Privacy Policy

DentistUP is intended for dentists and adult dental learners aged 18 and older preparing for professional board and licensing examinations. The App may contain educational photographs of oral diseases, clinical findings, and radiographs that may not be suitable for minors. We do not knowingly collect personal information from anyone under 18. DentistUP does not ask users to upload patient photographs, medical records, or other patient-identifying information.

3.1 Account and Authentication Information

Firebase Authentication user ID (UID); email address; authentication provider (Apple, Google, email/password, or anonymous guest access); name or profile image made available by Apple or Google when you authorize sharing; authentication security information processed by Firebase. We do not receive or store your Apple or Google password.

3.2 Profile and Onboarding Information

Nickname; avatar selection; target examination and target date; motivation preferences; account creation and last activity date. Features marked "Coming Soon" will not collect their related data until activated.

3.3 Learning, Assessment, and Performance Information

Questions answered, completed, or reviewed; selected answers and results; Review Pool entries; topic, branch, and Mock Exam activity; accuracy, streak, and performance statistics; achievements earned; bookmarks and study-state information. This is educational performance information, not a medical record.

3.4 Credit Balances and Purchase Information

Study Credit and AI Credit balances; credit grants and usage history; content unlocked; purchase product identifier, transaction status, and receipt information; refund and restoration status. Payments are processed by Apple (App Store) or Google (Google Play). We do not receive or store your complete payment-card details. Credits do not expire but are tied to the account that received them.

3.5 AI Tutor Information

When you use an AI feature, DentistUP sends limited educational context to OpenAI (question text, answer choices, your selected answer, correct answer, explanation, branch, topic, and selected AI prompt) through a secured server-side request. We do not intentionally send your name, nickname, email, Firebase UID, payment information, or target-exam date to OpenAI. Do not enter patient information or sensitive personal information into any AI feature. AI responses may be cached by educational content identifier, not user identity. OpenAI may retain API abuse-monitoring logs for up to 30 days.

3.6 Usage and Technical Information

DentistUP uses Firebase Analytics. Technical information may include app instance identifiers, app version, device model, OS, language, approximate region inferred from IP address, screens opened, and diagnostic metadata. We do not use this for third-party advertising.

3.7 Information We Do NOT Intentionally Collect

Contacts or address-book data; precise GPS location; microphone recordings; camera captures or user-uploaded patient images; biometric identifiers; patient files or clinical records; advertising identifiers. The first public release does not display third-party advertising.

We use information to create and maintain accounts; save learning progress; deliver purchased or earned credits; process and validate purchases; prevent fraud and abuse; calculate statistics and achievements; provide AI explanations; respond to reports and support requests; measure App reliability; enforce our Terms of Use; and comply with legal obligations.

We do not sell or rent personal information. We do not share personal information for cross-context behavioural advertising. We disclose limited information to Google Firebase and Google Cloud (authentication, data storage, analytics), OpenAI (limited educational context for AI explanations), Apple and Google (purchase processing and authentication), and as required by law.

Socket Science operates from British Columbia, Canada. Our service providers may process information in Canada, the United States, and other countries. Where required, we use contractual and organizational safeguards for international transfers.

When you delete your account: your Firebase Authentication identity, profile, credit balances, purchases, progress, statistics, and activity are deleted. Shared reports may be retained in anonymized form. Shared AI answer caches are retained as they are organized by educational content, not user identity. Account deletion is permanent. Credits cannot be restored after account deletion unless required by applicable law.

We use encryption in transit and at rest, Firebase Authentication, Firestore security rules, server-side storage of AI credentials, and restricted administrative access. No system can guarantee absolute security. You are responsible for protecting your device and sign-in credentials.

You may request access, correction, or deletion of your personal information, withdraw consent, or ask questions about our practices. You may permanently delete your account through Settings. For other requests, email dr.socketscience@gmail.com. Residents of the EEA, UK, Switzerland, California, and other applicable regions have additional rights. BC residents may contact the Office of the Information and Privacy Commissioner for BC.

The first public release of DentistUP does not display third-party advertisements. We do not sell personal information and do not use personal information for targeted advertising by third parties.

We will update the effective date and provide additional notice where required when we make material changes. If a future release activates materially different data practices, this Policy will be updated before those features become available.