Privacy policy

Effective 28 September 2026

This policy explains how Vantage (vantage.hypnos.one), Synapse (synapse.hypnos.one), Slate (slate.hypnos.one) and Tribulator (tribulator.hypnos.one) handle information. They are provided by Hypnos Medical Limited, Wellington, New Zealand (“Hypnos Medical”, “we”). Nexus360 has its own privacy policy and is not covered here. See also our terms of use.

In short

You don’t need an account. The only information Hypnos Medical stores is a small record when you redeem a Synapse access code (see below).
What you enter stays in your browser on your device, unless you choose to back it up, sync it, or use an optional feature that sends it to a service named below.
Those transfers go directly from your device to that service. Hypnos Medical never sees them.
There are no analytics, advertising or tracking in any of these products.

What Hypnos Medical collects

Very little. The products run in your browser. We have no user accounts, no database of users and no analytics, so we don’t receive your name, your email address, your patients’ information, your research library or how you use the products. The one exception is a Synapse access-code redemption record, described under Synapse.

The products are delivered by hosting providers: GitHub Pages (Vantage, Slate and Tribulator) and Vercel (Synapse and hypnos.one). Like most websites, these providers may keep standard access logs, such as IP addresses and browser details, under their own privacy policies. We don’t use these logs to identify or track anyone.

Vantage

Vantage is a reference and calculator tool. Nothing you enter (such as a patient’s age or weight for a dose calculation) is stored or sent anywhere; it stays in the page and is gone when you close it.

The optional cryptic-crossword clue fetches a random clue from a public website (cryptics.georgeho.org); no information about you is sent with it. Links to external guidelines and resources take you to other websites, which have their own privacy policies.

Synapse

Synapse is a simulator for teaching. Nothing you do in a simulation is stored or sent anywhere.

Resources. The Resources tab loads its list of teaching resources from our database provider, Supabase. No information about you is sent, other than what any web request carries (such as your IP address).
Access codes. If you redeem an access code, Synapse sends the code to our redemption service (hosted by Supabase). We record which code was redeemed, when, when your access ends, a random identifier created by your browser, and your browser type (user agent). We use this only to manage access and to spot a code that has been shared beyond its intended group. We don’t record your name or email address.
On your device. Synapse keeps that random identifier and your access token in your browser so access keeps working offline until it expires.
How long we keep it. Redemption records are kept while the access code they belong to exists, and deleted with it.

Slate

Information stored on your device

Slate stores the patient records you enter (acute referrals, pre-assessments and follow-ups), your settings and your backup passphrase in your browser’s storage on your device. It is not sent anywhere unless you use one of the features below.

You are responsible for the patient information you choose to enter, and for using Slate in line with your obligations, including the Health Information Privacy Code 2020 and your employer’s policies. Hypnos Medical does not collect or hold that information.

Encrypted backups

Backups contain your patient records and your Slate settings, including your Anthropic API key if you’ve entered one.
They are encrypted on your device with AES-256-GCM, using a key derived from your passphrase, before they are saved to a file or sent to Google Drive.
Your passphrase stays on your device. It is never included in a backup and never sent anywhere, so neither Google nor Hypnos Medical can read your backups. If you lose it, the backups can’t be recovered.

AI document import (optional)

If you switch on AI features and add your own Anthropic API key, Slate can extract details from a clinical document you choose (a PDF or image). The document, which may contain patient information, is sent directly from your device to Anthropic’s API using your key, under your own agreement with Anthropic. Hypnos Medical never receives it. You are responsible for making sure this is appropriate for the information involved.

CSV export

The CSV export creates an unencrypted file of your records on your device. Keep it secure.

Tribulator

Information stored on your device

Tribulator stores your saved papers (titles, references, abstracts, summaries and tags), your settings and your Anthropic API key, if you add one, in your browser’s storage on your device.

Literature searches

When you search or look up a reference, your search terms or the reference details are sent directly from your device to the public databases that provide the results: PubMed (US National Library of Medicine) and Crossref. Requests to Crossref include a Hypnos Medical contact address, as Crossref asks of apps; they don’t include your details.

AI summaries and library search (optional)

If you add your own Anthropic API key, Tribulator can summarise papers and search your library by question. The paper details, and your question for a library search, are sent directly from your device to Anthropic’s API using your key. Hypnos Medical never receives them.

Google Drive sync

If you turn on Drive sync, your library is saved to your Google Drive as a file named tribulator-library.json. This file is not encrypted, so don’t store patient information in Tribulator.

Google Drive access (Slate and Tribulator)

Google Drive backup (Slate) and sync (Tribulator) are optional. If you use them:

Permission requested. The apps ask Google for the drive.file permission only. It lets each app see and change only the files it created in your Drive: slate-backup.slate for Slate and tribulator-library.json for Tribulator. The apps cannot see any other files in your Drive.
How it’s used. Only to create, read and update that one file, so you can back up, restore or sync your own data across your devices.
How it’s handled. Your device talks to Google directly. The access token Google issues is kept in your browser’s memory only, is never saved or sent to Hypnos Medical, and expires after about an hour. Hypnos Medical doesn’t receive, store or share any Google user data.
No other use. Google user data is not sold, used for advertising, transferred to anyone else, used to train AI models or read by people.
Stopping access. Switch off Drive backup in Slate or disconnect Drive in Tribulator, or remove Hypnos Medical from the third-party apps and services page of your Google Account. Your files stay in your Drive until you delete them.

Hypnos Medical’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Services outside New Zealand

The features above connect your device directly to services run by Google, Anthropic, the US National Library of Medicine, Crossref, Supabase and cryptics.georgeho.org, which are based mainly outside New Zealand. Information you choose to send to them is handled under their own terms and privacy policies. Synapse redemption records are held by Supabase on our behalf.

Browser storage and cookies

The products use your browser’s local storage (and, for Slate and Tribulator, a service worker) so that they work offline and keep your data between visits. They don’t set advertising or tracking cookies.

Keeping and deleting your information

On your device. Your information stays until you delete it. In Slate, use Settings → Erase this device. For any of the products, you can also clear the site’s data in your browser settings.
In Google Drive. Delete the app’s file from your Drive.

Apart from Synapse redemption records, Hypnos Medical holds none of your information. If you’d like a redemption record deleted, email us with the access code you used.

Children

The products are designed for health professionals, and for students and trainees aged 16 or over. They are not intended for children.

Your rights

Under the New Zealand Privacy Act 2020 you can ask to see or correct personal information an agency holds about you. Apart from Synapse redemption records, Hypnos Medical holds no personal information from these products, but you’re welcome to contact us with any question.

If you have a concern about how your privacy has been handled, please contact us first. You can also complain to the Office of the Privacy Commissioner.

Changes to this policy

We’ll update this page if the products change how they handle information, and change the effective date above.

Contact

Privacy Officer: Dr Kieran Gillick, Hypnos Medical Limited, Wellington, New Zealand
admin@hypnos.one