SmileScan AI Privacy Policy
Last updated: August 18, 2026 Effective: August 18, 2026
Who we are
SmileScan AI ("SmileScan", "we", "us") is operated by Dentist Owners LLC, an Oregon limited liability company, 7546 NE Shaleen St, Hillsboro, OR 97124. You can reach us at copersian9@gmail.com.
The short version
- We do not have accounts. We do not know who you are.
- Your photo is sent for analysis and comes back as a score. We never store your photo.
- Your scan history lives only on your device, and you can delete all of it at any time in Settings.
- We do not sell your data. We do not use it for advertising. We do not track you across other apps or websites.
The rest of this document is the precise version.
What we process, and why
Photos you capture
When you take a scan, the app resizes the photo on your device, strips its metadata (including any location information) by re-encoding it, and sends it to our scoring service.
Our scoring service passes the image to OpenAI's vision model, receives a structured score, and returns that score to your device. The image is never written to a database, a log, a file, or any other storage under our control at any point. It exists only in memory for the seconds the request takes.
Important, and stated plainly: OpenAI is a subprocessor, not a pass-through. Under OpenAI's standard API terms, OpenAI may retain API inputs for up to 30 days for abuse and misuse monitoring, after which they are deleted. OpenAI does not use API inputs to train its models by default. If we obtain a Zero Data Retention agreement with OpenAI, this section will be updated to say so, and the retention window becomes zero.
- Legal basis (UK/EU, GDPR Article 6(1)(a)): your consent, given on the camera consent screen before your first scan.
- Retention by us: none. The image is not retained.
- Retention by OpenAI: up to 30 days, for abuse monitoring only.
Your scan results
Your scores, the short written notes that come with them, and the dates of your scans are stored only on your device, in the app's own storage. They are excluded from device backups. We never receive a copy.
Deleting them is one tap: Settings → Delete all my data. That removes every stored scan, your streak, your plan checklist, and the on-device analytics buffer described below. It cannot be undone, and it does not require contacting us.
Uninstalling the app also removes all of it.
Face data
We do not compute, derive, or store face templates, faceprints, embeddings, or any other biometric identifier. The model returns numbers and short text about the appearance of a smile. Nothing that could identify you biometrically is created, transmitted, or kept.
This matters under laws including the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act, and the Washington My Health My Data Act. We have designed the product so that no biometric identifier is ever generated.
Usage information
The app records a small set of product events on your device: that the app was installed, that onboarding finished, that a scan started or produced a score, that a share sheet was opened, that a paywall was shown, and that a purchase or trial began.
Today, none of this leaves your device. It sits in a buffer in memory and is cleared when you delete your data or close the app. If we later connect an analytics provider, we will update this policy and our App Store privacy labels before that happens, not after.
Events never contain your photo or anything derived from it.
Purchases
If you subscribe, the purchase is handled by Apple. We never see your payment details. We use RevenueCat to tell the app whether your subscription is active, and Superwall to decide which subscription screen to show you. Both may receive a pseudonymous identifier for your installation, your subscription status, and basic device information.
Neither RevenueCat nor Superwall is active in the current version of the app. This section describes what happens once subscriptions launch, and we will keep it, and our App Store privacy labels, accurate as that changes.
Technical information our service sees
Our scoring service is a Cloudflare Worker. To rate limit abuse it processes your IP address and keeps a count of requests against a truncated, non-reversible key. We do not keep request logs containing your IP, and we do not build profiles from it. Cloudflare also processes connection information as our infrastructure provider.
Who we share information with
| Who | What they get | Why |
|---|---|---|
| OpenAI | The photo you scanned | To produce the score. Retained up to 30 days for abuse monitoring, unless ZDR applies. |
| Cloudflare | Connection information, IP | Hosting and rate limiting. |
| Apple | Your purchase | Payment processing, if you subscribe. |
| RevenueCat | Subscription status, install identifier | To tell the app whether you are subscribed. Not active in the current build. |
| Superwall | Install identifier, device basics | To choose which subscription screen to show. Not active in the current build. |
We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used under California law. The same is true under the Oregon Consumer Privacy Act.
Children
SmileScan is not directed to children under 13, and we do not knowingly collect information from them. The App Store age rating for this app is 17+.
Your rights
Because we hold no account and no server-side copy of your scans, the fastest route for every right below is the in-app control:
- Access and portability: your data is on your device, in the app.
- Deletion: Settings → Delete all my data, or uninstall the app.
- Withdraw consent: turn off camera access in iOS Settings, or delete your data. Either stops all processing.
- Objection and restriction (UK/EU): contact us at copersian9@gmail.com.
- Non-discrimination (California and Oregon): we will not treat you differently for exercising any right.
If you contact us, be aware that we cannot identify which scans are yours: we do not have them. We will still help with anything we can.
Where processing happens
We are a United States company and our scoring service runs on Cloudflare's global network. OpenAI processes requests in the United States. If you use the app from the UK or EU, your photo is transferred to the United States for the seconds scoring takes; that transfer happens with your consent, given on the camera consent screen, and our subprocessor agreements with OpenAI incorporate its Data Processing Addendum, which includes Standard Contractual Clauses. We are not established in the EU or UK and have not appointed a local representative; you can raise any concern with us directly at the contact below.
Security
Every request is sent over TLS. The scoring service holds no database. API credentials live in server-side secrets and are never in the app. The app itself bundles no secrets.
Changes
If we change how any of this works, particularly if we connect an analytics provider or change the subprocessor list, we will update this page and its "last updated" date before the change ships.
Contact
copersian9@gmail.com
Dentist Owners LLC
7546 NE Shaleen St, Hillsboro, OR 97124