- Open issues page: a new "נושאים פתוחים" item in the side menu, with a count badge. It lists every open item (appointments, forms and records, payments), and each row opens the item. The gear button chooses what's shown and stays in sync with the web dashboard. - Pending online bookings on the calendar: requests waiting for approval appear as dashed blocks marked "ממתין לאישור". Tapping one opens the approve/reject screen. - Jump to any month: tap the month title in the calendar to pick a month and year, or tap Today. - Branch colours: when the clinic turns this on, each calendar tile shows a coloured bar for its branch. - Checkout suggests the visit: after picking a customer, checkout offers to add their appointment from the last 36 hours that hasn't been paid yet. - Charts on handwritten notes: eight ready-made face and body charts can be placed on a handwritten page, moved, resized and written over. - Camera: tap to focus in the clinical-photos camera. Medical-record photos are now kept at full resolution, so small print stays readable. - Name on invoices: customers have a new "שם לחשבונית" field. It appears on the profile, in the document list and in checkout. - Staff permissions: owners can set each employee's permissions from the employee form. Restricted staff don't see money screens or the other areas they've been closed out of. - Easier navigation: the appointment screen and the booking-review screen now have a back arrow. - Faster WhatsApp to leads: clinic name, phone and address, and the lead's details, are filled in automatically when writing to a lead. - Clearer wording: the practitioner reminder setting is now called "התראה למטפל לפני תור", to make clear it isn't the patient's reminder.

• A new Guides section with search and step-by-step instructions. • Improvements to the checkout screen and to payment details shown on documents. • Low-stock alert when a product drops below its reorder level. • Restore a deleted customer when adding one with the same phone number. • Follow-up reminders for leads. • Fixed creating a new customer from the appointment form. • Fixed a sheet that could stay stuck on screen. • Stability and performance improvements.

Added: - Improved customer profile navigation with a swipeable layout for Photos, Medical Record, Tracking, and Prescriptions. - Long-press WhatsApp messages to copy them. - Copy, cut, and paste appointments to make moving visits easier. - Added Service Packages to the customer profile. - Added the ability to issue sale documents to a third party during checkout. - Added a Leads worklist to the dashboard and improved notifications for leads and patient portal updates. Improved: - Gender is now optional and can be cleared when editing a customer. - The provider picker now shows practitioners only. - Action sheets now adjust to their content for a more natural experience. - Improved navigation when closing the camera and handling unavailable records. - Improved payment deletion confirmation and handling. - Improved tab navigation when opening a specific customer profile section. Fixed: - Fixed an issue where deleting a payment displayed technical information instead of a user-friendly message. - Fixed an issue where a deleted payment could remain visible with an active delete option. - Fixed an issue where the active tab was not automatically brought into view. - Fixed a duplicate header in the prescription editor. - Improved overall stability and navigation.

- Handwritten medical-record pages - Tasks & reminders - set the day a clinic starts paying - card terminal takes installment deals - finishing a checkout completes the appointment - per-user density setting - patient photos on appointment tiles - today's income - services and products can be limited to some branches, - customer's postal code, phone and email - nine new photo guides - Creating a document from the mobile app had never worked

Period reports Z report The HYP terminal The WhatsApp template subsystem Expenses

Prescriptions doctor summary send-time PDF snapshot **medical-record tab collapsed to a scannable timeline template store Z-credit's pinpad channel Unknown WhatsApp senders Campaigns admin Campaigns tab Online-booking hours calendar debounced patient search nextAvailableSlots Checkout Review requests platform subscription charges now carry VAT manually-created accounts are gated back into the registration funnel

Money can now leave the building. Secure payment links (spec 013) extend the shipped secure-payment form with a remote charge: a SecurePaymentLink parent entity owning 0..n z-credit sessions, a payment_request WhatsApp template with a Meta URL button, a public /p/pay/:token page that creates its card-entry session only when the customer presses Pay, a nightly expiry sweep, and a merged operator list over links and sessions — with one readiness function that names every unmet prerequisite instead of failing silently. In parallel, secure clearance moved into the checkout: a "סליקה מאובטחת" CTA on the payments step opens the z-credit flow, each successful clearance becomes a locked payment row carrying the bank approval number (new vendor-neutral SecurePaymentSession.approvalNumber, printed on the receipt), and cleared-but-unapplied sessions surface for recovery. All of the decision logic — the phase machine, the terminal-status set, the server-error mapping, the entry-point predicate — was lifted into @bizigo/api-sdk as a pure reducer plus useSecureClearance, so the new mobile clearance route (a full-screen Expo Router modal hosting z-credit in a WebView) and the web dialog make the same decisions about money. Admins got a z-credit configuration tab to provision, rotate, enable and disable accounts without touching the database. Online booking stopped borrowing the clinic's working hours: two nullable JSON columns give it its own weekly hours (NULL = inherit) and an ordered list of OPEN/CLOSE date rules over civil dates, resolved by one booking-schedule module that all four availability callers now go through, with settings cards, an OWNER gate on the writes, and a wizard that opens on a day the patient can actually pick. Pending online bookings now render as dashed blocks across every calendar view, each opening an anchored approve/reject popover with both-axis clamping and clip detection. Bookkeeping reports lost the Uniform Structure File, PCN874 and four dead export stubs end-to-end — including the never-written TaxPeriod columns — and gained a background-job monthly documents ZIP with an in-page exports list and a period summary XLSX; the surviving Open Format export was fixed against the real ITA simulator (B110 chart of accounts, numeric Bank of Israel codes in D120, a non-zero payer account number), which brought with it a shared Israeli bank registry, a bank dropdown, and end-to-end capture of the check account number. Appointments got a cheap appointmentsChangedAt watermark so the heavy list poll drops to a 5-minute backstop while cross-device latency falls to ~15s. Quiet hours now hold event automations and re-enqueue them for the release instant instead of dropping them on the floor — the bug where an "appointment booked" WhatsApp vanished without a trace. Plus new staff are hidden from online booking by default, calendar tiles hatch customer-less blocks and title them by their note, the mobile catalog sheet shows cart quantity with +/-, and the observability breadcrumb scrubbers were tightened after clinician free text reached Sentry.

Money got a spine. A new **charges ledger** (`Charge` / `ChargeLine` / `PaymentAllocation` / `ChargeAuditLog`, with a backfill migration) replaces the ad-hoc debt math: checkout, credit notes, appointment settlement and the ZCredit path all write through it, payments allocate against charges rather than documents, and **customer credit** is a spendable balance on both web and mobile — bounded, account-scoped, shown on the invoice as "credit applied / balance due", and reconciled with appointments when it's spent. Clinics that don't issue fiscal documents get a **documents-enabled toggle** that consistently hides receipts, fiscal drafts and fiscal document types across web and mobile. **Price quotes** ship as a document type of their own: six themes, a full editor, customer-less quotes, email/WhatsApp delivery, a tokenized public page, and a path straight into checkout. **Recurring appointments** land end to end — a DST-safe recurrence expander, `AppointmentSeries`, this-and-future splits, scope-aware delete, real EXDATEs for skipped occurrences, and an authoritative per-provider conflict check behind advisory locks — with UI on web and mobile. Migration off Easybizy became a product: a new **Bizigo CLI** (`apps/cli`) plus `@bizigo/easybizy-migration` drive a resumable, reviewable, task-list-based import of customers, catalog, appointments, leads, files, photos and financials, with a pre-flight that asks about every predictable problem before writing anything, and a SUPER_ADMIN console to watch runs. Commercially, Bizigo now meters itself: **plan packages, usage limits and overage** with a metric registry, nightly gauge snapshots, monthly period close, an admin usage/plans console, a public **/pricing** page, and a plan-selection step in signup. Clinically, **medical records** gained attachments (with thumbnails) and prefill templates on both platforms, and the web app gained a **clinical-photos workspace** — sessions, uploads, an annotation editor with draggable strokes, compare and sharing. **Forms** got a signature overhaul (per-role signature blocks, per-user saved staff signatures, auto-apply at submit, per-block answers) and full client-side validation of the server's own rules. Messaging can now **search inside message content** at the database level with highlighted matches, and the send pipeline was hardened for scale: at-most-once CAS claims, a dedicated campaign queue, batched sends, Twilio status callbacks moved to pg-boss, and a dry-run stress harness that surfaced a ~1% recipient drop and several campaign-resume bugs. Plus **Shabbat/holiday-aware scheduling**, **document delivery to the clinic's bookkeeper**, an **Israeli egress proxy** so Tax Authority calls stop getting geo-blocked, an **account-activity** admin view, and a broad security pass that closed several public-token endpoints leaking the customer relation graph.

Bizigo now charges its own subscription. Signup ends with a **payment step**: a plain-language billing summary (due today, free-until, prorated first charge, recurring price), coupon entry with human-readable benefit descriptions (a delayed first payment reads as extra free months), and HYP's hosted card page in an iframe — signed as a **J2 verification** so the card is validated and tokenized **without being charged**. The same step now works **natively on mobile** via a payment WebView, so a user can go from sign-up to a fully active account on the phone alone. Registration itself became **server-authoritative**: signing up issues a limited ONBOARDING-scoped session, and a `registrationStatus` query resumes the flow after refresh or re-login on either platform — with full sign-up/sign-in form parity between web and mobile. A daily cron bills due charges through the stored (KMS-encrypted) token with bounded dunning, and admins get a **Platform Billing console** (subscriptions, payments, coupons — editable until first redemption). Form builders get a **table block**: typed columns with input masks and native keyboards, per-cell prefill/lock (enforced server-side, not just in UI), drag-to-resize column widths honored end-to-end including the PDF, and container-query-driven stacking so tables are fillable and readable on phones. The **customer Forms tab** was restructured — pending requests are now visible and cancellable, signed forms open in dialogs with per-row Download/View, in-clinic signing opens in a dialog, and every form surface renders at a shared **A4-equivalent width** so screens match the printed page. WhatsApp: **6 new default templates**, templates can now be **placed on multiple surfaces** (inbox/campaigns/leads/automations) via `usages[]`, the library page was redesigned around placement chips, clinics can upload the **profile photo** customers see in chat and choose the **sender display name** before onboarding starts. Plus public **/join** and **/join/partners** pages, a clinical-capture **overlay-guide picker**, Play-compliant photo permissions, and a broad hardening pass over billing races, the payment WebView, and template provisioning.

Booking an appointment can now **send its consent and intake forms for you**. When you create an appointment, the linked forms for the chosen services appear as auto-checked checkboxes; the ones you leave checked are queued and dispatched on a short debounce, trying WhatsApp first, then email, then a shareable link. Queued sends are idempotent, cancel and re-time themselves when you edit or delete the appointment, respect and supersede manual sends, and fall back safely if dispatch fails — with a terminal path for anything left stranded. Operationally, Bizigo now reports its own errors: **Sentry** captures GraphQL, job, and webhook failures on the backend, wraps the web app in an error boundary, and captures JS errors on mobile — while deliberately staying quiet about expected auth errors and intentional GraphQL errors so the signal stays clean. The calendar now shows **Israeli holidays** (web + mobile) as day annotations with a booking warning. Mobile got a focused **performance pass**: frozen/blurred screens, memoized calendar and multi-select rows, lazy-mounted profile tabs, form validation on touch instead of every keystroke, paginated document/outstanding lists, and console-stripped release bundles. You can also record a customer's **computerized-documents consent**, **resume an in-progress checkout** for up to 24 hours (with the selected customer shown on the Items and Payments steps), rely on **visit counts** that stay correct through status changes, deletions, and payment updates, and build tags with a clearer **two-step composer** (name first, then color). Plus PDF download from the mobile document screen, a General settings page with the medical-records toggle, and admin GraphQL-operation rows that now show who initiated each call.

You can now issue documents with **genuine ITA allocation numbers**: connect the Tax Authority via OAuth in settings, and at issue time Bizigo requests a real allocation number, prints the statutory shortened number on the document, and — if the Authority refuses — lets you waive and continue with a clear, translated explanation. A per-account **admin dashboard** shows allocation attempts and verification. Documents now carry the customer's **VAT number or national ID**, with allocation falling back to the customer ID and identifiers masked in the audit trail and sanitized in the מבנה אחיד export. A new **super-admin console** lets platform admins create and fully configure accounts across every module, collect the fields each module needs, **deactivate accounts** (blocking access), and approve new signups before they can log in — the console is forced LTR with dedicated routes and a grouped sidebar. **Medical records** arrive as a dedicated customer tab and mobile screen with a composer and an appointment tag, gated by an admin module toggle. A thorough **timezone/DST audit** re-grounds public booking, the calendar, tax/Open-Format exports, VAT-period boundaries, reminders, promo scheduling, and mobile pickers in the clinic's civil time so nothing drifts around DST. Support staff get a **read-only WhatsApp inbox** in the admin console, and customers who tap **confirm / rebook / feedback** WhatsApp buttons now get an automatic acknowledgment. Day-to-day, you can **create a customer inline** from the appointment form (web + mobile), **filter customers with outstanding debt**, jump from a dashboard meeting straight to that calendar appointment, and re-send already-signed consent forms. Under the hood the unused **double-entry general ledger was removed**, `Decimal` money values are parsed at query boundaries to stop string-sum drift, and background jobs stop forwarding `undefined` options to pg-boss.

You can now run your catalog as **VAT-inclusive** — flip one toggle in bookkeeping settings and prices everywhere (catalog, checkout, documents) are treated as tax-included, with VAT extracted rather than added on top. Each document snapshots the pricing mode it was created under, and Tax Authority (Open Format / D110) exports stay VAT-exclusive as required. The **customer timeline** is now a compact, expandable feed: appointments, payments, documents, and free-text notes in one place, paginated with load-more, color-coded by type, filterable (documents have their own filter), and linkable straight to the underlying record. **Mobile checkout** was rebuilt — clearer payment steps via a method accordion, a new **PayBox** option, and the ability to record a sale with no payment (creating a customer debt). Photos from receipts sent over WhatsApp are processed more reliably: if one AI model is overloaded the system falls back to others and, when extraction genuinely can't complete, replies "try again later" instead of failing silently — and there's now a self-service WhatsApp enrollment banner on the expenses inbox. Web campaign and template editors show **localized, human-readable variable names** with a parameter picker and example previews. Under the hood: a big mobile-performance pass (faster startup, fewer re-renders, cached images), a per-platform i18n bundle split, and fixes that get PDF export and the backend container healthy in production.

Booking and form links sent by email or WhatsApp now point at the right place and open correctly. Approving an online booking is instant — it no longer waits on WhatsApp to send — and the approve-from-link page reliably shows success instead of a false "invalid link" error. Spanish customers can now confirm a booking by replying "Confirmar". WhatsApp templates imported from Twilio (which carry a language suffix) now show up in the right category with the right descriptions and link to your automations. Built-in system templates are clearly marked read-only with a helpful message instead of a confusing failure. Plus form fixes on mobile and web: clearer validation, real error messages instead of raw JSON, readable patient-info, and a working analytics trend chart.

Get instant push notifications for new online bookings and approve or decline them right inside your calendar — no separate screen. A new notification history (web + mobile) keeps every alert in one place, with an unread badge. You can now choose how far ahead appointment reminders go out, and reminders show a clear date instead of "tomorrow". Automation, WhatsApp, and timezone settings now live at the account level, so they're consistent for everyone on the team. WhatsApp templates are grouped and easier to browse, with quiet-hours that defer (not drop) reminders. Appointment status is now freely settable with helpful guidance instead of rigid rules. Plus a big round of mobile speed and stability fixes — calendars, customers, leads, forms, and bookkeeping all got smoother.

Push notifications - Get a notification on your phone the moment a customer messages you on WhatsApp - Tapping a notification opens straight to the relevant conversation Calendar & appointments - New week view — swipe left/right to move between weeks - Tap any time slot to start a new appointment with the start time pre-filled - Current-time line and a full 07:00–22:00 day, with taller, easier-to-read rows - Past appointments can no longer be edited - Hebrew (right-to-left) date and time throughout the schedule Expenses & receipts - New Expenses area with separate Inbox and Approved tabs - Review and edit scanned receipts before approving - Bulk-approve from the inbox and bulk-share approved expenses - Confirmation prompt before discarding, plus in-app file/document preview Customers - Preview customer images in-app and save them to your photos - New color picker when creating customer tags - Fixed customer profile-photo upload Across the app - Refreshed design with a new navy / electric-blue look (login, dashboard, customers, appointments, settings) - Clearable text fields — tap the × to clear an input - Forms and modals now scroll above the keyboard so fields are never hidden - App now runs in Hebrew with proper right-to-left layout from the very first launch - Validation messages now appear in Hebrew

- Bug fixes - Mobile improvements