Privacy Policy
In short: your clinic decides what happens to your treatment information and is the only party that sees your photos. We never sell personal data, we show no ads, and the patient app contains no advertising or analytics trackers. AI tools are used only if you have consented, and they receive photos without your name or phone number.
1. Who we are
Ortho Monitoring AI ("we", "us") is a remote orthodontic monitoring service developed and operated by Mishkk Technologies. Contact us about privacy at privacy@orthomonitoringai.com.
Your clinic is responsible for your treatment information. When an orthodontist or dental clinic uses our service to monitor your treatment, the clinic decides why and how your information is used, and we process it on the clinic's behalf and on its instructions. For questions about your treatment record, contact your clinic first. We are directly responsible for clinic staff accounts, our website and payment records.
2. Information we collect
Patients (entered by your clinic or through the app)
- Identity and contact: name, date of birth, mobile number (your app username), email address, and parent or guardian details for younger patients.
- Health and treatment information: treatment plan (aligner stages, attachments, planned visits), intraoral and smile photos, check-in answers (aligner number, wear time, fit, symptoms, pain level), problem reports and messages with your clinic, including any photos you attach.
- Consent records: your choices about photos, AI processing, messaging and research use, with the date they were recorded.
- App and device: a sign-in session token, your device model name, and app settings (such as reminders and voice guidance), which are stored on your phone.
Clinic staff
- Name, email, mobile number, professional registration number (for example PMDC), role, clinic name and address, a securely hashed password, and a log of actions taken in the app, including IP addresses.
Website visitors and smile assessments
- If you use a clinic's online smile assessment: your name, email or phone number, your answers, up to three photos, and whether you agreed to receive marketing messages. These go to that clinic.
Payments
- Clinics pay activation fees through JazzCash. We receive the transaction reference, amount and result. We never receive or store card numbers, wallet PINs or bank credentials.
What we do not collect
- The patient app does not access your location, contacts, call logs, other photos in your gallery or advertising ID, and it contains no advertising or third-party analytics code.
3. App permissions
| Permission | Why |
|---|---|
| Camera | To take your guided check-in photos. Photos are taken inside the app only when you start a check-in. |
| Notifications | Check-in reminders and messages from your clinic. You can turn these off in Android settings. |
| Internet and network state | To send your check-ins securely and to retry uploads when your connection returns. |
4. How we use information
- To let your clinic monitor your treatment, review your photos, reply to you and decide the next step.
- To check photo quality on your phone and ask for a retake when a photo is too dark or blurred.
- To send reminders and clinic messages.
- To run clinic accounts, process activation payments, prevent fraud and keep the service secure.
- AI-assisted review (only with your consent): if you agreed to AI processing, your check-in photos and the relevant treatment context (such as the aligner stage) may be sent to an AI provider chosen by your clinic or by us (for example Anthropic, OpenAI or Google) to describe what is visible for the orthodontist. Your name, phone number and email are not sent. AI output is decision support for your orthodontist, never a diagnosis, and is not shown to you without clinician review.
We do not sell personal information, use it for advertising, or use your health information for any purpose other than providing the service to your clinic. Research use happens only if you separately agreed to it.
5. Who we share information with
- Your clinic: the orthodontists and staff at the clinic treating you, limited by their role and branch.
- Service providers: cloud hosting and storage, the AI providers described above (only with consent), and JazzCash for payments. They may process data only to provide their service to us.
- Legal reasons: when required by law, court order or a competent authority, or to protect someone's safety.
Some providers may process data outside Pakistan. When they do, we require them to protect it with safeguards at least as strong as this policy.
6. Security
- All data travels over encrypted HTTPS connections.
- Photos and credentials are encrypted at rest with AES-256, using a separate encryption key for each clinic.
- On your phone, photos are kept encrypted until they upload and are then deleted from the phone; screenshots of the app are blocked.
- Passwords are stored only as secure hashes. Staff access is role-based and every access to patient records is logged.
7. How long we keep information
Your clinic sets how long treatment records are kept, within legal limits for medical records. By default, check-in photos and messages are kept for up to 10 years, and security audit logs for 7 years. Payment records are kept as long as tax and accounting law requires. Smile assessment details are kept until the clinic no longer needs them to respond to you.
8. Your choices and rights
- Access and correction: ask your clinic, or contact us, for a copy of your information or to correct it.
- Withdraw consent: ask your clinic to change your consent for photos, AI processing, messaging or research at any time. Withdrawing AI consent stops future AI processing.
- Delete your account: in the app, open Settings → Delete my account, or follow the steps at orthomonitoringai.com/account-deletion. Your login is deleted immediately. Your clinic then deletes your records, except information it must keep by law, which it deletes when that period ends.
- Notifications: turn off reminders in the app or in Android settings.
9. Children
Orthodontic patients are often young. For a patient under 18, the clinic records a parent's or guardian's details and consent before the patient is enrolled, and the account is set up by the clinic, not in the app. The app contains no ads, no in-app purchases and no public sharing features. A parent or guardian can exercise any of the rights above on the child's behalf.
10. Changes
We will post any change to this policy on this page and update the effective date. If a change materially affects how we use your information, we will tell clinics, and patients through the app, before it takes effect.
11. Contact
Privacy questions or requests: privacy@orthomonitoringai.com · General support: support@orthomonitoringai.com