This Privacy Policy explains how the DentAI (DentalPreview) mobile application ("App") and its management panel ("Panel") collect, use, store, and share personal data. The App is a B2B tool used by dental clinics to generate AI-assisted "before/after" cosmetic simulations and short profile videos for patients.
1. Data Controller and Operator
- Clinic (Data Controller): The dental clinic using the App is the controller of patient personal/health data.
- App Operator / Data Processor: Onda Webs — technical operator of the App and infrastructure.
- Web: https://dental.ondawebs.com
- Contact / Privacy requests: destek@ondawebs.com
- General contact: info@ondawebs.com
2. Data We Collect
| Category | Description | Method |
|---|---|---|
| Identity | Patient first/last name | Entered by clinic staff |
| Contact | Patient email / phone (optional) | Form entry |
| Health / Sensitive | Patient facial photograph, AI-generated simulation output and profile video, treatment/clinical notes | In-app camera + form |
| Device | Device model, iOS version, anonymous device ID | Automatic |
| Usage | Action logs, session info, IP address | Automatic |
| Crash reports | Anonymous error logs (when enabled) | Sentry |
| App interaction analytics | Screens visited, taps and scrolls, and session replays of the App's interface. Patient photographs, AI results, patient names and ID numbers are masked on the device and never sent | Microsoft Clarity |
| Purchases | Package and credit purchase history, transaction identifiers, App Store country; the clinic ID is used as the purchase account ID | Apple App Store and RevenueCat |
3. Face Data and Biometric Processing
The core function of the App relies on processing the patient's facial photograph. For transparency, our practices are described here explicitly:
- On-device face detection (Apple Vision): During capture, the Apple Vision framework detects a face rectangle and transient facial landmarks solely for framing assistance. This raw data never leaves the device, is never stored, and is never shared. It is used only momentarily to show a "face well-framed" indicator and to derive coarse, non-identifying categorical hints (e.g. face orientation, smile width), then immediately discarded; only these hints may be sent to our server as simulation parameters.
- Live mirror (on-device only): In the optional "Mirror" view, the front camera stream is analysed on the device with Apple Vision to locate the patient's lips so that the approved simulation can be overlaid in real time. Frames and landmark data are processed in memory only; they are never recorded, stored, or transmitted. The App does not use the TrueDepth camera, ARKit face tracking, depth maps, or 3D face geometry.
- No face recognition: The App performs no face recognition or identification and creates no biometric template or face embedding.
- Facial photograph: To generate the cosmetic simulation, the patient's facial photograph is transmitted to a third-party AI service (Google Gemini) as described in Section 5, and stored as part of the clinical case record. For a profile video, the approved simulation image is sent to Google's Veo model in the same way.
The facial photograph is treated as sensitive (special-category) health data, and its processing requires explicit consent (see Section 9).
4. How We Use Data
- Generating AI-based before/after cosmetic simulations
- Generating a short profile video from an approved simulation
- Processing and verifying purchases, and applying the clinic's package and credit balance
- Treatment planning and patient communication
- Meeting legal record-retention obligations
- Detecting and fixing app errors (anonymized)
- Understanding how clinics use the App so we can improve it (product analytics, with patient data masked)
- Security against unauthorized access
We do not sell your data and do not use it for advertising.
5. Sharing with Third Parties
We share data only with the following parties, for the stated purposes:
| Recipient | Data shared | Purpose | Location |
|---|---|---|---|
| Google — Gemini API | Patient facial photograph, treatment parameters, approved simulation image | Generating the cosmetic simulation and the profile video (Veo) | USA / EU |
| Google Firebase (Cloud Storage, Auth) | Facial photograph, simulation output, account data | Cloud storage and authentication | USA |
| Sentry | Anonymous crash logs (when enabled) | Error diagnostics | USA |
| Microsoft Clarity | Clinic ID, plan type, app language, screen names, taps and interface replays with patient photographs, names and ID numbers masked on the device | Product analytics | USA |
| Apple (App Store) | Purchase and subscription status | Processing in-app purchases | USA |
| RevenueCat, Inc. | Clinic ID (purchase account ID), purchase and transaction history, App Store country, app version | Managing subscription and credit purchases | USA |
| Competent public authorities | As required | Legal obligation | Türkiye |
| Clinic staff | Case data | Carrying out treatment | — |
About payments: Payments are made through Apple; we never receive card details. RevenueCat manages the purchase records on our behalf and receives no patient data.
About Google Gemini: The facial photograph is transmitted over HTTPS/TLS to our server, and then to Google's Gemini API (image models for the simulation, Veo for the profile video). The photo is processed only to produce the requested simulation or video and is not used for any other purpose. This sharing is based on explicit consent obtained before any data is sent.
6. International Transfer
Because Google, Apple, RevenueCat and Microsoft are based in the USA, your personal data — including the facial photograph — is transferred outside Türkiye. Explicit consent is obtained for this transfer (Turkish DPL / KVKK Art. 9).
7. Retention
| Data | Retention |
|---|---|
| Facial photograph and simulation output | Kept as part of the clinical case record for the period required by applicable health regulations; deleted at the end of that period or upon a verified deletion request |
| AI processing logs | 30 days (auto-deleted) |
| Account / authentication data | While the account is active |
| Purchase records (package status, credit ledger) | While the clinic account is active; deleted together with the clinic's data |
| Anonymous crash/usage data | Standard provider periods |
Deletion can be requested in-app via Settings > Legal > "Delete my data".
8. Data Security
- All transmission is encrypted with HTTPS / TLS 1.2+
- Passwords are stored using one-way hashing
- Role-based access control via Firebase security rules
- Location/EXIF metadata is stripped from photos before upload
- Data-breach notification within 72 hours where legally required
9. Consent and Withdrawal
Before any data is sent, explicit consent is obtained through a mandatory consent screen shown at first launch. This screen clearly states the data processed and the recipient (Google Cloud / Google AI). You may withdraw consent at any time via Settings > Legal.
10. Your Rights
You have the right to access, correct, delete, and object to the processing of your data. Requests: destek@ondawebs.com
11. Children's Privacy
The App is not designed for users under 18. Consent for minor patients must be provided by a parent/legal guardian.
12. Changes
This policy may be updated. For material changes, an in-app notice is shown and renewed consent is obtained where required.
13. Contact
Questions: destek@ondawebs.com
Effective date: 2026-10-15 · Version: 1.3