Your photo deserves care.

This staging privacy notice describes the intended service and its current controls. It must be reviewed before public launch.

What we collect

For a practice preview, we collect your selfie, contact details, service interests, whether you are a new or existing patient, preferred follow-up timing, processing consent, and optional marketing consent. Your selected practice receives your consultation request. The public demo is kept separate from practice leads.

How images are used

Photos are processed by our image provider to produce an illustrative cosmetic smile preview. An AI illustration, not a treatment prediction. Your dentist will discuss what is right for you. We do not use the app to diagnose conditions or determine treatment eligibility.

Storage and retention

Photos are private and opened through short-lived links. Clinic photos default to 30 days and contact details and preferences to 180 days; practices can choose shorter periods. Demo images are deleted within 24 hours. Copies already delivered to a clinic’s CRM follow that clinic’s policies. Provider and backup retention may differ and must be documented before launch.

Your choices

Promotional consent is optional. Contact your practice to request deletion or stop marketing. For platform questions, contact bzuraik@gmail.com.

Practice reporting

We count when a practice widget is visible or opened using a random, short-lived journey identifier. These reporting records do not contain your name, contact details, photograph or browsing history. We retain them for up to 90 days. Practice reports also summarize consultation requests, completed previews and booking-link clicks from existing service records. A booking-link click does not confirm an appointment.

Optional website analytics

On our public homepage, Google Analytics loads only if you choose Allow analytics. It measures homepage visits and selected marketing clicks, not completed subscriptions or clinical outcomes. We do not send your selfie, contact form fields, clinic dashboard activity or URL query parameters to Google Analytics. Advertising signals and automatic form tracking are disabled. You can decline or withdraw permission using Cookie preferences on the homepage. Withdrawing stops future collection; existing analytics cookies may remain until they expire or you clear them in your browser.

Google processes the analytics data, including technical connection information. Analytics may be processed outside Canada. Declining analytics does not prevent you from using the service.

Preventing automated abuse

We use Vercel BotID to check browser and request signals before accepting photos or starting previews. This security check helps prevent automated abuse. Photos and form answers are not included in the BotID verification request.

We also limit attempts by network, practice and contact details using keyed identifiers. These checks help limit abuse; they do not verify that a phone number or email address belongs to the person submitting it.

Service providers

Cloudflare hosts the application and private media, Supabase provides the database and authentication, Stripe processes subscription payments, and configured AI and email providers process the data needed for their services. Canadian database hosting does not mean every processing step occurs in Canada.