Privacy Policy

DentistUP is an educational exam-preparation application intended for dentists and adult dental learners aged 18 and older preparing for professional board and licensing examinations. The App may contain educational photographs of oral diseases, clinical findings, radiographs, and other dental material that may not be suitable for minors. We do not knowingly collect personal information from anyone under 18. If we learn that an account belongs to a person under 18, we may close the account and delete its personal information.

DentistUP does not ask users to upload patient photographs, medical records, or other patient-identifying information.

3.1 Account and authentication information

Depending on the sign-in method you choose, we may process: Firebase Authentication user ID (UID); email address; authentication provider (Apple, Google, email/password, or anonymous guest access); name or profile image made available by Apple or Google when you authorize sharing; authentication security information processed by Firebase such as IP address, user agent, and sign-in metadata. We do not receive or store your Apple or Google password.

3.2 Profile and onboarding information

We may store: nickname and normalized nickname; avatar selection and optional profile information; target examination, custom examination name, and target examination date; motivation-message preferences; account creation date, last activity date, and onboarding completion status. Features marked as coming soon will not collect their related data until activated.

User-to-user messaging is not available in the current release. If a messaging feature is enabled in a future release, related data practices will be explained at that time. Do not submit patient information or other sensitive personal information through any support or social feature.

3.3 Learning, assessment, and performance information

To provide progress tracking and personalized study tools, we process: questions and tests opened, answered, completed, or reviewed; selected answers, correct and incorrect results, and questions marked "Not Sure"; Review Pool entries; topic, branch, Clinical Case, Visual Case, and Mock Exam activity; accuracy, completion, streak, daily activity, and aggregate performance statistics; test timestamps and time spent where the feature is enabled; achievements earned and rewards claimed; bookmarks and similar study-state information; strongest and weakest topic calculations. This is educational performance information, not a medical record.

3.4 Credit balances, entitlements, and purchase information

We store: Study Credit and AI Credit balances; credit grants, deductions, and usage history; Pro subscription status, trial and renewal dates, included AI quota and its usage; tests, cases, AI answers, and other content unlocked by an account; purchase product identifier, transaction status, store platform, and receipt or transaction-validation information; refund, reversal, and restoration status.

Payments are processed by Apple through the App Store or by Google through Google Play. We do not receive or store your complete payment-card details. Credits do not expire but are tied to the account that received them. Pro's included AI quota is tied to the applicable subscription period — unused included quota does not carry over when a new period begins.

3.5 AI tutor information

When you use an AI feature, DentistUP may send the following educational context to OpenAI through a secured server-side request: question text and answer choices; your selected answer; correct answer and existing explanation; relevant branch and topic; and the fixed AI prompt you selected. For topic-learning tools, the branch, topic, and selected learning prompt may be sent instead.

We do not intentionally send your name, nickname, email address, Firebase UID, payment information, or target-exam date to OpenAI. Do not enter patient information, personal health information, or other sensitive personal information into any AI feature.

AI responses may be cached using a question/topic and prompt identifier — this shared cache is designed not to contain user identity. OpenAI states that API data is not used to train its models by default. Prompts and responses may be retained in abuse-monitoring logs for up to 30 days. See OpenAI API Data Controls.

3.6 Reports and support communications

If you report a question or contact support, we may collect: question identifier; report description or support message; your UID and nickname; date, status, and internal resolution notes. If your account is deleted, reports that remain useful for correcting educational content may be retained only after direct account identifiers are removed.

3.7 Usage and technical information

DentistUP uses Firebase Analytics. Depending on platform settings and applicable consent requirements, technical or usage information may include: app instance and pseudonymous installation identifiers; app version, device model, operating system, language; approximate region inferred from IP address; screens or features opened and product interactions; paywall views, purchase starts and outcomes, trial and renewal events, and the percentage of included AI quota used; study and AI feature usage; diagnostic, security, and network metadata. We do not use this for third-party advertising.

3.7a Usage analytics

The DentistUP app uses Google Firebase Analytics to understand how the app is used so we can improve it. We collect: the screens you open and how long you stay, study activity (tests started, finished or left, number of questions answered and correct, lesson reading time and how far you scroll, illustrations opened, AI explanations requested), the length and result count of Visual Atlas searches (not the text you type), and your optional "helpful / not helpful" ratings with a fixed reason. These events are linked to a random account identifier, your target exam, your plan (free or Pro), your app language and how far away your exam date is. We do not send your email, name, nickname or anything you type. We do not use the advertising identifier (IDFA/AAID), do not track you across other apps or websites, and do not use this data for advertising. You can switch this off at any time in the app: Settings → Support → Share usage analytics. Data is retained for 14 months.

3.8 Information stored locally on your device

The App uses local storage for limited settings and state such as: tutorial and first-time-message completion; audio and interface preferences; motivation preferences and notification-category settings; cached application state. Removing the App may remove this local data.

3.9 Information we do not intentionally collect

DentistUP does not currently request or intentionally collect: contacts or address-book data; precise GPS location; microphone recordings; camera captures or user-uploaded patient images; biometric identifiers; patient files or clinical records; advertising identifiers for serving advertisements. DentistUP does not display third-party advertising.

We use information only for purposes a reasonable person would consider appropriate, including to: create, authenticate, secure, and maintain accounts; save learning progress; deliver purchased or earned credits and unlocked content; process and validate App Store and Google Play purchases; verify Pro trial, subscription, renewal, cancellation, and refund events; prevent duplicate purchases, duplicate rewards, fraud, and abuse; calculate statistics, achievements, and strongest and weakest topics; maintain Review Pool and study history; provide AI-generated educational explanations; respond to question reports and support requests; measure App reliability and feature use; enforce our Terms of Use and protect users and Socket Science; and comply with legal, tax, accounting, security, and regulatory obligations.

We do not sell or rent personal information. We do not share personal information for cross-context behavioural advertising. We disclose limited information to the following service providers:

Google Firebase and Google Cloud

Firebase Authentication, Cloud Firestore, Cloud Functions, Firebase Analytics (Google LLC; see section 3.7a), and related Google Cloud infrastructure provide authentication, data storage, server-side processing, security, and analytics. See Firebase Privacy and Security.

OpenAI, L.L.C.

OpenAI processes the limited educational context described in Section 3.5 to generate AI explanations. Direct account identity is not intentionally included. See the OpenAI Privacy Policy.

RevenueCat

RevenueCat connects the App to Apple and Google purchase systems, checks subscription entitlements, and reports purchase lifecycle events used to deliver credits and Pro access. We provide the Firebase UID as a RevenueCat customer identifier and process product IDs, transaction identifiers, purchase status, and subscription dates. RevenueCat does not receive your complete payment-card details from us. See the RevenueCat Privacy Policy.

Apple and Google

Apple and Google process in-app payments, refunds, transaction records, authentication, and store-account information under their own terms and privacy policies. We receive only the information needed to validate purchases, restore entitlements, prevent fraud, and reconcile refunds.

Legal and safety disclosures

We may disclose information where reasonably necessary to comply with law, legal process, tax or accounting obligations, enforce agreements, investigate fraud or security incidents, or protect the rights and safety of users or others. We may also disclose information as part of a merger, financing, acquisition, restructuring, or sale of assets, subject to appropriate confidentiality and legal safeguards.

Socket Science operates from British Columbia, Canada. Our service providers may process information in Canada, the United States, and other countries where they or their subprocessors operate. Where required, we use contractual and organizational safeguards for international transfers. You may contact us for more information about service providers or processing locations relevant to your information.

We retain identifiable account and learning information while your account is active and for only as long as reasonably necessary to provide the App, satisfy legal obligations, resolve disputes, prevent fraud, and enforce agreements.

When you delete your account through the in-app account-deletion control: your Firebase Authentication identity is deleted; your DentistUP profile, credit balances, app-side purchase and entitlement records, progress, statistics, activity, achievements, and usage-event records are deleted from our active account records; your nickname reservation and target-exam selection are deleted. Shared reports may be retained only in anonymized form. Shared AI answer caches are retained because they are organized by educational content and prompt, not by user identity. Aggregated or anonymized statistics that cannot reasonably identify you may be retained.

Apple, Google, and RevenueCat may retain purchase and subscription records under their own policies or legal obligations. Deleting a DentistUP account does not cancel a subscription — cancel it in the store account used to purchase it. Account deletion is permanent. Credits cannot be restored after account deletion unless applicable law or the relevant app store requires otherwise.

We use safeguards appropriate to the sensitivity of the information, including: encryption in transit; encryption at rest provided by our cloud service providers; Firebase Authentication; Firestore security rules and server-side privileged operations; server-side storage of AI credentials and other secrets; transaction and idempotency controls to prevent duplicate credit operations; restricted administrative access; and separation of shared educational caches from user identity records. No system can guarantee absolute security. You are responsible for protecting your device, email account, sign-in credentials, and store account.

Subject to applicable law, you may request to: access the personal information we hold about you; correct inaccurate or incomplete personal information; withdraw consent where processing is based on consent; request deletion of your account and associated personal information; obtain information about our service providers and international processing; and challenge our compliance with applicable privacy law.

You may permanently delete your account through Settings. For other requests, email dr.socketscience@gmail.com. We may need to verify your identity before fulfilling a request.

Residents of jurisdictions with additional privacy rights — including the EEA, UK, Switzerland, California, and other applicable regions — may also have rights to portability, restriction, objection, appeal, or complaint to a supervisory authority.

British Columbia residents may contact the Office of the Information and Privacy Commissioner for BC. Canadian residents may also consult the Office of the Privacy Commissioner of Canada.

DentistUP does not display third-party advertisements. We do not sell personal information and do not use personal information for targeted advertising by third parties. We will update this Policy if our advertising practices change materially.

We may update this Privacy Policy to reflect changes in the App, service providers, law, or our practices. We will update the effective or last-updated date and provide additional notice where required. If a future release activates materially different data practices, this Policy will be updated before or when those features become available.

This website uses Vercel Web Analytics to count page visits. It does not use cookies and does not identify individual visitors. Vercel Web Analytics is not loaded on the Molar Squad pages of this website, which load no analytics, advertising or third-party scripts.

If you use the contact form, your name, email address and message are sent by email to our inbox through our email delivery provider, Resend, so that we can reply. They are not stored on this website and are not used for anything else.

Molar Squad, our app for children, has its own privacy policy: Molar Squad Privacy Policy.