Legal Policies

1. Information We Collect

We collect information you provide directly and information generated through your use of our Services:

• Account Information: Name, email address, phone number, date of birth, and profile details when you create an account.
• Health & Dental Data: Photos of teeth, gums, or jaw; AI scan results; health scores; symptom descriptions; and chat messages with our AI assistant.
• Device & Usage Data: Device type, operating system, app version, IP address, browser type, and interaction logs.
• Location Data: Approximate location (with your consent) to help you find nearby dentists.
• Payment Information: Billing details processed securely through third-party payment providers. We do not store full credit card numbers.

2. How We Use Your Information

We use your information to:

• Provide AI-powered oral health analysis and personalized insights
• Operate, maintain, and improve our Services and AI models
• Connect you with verified dental professionals
• Send service notifications, appointment reminders, and health tips
• Process subscriptions and manage your account
• Detect fraud, ensure security, and comply with legal obligations
• Conduct anonymized research to improve dental AI accuracy

3. Legal Basis for Processing

Depending on your jurisdiction, we process personal data based on:

• Your consent (e.g., uploading dental photos, enabling location)
• Performance of our contract with you (providing the Services)
• Legitimate interests (improving our AI, preventing abuse)
• Legal obligations (healthcare regulations, law enforcement requests)

4. Data Sharing & Disclosure

We do not sell your personal health information. We may share data with:

• Healthcare Providers: When you book an appointment or choose to share your report with a dentist.
• Service Providers: Cloud hosting, analytics, payment processing, and customer support vendors bound by confidentiality agreements.
• Legal Authorities: When required by law, court order, or to protect rights and safety.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with continued protection of your data.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide Services. Dental scan images are retained for 7 years unless you request earlier deletion, in accordance with healthcare record standards. Anonymized data may be retained indefinitely for research purposes.

6. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data
• Export your health data in a portable format
• Withdraw consent for optional data processing
• Opt out of marketing communications
• Lodge a complaint with a data protection authority

To exercise these rights, contact us at privacy@aidentist.com.

7. Security

We implement industry-standard safeguards including AES-256 encryption at rest, TLS 1.3 in transit, access controls, regular security audits, and employee training. While no system is 100% secure, we continuously work to protect your information.

8. Children's Privacy

Our Services are not intended for children under 13 without parental consent. Family accounts allow parents or guardians to manage children's profiles in compliance with COPPA and applicable laws.

9. International Transfers

If you access our Services from outside the United States, your data may be transferred to and processed in the U.S. We use Standard Contractual Clauses and other safeguards for cross-border transfers.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification. Continued use after changes constitutes acceptance.

11. Contact Us

AI Dentist, Inc.
100 Health Tech Drive, Suite 400
San Francisco, CA 94105
Email: privacy@aidentist.com

1. Acceptance of Terms

By creating an account or using AI Dentist, you confirm that you are at least 18 years old (or have parental consent), have the legal capacity to enter into these Terms, and agree to be bound by them.

2. Description of Services

AI Dentist provides AI-powered oral health screening, health score analysis, educational content, AI chat assistance, dentist discovery, and family health management tools. Our Services are designed to support — not replace — professional dental care.

3. Medical Disclaimer

4. Account Registration

You are responsible for maintaining the confidentiality of your account credentials and for all activity under your account. You agree to provide accurate information and notify us promptly of unauthorized access.

5. Acceptable Use

You agree not to:

• Use the Services for any unlawful purpose
• Upload false, misleading, or non-dental images
• Attempt to reverse-engineer, scrape, or exploit our AI models
• Interfere with the security or operation of our Services
• Share account access with unauthorized third parties
• Use automated systems to access the Services without permission

6. Subscriptions & Payments

Premium and Enterprise plans are billed on a recurring basis. You authorize us to charge your payment method at the start of each billing cycle. You may cancel at any time; cancellation takes effect at the end of the current billing period. Refunds are provided in accordance with our refund policy and applicable law.

7. Intellectual Property

All content, software, AI models, trademarks, and materials on AI Dentist are owned by AI Dentist, Inc. or its licensors. You retain ownership of photos and data you upload but grant us a limited license to process them for providing the Services.

8. User Content

You represent that you have the right to upload any content you submit. You are solely responsible for the accuracy of health information you provide. We may remove content that violates these Terms or applicable law.

9. Third-Party Services

Our Services may link to or integrate with third-party dentists, payment processors, and analytics tools. We are not responsible for third-party practices. Your use of third-party services is subject to their terms.

10. Limitation of Liability

To the maximum extent permitted by law, AI Dentist shall not be liable for indirect, incidental, special, consequential, or punitive damages arising from your use of the Services. Our total liability shall not exceed the amount you paid us in the 12 months preceding the claim.

11. Indemnification

You agree to indemnify and hold harmless AI Dentist from claims arising from your violation of these Terms, misuse of the Services, or infringement of third-party rights.

12. Termination

We may suspend or terminate your account for violation of these Terms or for any reason with notice. Upon termination, your right to use the Services ceases. Provisions that by nature should survive will remain in effect.

13. Governing Law

These Terms are governed by the laws of the State of California, without regard to conflict of law principles. Disputes shall be resolved in the courts of San Francisco County, California, unless otherwise required by law.

14. Contact

Questions about these Terms: legal@aidentist.com

1. Our Commitment

AI Dentist implements administrative, physical, and technical safeguards designed to ensure the confidentiality, integrity, and availability of electronic Protected Health Information (ePHI) that we create, receive, maintain, or transmit on behalf of covered entities and business associates.

2. Business Associate Agreements

When AI Dentist processes PHI on behalf of healthcare providers, dental clinics, or other covered entities, we enter into Business Associate Agreements (BAAs) that define our obligations and permitted uses of PHI in compliance with 45 CFR Part 160 and Part 164.

3. Administrative Safeguards

• Designated Privacy Officer and Security Officer
• Workforce training on HIPAA policies and procedures
• Risk assessments conducted annually and after significant changes
• Incident response and breach notification procedures
• Access management and minimum necessary policies

4. Physical Safeguards

• Secure data centers with SOC 2 Type II certification
• Facility access controls and visitor management
• Workstation security policies for remote employees
• Secure disposal of hardware containing ePHI

5. Technical Safeguards

• Encryption: AES-256 encryption for data at rest; TLS 1.3 for data in transit
• Access Controls: Role-based access, multi-factor authentication, automatic session timeout
• Audit Logs: Comprehensive logging of PHI access with tamper-evident storage
• Integrity Controls: Mechanisms to ensure ePHI is not improperly altered or destroyed
• Transmission Security: End-to-end encryption for data shared with healthcare providers

6. Patient Rights Under HIPAA

Patients whose PHI is processed through AI Dentist (via their healthcare provider) have the right to:

• Access their health records
• Request amendments to their records
• Receive an accounting of disclosures
• Request restrictions on certain uses and disclosures
• Receive confidential communications
• File a complaint with the provider or the U.S. Department of Health and Human Services (HHS)

7. Breach Notification

In the event of a breach of unsecured PHI, AI Dentist will notify affected covered entities without unreasonable delay and no later than 60 days after discovery, in accordance with the HIPAA Breach Notification Rule (45 CFR §§ 164.400-414).

8. Subcontractors

All subcontractors who handle PHI on our behalf are required to sign BAAs and maintain HIPAA-compliant security practices. We maintain an inventory of all vendors with PHI access.

9. HIPAA-Ready Consumer App

For individual consumers using AI Dentist directly (not through a covered entity), we apply HIPAA-aligned security standards voluntarily. Consumer health data is treated with the same encryption and access controls as PHI, even when not legally classified as PHI under HIPAA.

10. Compliance Documentation

Enterprise and clinic customers may request our HIPAA compliance documentation, security questionnaire responses, and BAA templates by contacting compliance@aidentist.com.

1. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help us remember your preferences, keep you signed in, understand how you use our Services, and improve your experience.

2. Types of Cookies We Use

3. Third-Party Cookies

We may use trusted third-party services that set their own cookies, including:

• Google Analytics: Website traffic and behavior analysis
• Stripe: Secure payment processing
• Intercom: Customer support chat
• Meta / Google Ads: Advertising measurement (with consent only)

4. Similar Technologies

We also use local storage, session storage, and device identifiers in our mobile apps for similar purposes. Pixel tags and web beacons may be used in emails to measure engagement.

5. Managing Cookies

You can control cookies through:

• Browser Settings: Most browsers let you block or delete cookies. Note that blocking essential cookies may affect functionality.
• Cookie Preference Center: Use our in-app settings to manage non-essential cookies.
• Opt-Out Links: Google Analytics opt-out: tools.google.com/dlpage/gaoptout

6. Do Not Track

Some browsers offer "Do Not Track" signals. We currently do not respond to DNT signals but honor applicable opt-out preferences under CCPA and GDPR where required.

7. Updates

We may update this Cookie Policy to reflect changes in technology or regulation. Check this page periodically for the latest version.

8. Contact

Cookie-related questions: privacy@aidentist.com