Privacy Statement

Last updated 17 August 2026

Hades Engine is a theoretical research tool — not a medical device — built for synthetic or research data only. It is not authorised for real medical records. This statement explains, plainly, what it does and does not do with your data.

WHAT THE TOOL NEVER ASKS FOR

There is no field for a name, date of birth, record or file number, address, or any other direct identifier. You label each case with a reference code you choose yourself. Please keep that code — and any free-text notes — free of identifying information: the reference and note fields store exactly what you type, so what stays out of them is up to you.

WHAT WE HOLD

• Your account — the email address you sign in with, and a phone number only if an administrator adds one. Your password is set and held by Google Firebase; we never see it or store it.
• Your inputs — the cases you build: the reference code, the cancer classification you select, biomarker measurements and their timestamps, the protocol phase, the engine's decisions, and any notes you write.
• A security log — for each action, a minimal record of who (your account identifier), what, when, and the outcome, plus a shortened IP prefix and a one-way hash of your browser string. It never contains your reference codes, measurements, notes, or email address.

HOW IT IS HANDLED

Everything travels over HTTPS. Your cases are visible only to your own account — other signed-in users cannot see them, and administrators can manage accounts but cannot view your inputs; that separation is built into the system, not just a policy. A copy of your work is also cached in your own browser so the tool stays responsive.

DELETING YOUR DATA

You can delete your account at any time from your profile, confirming by typing your own email address. This removes your account and erases your stored cases from our live database; once done, they cannot be retrieved through the platform — not by you, and not by us through the app.

In the interest of accuracy: a minimal security-log entry (the who / what / when above — never your inputs) is retained for audit purposes, and account deletion does not itself reach routine infrastructure backups or system logs, which expire on their own schedule.

THIRD PARTIES

The tool runs on Google Firebase (sign-in, hosting, and database) and uses Google reCAPTCHA at sign-in to deter automated access. Your browser exchanges data with these Google services as part of using the platform.