Skip to main content
The Patient Records Portal lets patients access their complete appointment history — including diagnoses, prescriptions, and doctor notes — through a secure, PIN-protected link they can share with any doctor.

​
How it works

1

Patient requests their records via WhatsApp

The patient sends a message to your clinic’s WhatsApp number asking for their file — for example: “ممكن ملفي” or “my records”. The AI responds with a personal link to their portal.
2

Patient sets a 4-digit PIN

If this is the patient’s first time requesting a link, the AI asks them to choose a 4-digit PIN. This PIN protects their records from unauthorized access.
3

Patient shares link and PIN with their doctor

The patient can copy the link and share it however they choose — WhatsApp, SMS, in person. They share the PIN separately to keep access secure.
4

Doctor opens the link and enters the PIN

The doctor opens patients.kashfy.site/ar/[patient-id] in any browser and enters the 4-digit PIN. Once verified, they see the patient’s full records.

​
What the portal shows

The records portal displays everything Kashfy has on file for that patient: Doctors and other authorized people can also open the portal with the PIN pre-filled in the URL:
This lets patients share a single tap-to-open link that verifies automatically on load — no manual PIN entry required.
The portal is available in Arabic (/ar/) and English (/en/). The language defaults to Arabic when the patient requests the link via WhatsApp.

​
Resetting a forgotten PIN

If a patient forgets their PIN, they can reset it directly from WhatsApp:
  1. Patient sends “نسيت الكود” or “forgot pin” to your clinic’s WhatsApp number
  2. The AI resets the old PIN and asks the patient to send a new 4-digit code
  3. Patient sends any 4 digits and the new PIN is set immediately
The old PIN is invalidated as soon as the reset is triggered. Anyone who had the old PIN can no longer access the portal until the patient shares the new one.

​
Security details

PINs are never stored as plain text. Kashfy stores a cryptographic hash of the PIN that is specific to each patient — it cannot be reversed or used across accounts.
After a correct PIN is entered, the portal session lasts 24 hours in the same browser. After 24 hours, the PIN must be re-entered.
After 5 consecutive wrong PIN attempts, the portal locks out the requester for 30 minutes. This prevents automated PIN guessing.
The portal requires no login, app download, or account creation. Access is controlled entirely by knowing the patient-specific link and PIN.

​
What patients see vs. what the clinic sees

The records portal is a read-only view for patients and doctors who access it. Nothing can be edited through the portal — clinical data is only added or modified by clinic staff and doctors through the Kashfy dashboard.
The portal link is permanent and patient-specific. If a patient wants to revoke access from someone they shared it with, they should reset their PIN. Once the PIN changes, the old PIN stops working immediately.

Conversations

View the AI conversation history for each patient.

Appointments

Manage appointments and add clinical notes.