 24
}

Consent events stream to registered webhooks — see REST API & webhooks.

• Provider-assisted revocation at facility, org admin action, or beneficiary request via support channel
• revoked_at set; active API reads return empty or 403
• EHR outbound sync jobs cancelled for that org/subject pair
• Audit log entry with actor and timestamp

Break-glass access is available for life-threatening emergencies with strict controls:

• Minimum necessary fields only (allergies, critical meds)
• Supervisor PIN or dual authorization where configured
• Automatic expiry (default 4 hours)
• Beneficiary notified post-event (SMS/email) with audit disclosure

Every consent grant, read, and revocation is written to immutable audit logs. Institutions and regulators query access history via audit exports — not through a consumer-facing patient app. This aligns with NDPR (Nigeria) and Kenya Data Protection Act requirements. See Privacy policy and Security overview.