Privacy Policy — DentFlow

DentFlow ("the App", "we", "us") is a business-management tool for dental laboratories and dental technicians. It helps lab owners and their staff track work orders, doctors, staff pay, and related business records. This Privacy Policy explains what data the App collects, why, and how it is handled.

DentFlow is not a medical device and does not provide medical or dental diagnostic advice. Any patient-related fields in the App (e.g. patient name, tooth/work notes) are business record-keeping fields entered at the discretion of the lab owner or technician for order-tracking purposes only. The App does not analyze, diagnose, or make clinical recommendations about any health condition.

1. Data We Collect

Account data

When you create an account, we collect:

  • Email address (used for authentication/login)
  • Full name, lab name, lab address, phone number (profile info you provide)
  • Profile photo (optional, if you choose to upload one)
  • Account role (lab owner or technician) and subscription tier

Business records you create

As part of normal use of the App, the account owner and their staff may enter doctor contacts, work orders (patient name, patient age, work type, materials, tooth notes, pricing, payment status, delivery dates), photos of dental work attached to an order, staff records (name, phone, role, salary/pay data, notes), and order-related notifications. This data is entered manually by you or your staff and is used solely to operate the lab-management features of the App.

Device permissions

  • Camera / Photo Library — to attach a photo of completed dental work to an order, or to set a profile picture. Photos are only accessed when you actively choose to take or select one.
  • Face ID / Touch ID — optional app-lock feature. Biometric data never leaves your device; the App only receives a yes/no authentication result from the operating system.
  • Push notifications — to notify you about order updates and task completions. We store a device push token to deliver these.

The App does not access your location, contacts, microphone, or any other device sensors.

Payment / subscription data

Subscription purchases are processed by Apple (App Store) and RevenueCat. We do not collect or store your payment card details. RevenueCat receives an anonymized app user identifier and purchase/subscription status to manage your subscription. See RevenueCat's privacy policy at revenuecat.com/privacy for details.

2. How Data Is Stored

All account and business data is stored in a Supabase-hosted PostgreSQL database and Supabase Storage. Access to business data is restricted by row-level security policies: a lab owner can only see and manage their own data; a technician/staff account can only see data scoped to the lab they are linked to, and only the subset of orders/tasks assigned to them. No other lab's data is visible to you, and vice versa.

3. Third-Party Data Processors

  • Supabase — database hosting, authentication, file storage, realtime sync.
  • RevenueCat — subscription/purchase management (anonymized app user ID, entitlement status).
  • Apple (App Store / StoreKit) — payment processing; we never receive card details.
  • Expo — delivering push notifications (device push token).

We do not sell your data to third parties, and we do not use your data for advertising or share it with data brokers.

4. Data Retention & Deletion

Your data is retained for as long as your account is active. You may delete your account and all associated data at any time from within the App (Settings → Delete account), or by contacting us at the email below. We will delete or anonymize your data within 30 days of a verified request, except where retention is required by law.

5. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data, and to withdraw consent for optional features at any time via device or in-app settings. To exercise any of these rights, contact us using the email below.

6. Children's Privacy

DentFlow is a business tool intended for use by adult dental lab professionals and is not directed at children. We do not knowingly collect data from anyone under 16.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date on this page.

8. Contact

For privacy questions, data access, or deletion requests, contact us at denyysitbelikov@gmail.com.