Introduction
BioSmile AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("App") and related services.
By using BioSmile AI, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the App.
Information We Collect
Information You Provide
- Account Information: Name, email address, phone number, and professional credentials when you create an account.
- Patient Data: Patient names, contact information, medical history, dental records, treatment plans, and clinical notes entered by authorized dental professionals.
- Dental Imaging: Intraoral photographs, X-ray images, panoramic radiographs, and 3D scan files (.stl, .ply, .obj) uploaded through the App.
- Clinic Information: Clinic name, address, operating hours, and staff details.
Information Collected Automatically
- Device Information: Device type, operating system version, unique device identifiers, and mobile network information.
- Usage Data: Features accessed, time spent in the App, crash reports, and performance data.
- Log Data: IP address, browser type, pages visited, and timestamps for security and analytics purposes.
Important: We do NOT collect or store biometric data, facial recognition data, or any data from device sensors beyond what is explicitly described above.
How We Use Your Information
We use the information we collect for the following purposes:
- To provide, maintain, and improve the App's functionality and services.
- To enable dental professionals to manage patient records, treatment plans, and appointments.
- To generate PDF reports, invoices, and clinical documentation.
- To facilitate secure file sharing between dental professionals and laboratories.
- To send appointment reminders and notifications (with your consent).
- To provide customer support and respond to inquiries.
- To detect, prevent, and address technical issues and security threats.
- To comply with legal obligations and regulatory requirements.
Data Storage & Security
We take the security of your data seriously and implement industry-standard measures to protect it:
- Encryption: All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption.
- Infrastructure: Data is stored on Supabase (powered by AWS) with SOC 2 Type II compliance.
- Access Control: Role-based access control (RBAC) ensures only authorized personnel can access specific data.
- Authentication: Secure authentication with session management and automatic token refresh.
- File Storage: Medical files and images are stored in private, access-controlled storage buckets with signed URL access.
Data Residency: Your data is stored in secure data centers. We do not transfer personal data to third countries without adequate safeguards.
Data Sharing & Disclosure
We do not sell, trade, or rent your personal information. We may share data only in the following circumstances:
| Recipient |
Purpose |
| Dental Laboratories |
Sharing case files via secure signed URLs for treatment fabrication, only when initiated by the dental professional. |
| Service Providers |
Infrastructure providers (Supabase/AWS) that process data on our behalf under strict data processing agreements. |
| Legal Authorities |
When required by law, court order, or to protect our legal rights. |
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data ("right to be forgotten").
- Portability: Request your data in a structured, machine-readable format.
- Restriction: Request limitation of processing of your personal data.
- Objection: Object to the processing of your personal data.
- Withdrawal of Consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at privacy@lumosoo.com.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
- Account Data: Retained while your account is active and for 30 days after deletion request.
- Patient Records: Retained in accordance with applicable healthcare record retention laws (typically 10 years).
- Usage Logs: Retained for up to 12 months for security and analytics purposes.
Children's Privacy
BioSmile AI is designed for use by dental professionals and is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.
Third-Party Services
The App may integrate with the following third-party services:
- Supabase: Backend infrastructure, authentication, and database services.
- Apple Push Notification Service (APNs): For delivering push notifications.
- Expo: Application framework and over-the-air update delivery.
Each third-party service has its own privacy policy governing the use of your information. We encourage you to review their respective privacy policies.
KVKK Compliance (Turkey)
For users in Turkey, we comply with the Personal Data Protection Law No. 6698 (KVKK). In addition to the rights listed above, Turkish users have the right to:
- Learn whether their personal data is being processed.
- Request information about the purpose of processing and whether data is used in accordance with its purpose.
- Know the third parties to whom personal data is transferred.
- Request compensation for damages arising from unlawful processing of personal data.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We encourage you to review this Privacy Policy periodically.
Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us: