Next.js Developer — Hims-Style Patient Intake Flow + Patient Portal (HIPAA / Stripe / EMR API)

We're a physician-founded telehealth practice (SleepScriptMD — physician-led care for insomnia) looking for a strong Next.js developer to build a clean, modern patient intake experience and portal on our own website. The design is already done. We have a finished Figma design and a detailed written specification package. We're not asking you to design this — we're asking you to build it well. Think of the core deliverable as a Hims/Hers-style intake: one question per screen, a progress bar, mobile-first, patients create an account or sign in, and payment happens AFTER the intake is complete, not before. Today this lives on Jotform and it's clunky; we want it native to the site. WHAT WE'RE BUILDING (high level — full detail in the attached PDF brief): 1. Hims-style multi-step intake flow built into SleepScriptMD.com, with account creation / sign-in that also cleanly separates new vs. returning patients. 2. A light visual refresh of the key patient-facing pages (homepage through intake completion), following the finished Figma. 3. A STRUCTURED patient messaging setup — patients reach us only through specific request types (refill review, side effect, pharmacy change, billing, etc.), and our replies go out as secure messages. This is intentionally NOT an open, endless chat box. "Structured in, controlled out." We're open to using an off-the-shelf HIPAA tool for parts of this rather than building everything custom — we'd like your take. OUT OF SCOPE for this build (please do NOT price these in): live EMR integration, existing-patient data migration, and native mobile apps. One important note: structure the intake data cleanly to a defined data model so a future EMR integration is a low-effort add-on later. Build for it, but don't build it now. STACK (already chosen — see the brief): Next.js, TypeScript, Tailwind CSS, Next.js API routes / REST, PostgreSQL + Prisma, Stripe, AWS + Cloudflare. Must be comfortable building HIPAA-conscious applications (secure auth, role-based access, audit logging, no PHI in logs). Note: this build does NOT include integrating with our EMR — that's a possible later phase. We just need the intake data structured cleanly so that future step is easy. FINISHED FIGMA DESIGN: https://www.figma.com/design/X7WBlgSAA8fveDeKSMtKnw/SleepScriptMD-%C2%A9---UI-UX?node-id=26-9531&t=g3w6kvghwpvx6RxV-1 TO BE CONSIDERED, YOUR PROPOSAL MUST INCLUDE (please don't skip these — proposals without them will be passed over): - 2 to 3 examples of dynamic, multi-step intake or onboarding flows you've personally built. Live links strongly preferred (a working URL we can click through beats screenshots). Tell us what was yours specifically. - A rough estimate for the FULL build-out: your ballpark total cost AND estimated hours. A range is fine at this stage — we understand it's before a deep-dive call. - How you'd prefer to structure the engagement (fixed-price milestones, hourly with a weekly cap, or a hybrid) and why. We have a complete spec package and are ready to move quickly with the right person. Full scope, deliverables, and what's already done are in the attached PDF brief — please read it before quoting. SCREENING QUESTIONS (add these in Upwork's screening-questions section): 1. Share 2-3 links to dynamic, multi-step intake or onboarding flows you personally built. What specifically was your work on each? 2. What is your ballpark estimate (total cost + hours) for the full build described in the attached brief? 3. Have you built HIPAA-conscious applications before? Briefly, how do you handle secure auth, access control, and keeping PHI out of logs? 4. Which parts of the structured-messaging piece would you build natively vs. recommend an off-the-shelf tool for, and which tool? 5. How soon could you start, and what's your realistic weekly availability?