Someone asks your pharmacy for the jabs online. Before a clinician gives up a slot, Habitus checks who they are with Vultus, measures their body shape from a phone scan against a plain wall, and emails you a written opinion. No picture is ever taken.
Everything the patient does happens on their own device. Everything you receive is text and geometry.
When you switch it on, every scan starts with a Vultus face verification with liveness. Habitus records only that it passed and when. Vultus keeps no image either.
Recorded: verified · time · opaque idThe phone finds the person, traces their outline and reads 128 band widths. The frames are cleared from memory in the same breath; there is no photo to upload.
Sent: outline + band widths · 1.2 KBWaist-to-height is a ratio, so it needs no scales and no tape: NICE's central-adiposity measure from a bedroom wall. The head is replaced by a plain capsule before anything leaves the phone.
Derived: WHtR · WHR · body roundnessWhat the scan shows, what the patient declared, where they disagree, and what needs your attention with the SmPC clause cited. Emailed to the address you choose, pushed to your PMR, or read in the console.
Delivered: email · webhook · consoleThat sentence is the whole consent story, and it is true structurally, not by policy.
A triage signal that leaks into a supply decision is how a screening tool quietly becomes an unlicensed prescriber. So they are separate endpoints, engines and records.
The requester scans on their own phone. No scales, no tape, no height needed: waist-to-height and waist-to-hip are ratios, so the unknown pixels-per-centimetre cancels out.
Height is measured by the camera against two printed wall markers; weight comes from your scales. Circumferences from two silhouettes, BMI against the licensed thresholds, every rule citing its source.
Composed for the responsible pharmacist and recomposed on read, so a corrected rule reaches old records too. Sent to the address you configure, the moment the scan completes.
CYBERVIS creates your pharmacy in the admin console and hands you a secret. You choose where opinions go and whether Vultus runs first. Everything else is a link.
Set the email address that receives every opinion, and optionally an HTTPS webhook into your PMR. Both are signed and time-limited; the outline is fetched, never attached.
POST /api/settings
{ "report_email": "pharmacist@you.co.uk",
"webhook_url": "https://pmr.you.co.uk/habitus" }Create a Vultus application for your domain, paste its ID and secret, and decide whether the identity check is offered or required. It then runs at the very start of every scan.
POST /api/settings
{ "vultus": { "enabled": true, "require": true,
"app_id": "vlt_…", "app_secret": "…" } }Send the at-home link from your booking page or by SMS; open the console link on the branch tablet. The questionnaire, the scan and the opinion all run from the same API.
https://habitus.cybervis.co.uk/home?k=phs_…
https://habitus.cybervis.co.uk/console?k=phs_…We are onboarding a small number of UK pharmacies running private weight-management clinics. Clinical rules are signed off with your superintendent, calibration is fitted on your equipment, and the DPIA is completed together before the first patient.