Privacy Policy

1. Introduction

DentAI SA, Geneva, Switzerland ("we," "our," or "us") provides AI-powered visualization and productivity tools for dental professionals, and is the data controller for the processing described in this policy (except patient photos, where the uploading professional is the controller — see Section 3). This Privacy Policy explains what data we collect, how it is processed, which third-party services are involved, and what rights you have. We designed this policy to be readable — if anything is unclear, contact us at privacy@heydentai.com.

2. Information We Collect

Account Information:

• Email address
• Password (stored as a salted hash, never in plain text)
• Optional profile information (full name, role, country, age range)

Photos, Videos and Prompts:

• Photos you upload for smile transformations
• AI-generated transformation images and motion-preview videos
• The text instructions (prompts) and preset choices you submit with a generation

Usage Data:

• Transformation history, credits and preferences linked to your account
• Product analytics events (pages viewed, features used, generation success/failure)
• Device and browser information

3. Photos of Patients — Your Responsibilities and Ours

Our tools are designed for dental professionals who may upload photographs of their patients. For such photos, you act as the data controller: you are responsible for obtaining the patient's informed consent before uploading their photo, in accordance with the laws and professional rules that apply to your practice (e.g. GDPR in the EU, the Swiss FADP, HIPAA-related obligations in the US).

On our side, we commit to processing uploaded photos only to provide the service: generating the requested transformation, storing the result in your account, and nothing else. We do not use your uploaded photos to train AI models, and we do not sell or share them for advertising.

4. How Generation Works (Where Your Photos Go)

We are transparent about the processing chain. When you run a generation:

• Image transformations are processed by fal.ai, an AI infrastructure provider, currently running Google's image-editing models (Gemini / "Nano Banana" family). Your photo and the generation instructions are transmitted to fal.ai solely to produce the result, over encrypted connections.
• Motion-preview videos are processed by fal.ai running the Kling video model. The source image and motion instructions are transmitted for the same sole purpose.

fal.ai processes this data as a service provider under its own privacy policy and terms (available at fal.ai). Generated outputs are temporarily hosted by the provider for delivery, then stored in your DentAI account. We may change the underlying AI provider or model to improve quality; this policy will be updated if the processing chain changes materially.

5. Storage, Retention and Deletion

Storage: Your original photos, generated images and videos are stored in your account on Supabase (our database and storage provider), transmitted and stored over encrypted connections.

Retention: We keep your content for as long as your account exists, so you can access your history.

Deletion: You can delete any individual transformation from your History page — this permanently removes the associated original photo, generated images and videos from storage, which lets you erase a single patient's data on request without affecting the rest of your account. You can also delete your entire account at any time from Settings, which permanently removes your profile, your transformation history and all stored images and videos. Deletion can also be requested by emailing privacy@heydentai.com.

6. Analytics

We use PostHog (EU-hosted) to understand how the product is used and to improve it: which features are used, whether generations succeed, performance timing, and similar product events. Analytics events are linked to your account ID and email. We do not send your uploaded photos to our analytics provider, and we do not include the text of your custom prompts in analytics events.

7. Third-Party Services (Complete List)

• Supabase — database, authentication, and file storage (photos, videos)
• fal.ai — AI processing for image and video generation (receives photos + prompts at generation time)
• PostHog — product analytics (EU hosting; no photos, no prompt text)
• Beehiiv — newsletter delivery (receives your email address if you subscribe)
• Vercel — website hosting and content delivery

Each provider processes data under its own privacy policy. We do not sell your personal data to anyone.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encrypted data transmission (HTTPS/TLS) across the entire processing chain
• Secure password hashing
• Row-level access controls — your content is only accessible from your account
• Least-privilege service credentials on our backend

9. Your Rights

Depending on where you are located (including under GDPR and the Swiss FADP), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data and your account (self-service in Settings, or by email)
• Receive a copy of your data
• Withdraw consent for newsletter communications at any time (unsubscribe link in every email)
• Lodge a complaint with your supervisory authority

To exercise any of these rights, email privacy@heydentai.com. We respond within 30 days.

10. Cookies

We use essential cookies to maintain your session, and first-party analytics cookies (PostHog) to measure product usage. We do not use third-party advertising cookies.

11. Children's Privacy

Our services are intended for dental professionals and are not directed at users under 18. Patient photos uploaded by a professional may depict minors only where the professional has obtained consent from the parent or legal guardian.

12. Changes to This Policy

We may update this Privacy Policy from time to time — for example if we change AI providers. We will post the new policy on this page and update the "Last updated" date. For material changes affecting how photos are processed, we will notify you by email.

13. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at:

DentAI SA — Geneva, Switzerland
Email: privacy@heydentai.com