Privacy policy

Your data, handled with care.

SmileSafe AI ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over your data.

1. Who we are

SmileSafe AI is operated by Viktoriia Filieieva. Our service helps individuals get a preliminary AI-based dental screening and connects them with verified independent dentists in the United States.

For privacy questions, contact us at viktoriia.f@smilesafeai.com.

2. What information we collect

Information you provide directly

• Photos of your teeth, taken at our kiosks or through our app, used for AI screening
• Contact details — name, email address, phone number
• Language preference
• Booking information — appointments you make with dentists through SmileSafe
• Optional notes you provide for your dentist (e.g. dental anxiety, allergies)
• Communications with us, including emails and support requests

Information collected automatically

• Device type, browser, and operating system
• IP address (used for security and basic analytics)
• Pages you visit and actions you take on our platform
• Approximate location (city/region) — for finding dentists near you

Information from dentists (for partner dentists only)

If you are a licensed dentist applying to join our network:

• Professional credentials — NPI number, license number, license state, years of practice
• Practice information — practice name, address, services offered
• Photo and bio for your public profile

3. How we use your information

Purpose	Information used
Run AI dental screening	Photos of teeth, language preference
Show you your scan report	Photos, AI results, contact details
Connect you with a dentist	Contact details, location, scan results
Confirm and remind you of appointments	Contact details, booking info
Verify dentist credentials	NPI, license number, professional information
Improve our AI and service	Aggregated, de-identified scan data
Security and fraud prevention	Device info, IP address, account activity
Comply with legal obligations	Whatever is required by applicable law

4. Who we share your information with

Verified dentists

When you book an appointment with a SmileSafe dentist, we share your contact details, scan results, and any notes you provided only with that dentist. They use this information to prepare for your visit.

Service providers

We use trusted third-party providers to run the platform. These include:

• Cloud hosting (e.g. Google Firebase, Vercel) — for storing your data securely
• AI services (e.g. Anthropic Claude) — for running scan analysis
• Email and notifications — to send you appointment confirmations

All providers are bound by data processing agreements and may only use your data to provide services to us.

Legal requirements

We may disclose your information if required by law, court order, or to protect the safety of our users or the public.

What we do NOT do

• We do not sell your personal information to anyone
• We do not share your photos or scan results with advertisers
• We do not use your information for advertising

5. How long we keep your data

• Photos and scan results: kept for as long as your account is active, plus 7 years after your last scan, in accordance with U.S. medical record retention practices. You can request earlier deletion.
• Contact information and bookings: kept while your account is active. Deleted within 30 days of account deletion.
• Aggregated, de-identified data: may be kept indefinitely for research and product improvement.

6. How we protect your data

We implement industry-standard security measures:

• Encryption in transit (TLS/HTTPS)
• Encryption at rest in our databases
• Strict access controls — only authorized staff and the assigned dentist can access your scan data
• Regular security reviews
• HIPAA-aligned practices for handling health information (see our HIPAA Notice)

No system is 100% secure, but we work hard to protect your information and will notify you promptly of any breach affecting your data.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Object to certain processing activities
• Withdraw consent at any time (where we rely on consent)

To exercise any of these rights, email viktoriia.f@smilesafeai.com. We respond within 30 days.

For California residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what categories of personal information we collect and the right to opt out of any sale of your data. We do not sell personal information.

For European residents (GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have rights under the GDPR and equivalent laws. Our legal bases for processing are: consent (for AI screening and marketing), contract (for delivering services you requested), and legitimate interests (for security and product improvement).

8. Children's privacy

SmileSafe AI is intended for users aged 13 and older. Children under 13 may use the kiosk only with the consent and presence of a parent or legal guardian. We do not knowingly collect personal information from children under 13 without parental consent. If you believe we have collected information from a child under 13, contact us and we will delete it.

9. International data transfers

SmileSafe AI is operated in the United States. If you access our service from outside the U.S., your information will be transferred to and stored in the United States, which may have different data protection laws than your country.

10. Cookies and tracking

We use a minimal set of cookies and local browser storage to:

• Keep you logged in
• Remember your language and theme preferences
• Measure basic, anonymous usage of the platform

We do not use third-party advertising cookies or cross-site trackers.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and update the "Last updated" date at the top of this page.