Privacy Policy
Last updated: September 18, 2026
This Privacy Policy explains what toothpaste.cv collects, how it is used, and the choices you have. This is a concise policy for a preliminary screening demo product — not a substitute for formal legal review if you deploy commercially.
1. What we collect
Depending on how you use the Service, we may process:
- Oral photos you capture or upload for screening
- Screening results generated from those photos (findings, summaries, severity labels)
- Account information such as email if you sign up
- Device/browser storage such as session photos, timeline saves, and legal consent acknowledgements stored locally on your device
2. How we use information
We use this information to:
- Generate your visual oral health screening report
- Let you save and revisit reports on your timeline (when available)
- Authenticate your account if you sign in
- Operate, secure, and improve the Service
3. AI processing
Photos are sent to a third-party AI provider (currently OpenAI) to produce structured screening output. Do not include photos you are not comfortable sharing with that processing pipeline. We do not use screening photos to train toothpaste.cv’s own models.
4. Storage
By default, capture photos for an active screening are kept in your browser session storage for the report flow. Timeline saves (including compressed photos and results) may be stored in your browser’s local storage on that device. Account authentication, when enabled, is handled by Supabase. We aim not to keep permanent server-side photo archives for anonymous screenings beyond what is required to generate a report.
5. Sharing
We share data with service providers only as needed to run the Service (for example, AI analysis and auth). We do not sell your personal information.
6. Your choices
You can stop using the Service at any time. You can clear browser site data to remove local timeline/session information. If you have an account, you may sign out; contact us if you need help deleting account credentials from the auth provider.
7. Children
The Service is not directed at children under 13 (or the equivalent minimum age in your region). Do not use it to submit a child’s photos without appropriate consent and supervision.
8. International / demo note
Processing may occur on servers in different regions via our providers. If you need a region-specific commercial deployment, additional privacy controls may be required.
9. Changes
We may update this Privacy Policy. The “Last updated” date shows the latest version. Continued use after updates means you accept the revised policy.
10. Contact
For privacy questions, contact the project maintainers through the repository or product channels where toothpaste.cv is published.