1. Who we are
DENTALYNX is dental practice-management software. For any privacy question or data request, contact privacy@dentalynx.online.
2. Controller vs. processor
For patient data that a clinic enters into DENTALYNX (names, contact details, medical and dental records, images, prescriptions, payments), the clinic is the data controller and DENTALYNX acts as a processoron the clinic's behalf. The clinic is responsible for obtaining its patients' consent. For the clinic's own account data (the dentist signing up), DENTALYNX is the controller.
3. What we collect
We collect only what is needed to run the service:
- Account data: your name, email, and clinic details when you sign up.
- Clinic-entered data: the patient, appointment, treatment, billing, consent, prescription and inventory records you create. This may include health information.
- Technical data: data needed for the app to function and sync (e.g. authentication tokens). We do not run advertising or analytics trackers on this website.
We do not sell personal data, and we do not use patient data for advertising or to train models.
4. Why we use it (lawful basis)
- To provide the service you or your clinic signed up for (performance of contract).
- To process patient records on the instructions of the controlling clinic.
- To secure accounts, prevent abuse and meet legal obligations.
5. Where data is stored
DENTALYNX is offline-first: on the free plan, data stays on the device. On paid plans, data is synced to and stored with our infrastructure provider (Google Firebase) under their security and data-processing terms. Access is isolated per clinic and controlled by role-based permissions.
6. Sharing
We share data only with:
- Infrastructure providers (e.g. Google Firebase) that host the service.
- Messaging providers (e.g. the WhatsApp Business API) only when a clinic enables and uses that optional add-on to message its own patients.
- Payment/billing providers to process subscriptions.
- Authorities where required by law.
7. Retention
Clinic and patient data is retained while the account is active and for a reasonable period afterwards, or as instructed by the controlling clinic, or as required by law. You can request deletion (see below).
8. Your rights
Subject to applicable law (including India's Digital Personal Data Protection Act, 2023, and, where relevant, the GDPR), you may request access to, correction of, or deletion of your personal data, and may withdraw consent. Patients should contact their clinic (the controller); clinics and account holders can email privacy@dentalynx.online.
9. Security
We use role-based access control, per-clinic isolation, and platform-level security from our infrastructure provider. No system is perfectly secure, but we take reasonable measures to protect data.
10. Children
The service is for dental professionals. Patient records may relate to minors; those are entered and controlled by the clinic under its own consent obligations.
11. Grievances
For any privacy grievance, contact our grievance team at grievance@dentalynx.online. We aim to acknowledge grievances promptly and resolve them within the timelines required by applicable law.
12. Changes
We may update this policy; material changes will be reflected by the "last updated" date above.