Privacy policy

Who owns the data, and who processes it

The clinic owns its patients’ data and controls it. Dentr processes that data on the clinic’s behalf, only to provide the service the clinic subscribed to.

We never sell the data, never share it for marketing, and never use patient data for advertising.

The data we process

Patient data the clinic enters: name, phone, age, address, medical history, tooth chart, visits, treatment plans, prescriptions, invoices and payments, and images such as X-rays.

Clinic user data: name, phone, email and role. Operational data: registered devices, sign-in records and the IP addresses they came from, and an audit log of who changed what.

From this website: the name, phone, clinic name and governorate entered in the access request form.

Why we process it

To run the service: keeping the clinic’s records and syncing them between its devices, sending the SMS reminders the clinic turns on, keeping accounts secure, providing technical support, and billing the subscription. We use the access request form only to contact the person who sent it.

Where it is kept

On servers rented from a hosting provider outside Palestine, and in that provider’s backups. Data travels between the clinic and the server over an encrypted connection (HTTPS). We tell every clinic this before its account is opened, and opening an account means the clinic accepts it.

A copy of the clinic’s data also lives on its own devices so that work continues without a connection. That copy is encrypted on the device.

How we protect it

Passwords are stored only as one-way hashes. Each device signs in with its own key, and a device the clinic revokes erases its copy the next time it connects. A PIN can lock a shared machine between members. Dentr staff accounts need a second sign-in step with an authenticator app.

No system is perfectly secure. The clinic is responsible for keeping its passwords and devices safe and for telling us at once if a device is lost.

Who can see it

The clinic’s users, according to the roles the clinic gives them.

Dentr staff reach clinical data only by signing in temporarily as a clinic user for support, with a written reason, for no more than half an hour, and every such sign-in appears in the clinic’s audit log.

Service providers receive only what they need to do their part: the hosting provider stores the data, the email provider delivers account emails, and the SMS provider delivers messages.

SMS

Messages carry no clinical detail, only the appointment and the balance. The patient’s number and the message text are sent to the SMS provider for delivery. A patient whose phone is recorded receives reminders by default; the clinic tells its patients this, and any patient can ask the clinic to stop them.

How long it is kept

Clinical and financial records are kept for as long as the clinic subscribes, with no time limit. Images the clinic deletes are erased for good after thirty days. Audit and SMS log entries older than twenty-four months move to compressed archive files.

When a subscription ends and is not renewed, the account becomes read-only for thirty days, then all of the clinic’s data is deleted permanently. A clinic that asks for deletion is archived first and deleted thirty days later. Copies in backups disappear as the backups rotate.

Rights

A clinic can get a copy of all of its data, correct it, and ask for its account to be deleted. A patient who wants to see, correct or delete their data asks their clinic, because the clinic controls it; we help the clinic answer.

This website

The website uses no advertising or analytics trackers. It sets only the cookies it needs to work: a security token for the request form, and a note that this browser has signed in to the app, so the address opens the app instead of this page.

Changes to this policy

When this policy changes, the date at the bottom of the page changes too. A material change is announced in the app before it takes effect.

Contact

For any privacy question, reach us on the details at the bottom of this page.