Security

Your clients trust you with their health history. This page explains how Hypnocube protects it. For what we collect and who we share it with, see the Privacy Policy.

Signing in

• Passwords are at least 10 characters and are stored only as a hash.
• Two-factor sign-in with an authenticator app, with backup codes in case you lose your phone.
• You are signed out automatically after 3 hours without activity.
• Settings → Security & data lists every device signed in to your account, and you can sign any of them out.
• Sign-ins, failed sign-ins, password changes, exports and deletions are logged with the IP address and browser, and you can see the log in Settings.
• If your sign-in email changes, we tell the old address. Resetting your password signs out every other device.
• Sign-in attempts are rate-limited to slow down password guessing.

Client records

• Each practitioner's records are kept apart. The app only ever answers for the practitioner signed in.
• Recordings, attachments, consent scans and exports are stored in private storage with no public address. They can only be opened through signed links that expire: 5 minutes for files, 15 minutes for a recording download, and 6 hours for a client's listen page.
• Client links (intake, consent, manage, listen and unsubscribe) use long random tokens, each opens only one form, booking or recording, and they stop working when they expire or when you archive or delete the client.
• Everything a client submits without an account (bookings, intake answers, consent signatures) is rate-limited.
• Signed consent records keep a hash of the client's IP address, never the address itself.
• Client names never appear in browser tab titles, except on the client's own file.

Encryption

• All traffic to Hypnocube uses HTTPS.
• Tokens for connected calendars, and two-factor secrets, are encrypted in our database with AES-256-GCM.
• Our database and file storage providers (Render and Cloudflare) encrypt stored data at rest.
• Card details go straight to Stripe. We never see or store them.

AI

• Script writing sends Anthropic only what a script needs: the presenting issue, imagery and pronoun settings, and the client's first name unless you turn "Use name" off. Session notes and intake answers are never sent.
• We do not use your data or your clients' data to train AI models.

Your data, your control

• Export every client, note, payment and recording as CSV plus a ZIP. Export links expire after 48 hours.
• Deleting a client erases their notes, intake answers, appointments, scripts, recordings and files. Only signed consent records are kept, for 6 years, and then anonymized.
• Deleting your account erases your account, every client record and every file.
• Hypnocube has no analytics or advertising trackers, and we never sell data.

HIPAA

We do not currently sign Business Associate Agreements. HIPAA usually applies to a practice that bills health insurance electronically. If that is you, or you work inside a covered practice, talk to your advisor before you store client health information in Hypnocube.

Reporting a problem

If you think you've found a security issue, email support@hypnova.ai with "Security" in the subject. Please don't include client details. If a breach affects your data, we will tell you as the law requires.