Privacy Policy.

We handle three very different kinds of information:

1. Consultation data. Audio captured by the doctor’s app or pendant during a consultation, and the transcripts, notes, prescriptions and insights derived from it. Audio is streamed over an encrypted connection to our transcription service and speech-recognition providers, processed in memory and not stored in our cloud. Transcripts and notes are stored encrypted on the doctor’s device and in our database in India.

2. Account and contact information. Your name, email address, phone number, and — if you join the waitlist or buy a device — shipping address and payment confirmation (payments are processed by our payment providers; we do not store card numbers).

3. Product and website analytics. Device diagnostics (battery health, firmware version, crash logs), app usage events, and standard website analytics (pages visited, browser type, approximate location from IP). Diagnostics never include your recordings or transcripts.

• Directly from you — when you create an account, join the waitlist, buy a device, contact us, or reply to our emails.
• From your device and apps — consultation data is captured by the doctor’s app or pendant after the patient consents and is processed as described above; diagnostics and usage events are sent to us only as described above.
• From our website — via cookies and similar technologies used for sign-in, preferences and analytics. You can control cookies through your browser.

• To provide, maintain and improve the Services.
• To ship devices, manage batches and invites, and provide support.
• To keep the Services safe — debugging, fraud prevention, and enforcement of our terms.
• To send you service messages, and — with your consent — product updates you can opt out of at any time.
• To comply with law.

We do not use your conversation data for any of these purposes. It is yours; our software simply runs on it locally.

The most sensitive data — what is said in the consulting room — is handled as follows:

• The app will not record until the doctor confirms the patient’s consent. The patient can withdraw it, which clears the transcript, note and prescription for that visit.
• Audio is streamed over an encrypted connection for transcription by Deepgram (India endpoint) or Sarvam AI (India), and, where enabled, Modulate (United States) for speaker separation. It is held in memory only and is not stored in our cloud.
• Notes, prescriptions and insights are drafted by OpenAI (United States) from the transcript and saved only after the doctor reviews them.
• When the cloud is unreachable, the iPhone app can transcribe on the device instead, and that audio stays on the phone.
• The full list of providers, their purpose and location is on our security page.

Hospitals deploying Synapse can enable population-level analytics — symptom patterns, early outbreak signals, prescription and medicine demand trends, and research cohort queries. When enabled:

• It is an explicit, hospital-level opt-in, disclosed to the clinicians using the devices. It is never on by default.
• Analytics are computed from aggregated, de-identified data on the hospital's own deployment. Individual conversations and identifiable records are not included.
• The hospital is the data fiduciary for research outputs, and formal research use requires the approvals applicable to it — including institutional ethics committee clearance under ICMR guidelines.
• Aggregated insights are never sold, never shared outside the hospital that generated them, and never used to train models outside that hospital's deployment.

A wearable that listens raises an obvious question: what about everyone else in the room? Our answers:

• The pendant has a visible capture indicator and a hardware mute switch that cuts the microphone entirely.
• You can delete any conversation — or everything — at any time.
• You are responsible for using Synapse lawfully. Recording laws and consent requirements vary by state and country; in many places you must inform the people you record. Do not use Synapse where recording is prohibited.

We share account and analytics information only with:

• Service providers who help us run the business — hosting, payments, shipping, email, analytics — under contracts that limit their use of your data to providing services to us.
• Authorities, where required by applicable law or valid legal process.
• A successor, if we are involved in a merger, acquisition or asset sale — with notice to you.

Consultation data is shared only with the hospital that the doctor works for and with the speech and AI providers listed on our security page, solely to transcribe and draft notes. We do not sell personal data.

Transcripts, notes and prescriptions are stored encrypted on the doctor’s device and in our database in Mumbai, India. Some processing happens outside India: drafting by OpenAI and, where enabled, speaker separation by Modulate (both United States), and our transcription relay. Account and website data is stored with cloud providers in India and, for some providers, in other jurisdictions with appropriate safeguards. Where the Digital Personal Data Protection Act, 2023 (“DPDP Act”) or other law restricts transfers, we follow those restrictions.

• Consultation data is encrypted on the device (AES-256-GCM) and in transit (TLS), and our database is encrypted at rest.
• Each hospital’s records are separated at the database level, and only active members of that hospital can reach them.
• Access to production systems is limited, logged and reviewed.
• No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authorities as required by law.

Under the DPDP Act, 2023 and other applicable laws (including the GDPR if you are in the EEA/UK), you have the right to:

• Access the personal data we hold about you.
• Correct or update it.
• Erase it — including the one-action wipe of your device and all derived data.
• Withdraw consent at any time.
• Nominate another person to exercise your rights if you are unable to.
• Raise a grievance with us, and if unresolved, complain to the Data Protection Board of India (or your local supervisory authority).

To exercise any of these rights, write to human@wearsynapse.com. We respond within the timelines set by applicable law.

• Conversation data is retained on your device until you delete it or storage rotates it out — under your control, not ours.
• Account data is retained while your account is active and for a limited period afterwards as required for legal, tax and audit purposes.
• When you delete your account, we delete or de-identify your personal data within 30 days, except where law requires longer retention.

The Services are not directed at children under 18, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.

We will update this policy as the product and the law evolve. Material changes will be announced by email or in the app before they take effect, and the date at the top of this page always reflects the current version.

Questions, requests and grievances all start in the same place:

Grievance Officer
Shunayaverse Quantum Labs Private Limited
Rajiv Gandhi Nagar, Gachibowli, Hyderabad, Telangana 500032
human@wearsynapse.com

We acknowledge grievances within 72 hours and aim to resolve them within the timelines prescribed under the DPDP Act, 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, as applicable.