1. Overview & Scope

This Privacy Policy describes how DentAssist Pro ("we", "us", or "our") collects, uses, stores, and protects the personal and medical clinic management information gathered through our mobile application, web dashboard, and cloud synchronization services (collectively, the "Service").

DentAssist Pro is designed specifically for dental practitioners, dental clinic staff, and healthcare administrators to streamline appointment scheduling, patient records management, treatment planning, dental chart documentation, and billing administration.

We are committed to maintaining the highest standards of data security and confidentiality in strict compliance with the Google Play Developer Policy, international patient privacy standards, and regional healthcare data regulations.

2. Information We Collect

We collect only the minimum amount of data required to provide a reliable, high-performance dental clinic management software experience:

A. User & Clinic Account Data

• Dentist / Practitioner Profile: Full name, email address, phone number, clinic name, clinic address, and profile credentials.
• Authentication Credentials: Securely hashed passwords and authentication tokens managed over encrypted channels.

B. Clinic & Patient Management Records

• Patient Demographics: Patient names, dates of birth, contact numbers, emergency contact details, and gender (as recorded by the clinic practitioner).
• Clinical Dental Records: Odontograms, dental charts, treatment plans, diagnostic notes, prescription logs, appointments history, and procedure progress notes.
• Medical Imagery: Intraoral photographs, dental X-rays, and document scans uploaded voluntarily by dental staff for diagnostic records.

C. Diagnostic & Device Information

• Device model, operating system version, app version, network connectivity status, and crash logs to maintain software stability and resolve technical bugs.

3. Device Permissions Requested by the App

DentAssist Pro requests permissions on Android and iOS devices only when necessary to perform explicit features initiated by the user:

4. How We Use the Collected Information

Data processed through DentAssist Pro is used exclusively for legitimate operational purposes:

• Providing, operating, and maintaining the dental clinic management features.
• Synchronizing clinical data across authorized clinic devices and authorized team members.
• Facilitating appointment scheduling, reminders, and patient recall workflows.
• Generating PDF invoices, dental treatment summaries, and clinical reports.
• Providing customer support and investigating technical discrepancies.
• We never sell, rent, monetize, or disclose your clinical or personal records to third-party advertising networks or data brokers.

5. Data Retention Policy

DentAssist Pro operates with strict data minimization and clear retention lifecycles to ensure privacy compliance and data integrity.

Detailed Retention Lifecycle

• Active Accounts: User account data, patient files, treatment records, and media attachments are preserved in an encrypted state while the clinic's account subscription remains active.
• Inactive Accounts: If an account remains inactive for over 180 consecutive days without an active subscription, automated notification reminders will be sent before archiving.
• Post-Deletion Purge: When a deletion request is executed, all corresponding clinic data, patient records, backups, and user credentials undergo permanent cryptographic erasure across all production databases and automated backup systems within 30 calendar days.
• Legal & Financial Exceptions: Financial invoices, tax records, and purchase transactions may be held strictly in accordance with local statutory and financial accounting laws.

6. Data Deletion and User Rights

Under the Google Play Data Safety and User Rights Policy and global privacy laws (including GDPR and CCPA), users have the fundamental right to request complete deletion of their account, personal data, and all associated clinic management records.

We provide multiple accessible, transparent mechanisms for users to exercise their complete account and data deletion rights:

7. Data Security and Cryptographic Standards

We employ enterprise-grade administrative, technical, and physical safeguards to defend health and clinic records from unauthorized access, loss, or alteration:

• Data in Transit: All communications between the mobile application, web dashboard, and cloud servers are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS) protocols.
• Data at Rest: Database volumes, patient records, and stored attachments are encrypted with industry-standard AES-256 encryption.
• Role-Based Access Control (RBAC): Within each clinic account, access to sensitive patient health records is strictly restricted based on roles assigned by the lead administrator (e.g., Doctor, Assistant, Receptionist).

8. Third-Party Infrastructure Providers

To maintain infrastructure reliability, we may utilize trusted enterprise cloud service providers. These third parties process data under strict data protection agreements and are prohibited from using information for unauthorized purposes:

• Cloud Hosting & Database: Google Cloud Platform (GCP) / Firebase (Encrypted database storage, authentication, and secure cloud functions).
• Crash Reporting: Google Firebase Crashlytics (Anonymous stack traces for crash diagnostics).
• Transaction Processing: Regulated payment gateways for clinic software subscription billing (credit card details are never stored on DentAssist Pro servers).

9. Children's Privacy & Pediatric Dental Records

DentAssist Pro is designed solely for use by licensed dental professionals and healthcare facilities. It is not marketed toward or intended for direct use by children under the age of 18.

When pediatric dental patient records are managed within the application, such records are entered strictly by authorized dental professionals with parental or legal guardian consent in accordance with medical record-keeping practices.

10. Contact Information & Data Protection Officer

If you have questions, inquiries, or requests regarding this Privacy Policy or our data protection practices, please contact our dedicated compliance team: