Clinic settings & team

The Settings page is where you manage your own profile and preferences, and where owners and admins manage the clinic itself — most importantly, the care team.

Your profile & preferences

The Profile tab holds your display name, contact details, and notification switches (patient notifications, account notifications). These are real, persisted settings:

Changes are tracked as you make them — a Save changes bar appears at the bottom of the page (and stays visible while you scroll) whenever something is unsaved.
Saved preferences are stored per user on the server (/api/settings), so they follow you across devices.

The Profile tab has a Language selector for the interface. temetro ships in five languages: English, Français (French), Soomaali (Somali), العربية (Arabic), and Deutsch (German). Picking a language asks you to confirm, then reloads the interface text.

Arabic switches the whole layout to right-to-left — the sidebar, menus, chat bubbles, and directional icons all mirror automatically, and Arabic text renders in a dedicated Arabic typeface.
Your choice is remembered on this device and also saved to your account, so it follows you when you sign in on another computer.

Deleting your account

At the bottom of the Profile tab, Delete account opens a confirmation dialog that asks for your password. Confirming permanently deletes the account, signs you out everywhere, and cannot be undone.

Managing your team

Inviting staff

Open Settings and find the care team section.
Enter the colleague's email address and choose their role.
Send the invitation. They receive a link; opening it takes them to the accept invite page, where they create an account (or sign in) and join your clinic with the role you chose.

Creating staff accounts directly

Admins can also create accounts for staff without the email round-trip: set a username and password, and hand the credentials over. Staff created this way sign in with their username instead of an email address — handy for front-desk accounts.

Managing members

From the same page you can see every member and their role. Click a team member to open their detail dialog: it shows exactly what their role lets them do (per-resource permission chips for patients, appointments, prescriptions, and tasks), and lets admins change the role, reset their password, or remove the member. Only owners and admins can manage the team; the permission matrix has the details.

Turning the AI on or off

The AI tab has an Availability section that controls the assistant for the whole clinic. Owners and admins can:

Enable AI assistant — the master switch. Turning it off disables the assistant for everyone, including owners and admins: New chat, Analysis, and the chat history all disappear and their routes are blocked.
Disable for employees only — keep the AI for owners and admins while hiding it from other staff.

The setting is clinic-wide and enforced on the server, so it can't be bypassed. Everyone still sees the rest of the AI tab (provider, model, Veil); non-admins see the current availability as a read-only note. The same tab is where you bring your own model — see AI setup & safeguards.

Records, Signing, Integrations & Developers tabs

Owners and admins see four more tabs.

Records — where patient records come from (the clinic database today, patient-owned storage later), plus import/export and retention.

Export downloads the whole clinic's patient records as a single JSON archive.
Import a temetro archive reads one back in — choose the file, review how many records it holds, then apply. Existing file numbers are skipped, so re-importing is safe.
See the settings API.

Signing — your clinic's signing key and identity, and how the patient-approval flow works. It also holds:

Join Temetro Network — connects this clinic to the Temetro Network relay so wallet apps can share records with you and receive your updates. Off by default; while off, wallet import and push are unavailable.
Patient Portal links — open, copy, or show a QR of your portal.
Clinic location editor — Use my current location fills the map coordinates from the device's GPS.

Integrations — connect external healthcare systems. Set each one's endpoint and credentials, flip it on, and use Test connection.

HL7/FHIR lab results → Sync results on the Lab page.
E-prescribing (NCPDP SCRIPT) → Send to pharmacy on a prescription.
Insurance claims (X12 837/835) → Submit claim on an invoice.
See the integrations API.

Developers — the email provider (below), the API base URL, and a preview of personal access tokens (see the API reference).

Sending email

temetro sends verification, password-reset, and invitation emails. Out of the box (no provider set) it just logs those emails to the server console — fine for local dev. To send real email, open Settings → Developers → Email provider and pick one:

Resend, Postmark, or SendGrid — paste the provider's API key and set a from address, then Send test to confirm it works.
SMTP — uses the server's SMTP_* environment variables (no key field).

This is a deployment-wide setting (email is sent while users are logged out, so it can't be per clinic). Any clinic admin can set it. For a step-by-step walkthrough see Setting up email; for the endpoints see the settings API.

When no email provider is configured

If an employee clicks Forgot password but no provider is set, temetro can't email them a link — so it alerts the clinic admins instead: a System message appears in the admins' Messages (and a bell notification), clearly marked as a system message. Opening it jumps to that employee in Care Team, where an admin can Reset password — set a new password the employee then signs in with.

Multiple clinics

A single temetro account can belong to many clinics. Use the clinic switcher in the sidebar to move between them — patients, schedules, messages, and settings are all per clinic, completely separated from one another.

Account basics

Sign in with email or username, plus your password.
Forgot password? The reset page has Email and Username tabs — use whichever you sign in with. If an email provider is set up you'll get a reset link; staff who sign in by username (and may not have a real inbox) have their clinic admin notified to set a new password instead.
Email verification is currently optional — you can sign in without verifying — but verification emails are already sent and enforcement is planned.