Version 2026-10-02 ยท Last updated 2 October 2026
Your case log — including the patient details and clinical photos you record — is stored encrypted on your phone. Our servers hold your account, your team list, and encrypted copies of cases you choose to share with colleagues, which we cannot read. We do not sell your data or use it for advertising.
Opus is a surgical logbook app provided by Dr Mateusz Gladysz in New Zealand (“we”, “us”). This policy explains what information Opus handles, where it is kept and who can read it. Opus is a documentation tool; it does not give medical advice.
The logbook itself never leaves your phone unless you share a case, export it, or make a backup:
This data is encrypted with keys held in your phone’s secure storage (the iOS Keychain, restricted to that device). It is excluded from iCloud and computer backups, and we do not back it up.
You can make an encrypted backup yourself (Settings → Backup & Restore). The backup file is sealed to a Recovery Key that only you hold, and you choose where to save it (for example in Files or iCloud Drive); it stays encrypted wherever you keep it. We never receive the backup file or the Recovery Key, and without the key nobody — including us — can open the backup. If you lose your phone or delete the app, the logbook is lost unless you have a backup and its Recovery Key, or have exported it (Settings → Export Cases).
Cases you share with colleagues — including their patient details and photos — notes attached to a dispute, and the feedback assessments you exchange with a colleague are encrypted on your phone so that only the named colleagues’ devices can open them (end-to-end encryption). We store these encrypted copies to deliver them but have no key to read them.
We do not sell your information, use it for advertising, or use your clinical records for any purpose of our own.
When you tag colleagues on a case, Opus shares the case with those who use Opus and have verified their email. The shared case includes the patient details and photos you recorded. You decide what to share and with whom: share only with members of the care team, in line with your obligations under the Health Information Privacy Code 2020 (New Zealand) or the Australian Privacy Principles, and your employer’s policies. Colleagues can confirm or dispute their involvement, and can remove a case from their inbox — it is then deleted from their phone, and later changes are no longer sent to them. Sharing new cases is not yet available to surgeons practising in Germany or Switzerland.
Our servers are in the United States. Your account information, your team list and the encrypted copies of shared cases are stored there.
Your logbook is encrypted on your phone and can be protected with a PIN or Face ID. Shared cases are end-to-end encrypted. Connections to our server use TLS. If a breach is likely to cause you serious harm, we will notify you and the relevant regulator as the law requires.
We keep your account information while your account is open. Deleting your account (Settings → Delete Account) removes your account, profile photo, team list, device keys and the encrypted copies of cases you shared (including their photos) from our servers, and erases the logbook from your phone. Backup files you saved yourself are not affected; delete them where you saved them. Copies already delivered to colleagues’ devices remain on those devices. The security log keeps an anonymous record of the deletion for up to 180 days, and encrypted backups of our database may retain deleted information until they are replaced.
You can see and change most of your details in the app. You can ask us for a copy of the personal information we hold about you, or to correct it, by emailing us. If you are not satisfied with our response, you can complain to the Office of the Privacy Commissioner (New Zealand) or the Office of the Australian Information Commissioner.
We will tell you in the app or by email before material changes take effect.
Email: [email protected]
Location: New Zealand