OnlyTeeth

Legal

Privacy policy

Effective 6 November 2026

OnlyTeeth is a case book for dental students and dentists. This policy explains what the OnlyTeeth app and onlyteeth.app collect, why, where it is kept, who can see it, and how you can delete it. OnlyTeeth is run by Mohamed Gamal Elfaham, in Egypt; "we" means OnlyTeeth and "you" means the person using the app. For the information you put in the app we are the data controller; when a clinic uses OnlyTeeth for its patients, the clinic is the controller of its patients' data and we process it for the clinic (see our data processing terms).

In short: we keep what you put in the app so the app can work. We do not sell your data, we do not show ads, we do not use advertising or tracking tools, and we do not use your data or your patients' data to train AI.

What we collect

Your account

What you log

How the app is used

Payments

What we do not collect

Permissions on your phone

CameraTo photograph cases and radiographs.
PhotosOnly the photos you pick, to import them into a case, and to save a share card to your gallery when you ask.
Microphone and speech recognitionOnly when you use voice logging. Where your phone supports it, speech is recognised on the phone and the audio never leaves it. On phones that cannot do this, the phone's own speech service (Google or Apple) processes the audio, and the app shows a note saying so.
NotificationsClinic and case reminders, scheduled on your phone.
Face ID, Touch ID or fingerprintOnly if you turn on App lock. The check happens on your phone; we never receive it.

Why we use it

Where it is kept

Everything you log is saved on your phone first, so the app works without a connection. When you are online, it syncs to your account. Accounts, case data and files are hosted by Supabase in the European Union (Ireland). Clinical photos and scans are kept in private storage that is never public; the app opens them through links that expire after a short time.

The website is hosted by Cloudflare, which also forwards email sent to hello@onlyteeth.app. Sign-in with Google or Apple is handled by those companies under their own privacy policies. Every company that processes data for us is on our list of subprocessors.

The website sets no tracking or advertising cookies; see the cookie policy.

Who can see it

We do not sell or rent your data, and we do not share it for advertising.

Patient information

You decide what patient information goes into OnlyTeeth. You are responsible for having your patient's consent where your university, clinic or law requires it, and for a patient under 18, their parent's or guardian's. The app records consent for photographs and keeps photos without consent out of reports.

How long we keep it

We keep your data while your account exists. Items you delete go to the app's bin first, so you can restore them, until you empty it. When you delete your account, your account, your case data and your photos and scans are deleted from our servers. Copies you have already sent or exported are outside our reach.

Your choices and rights

Security

Data travels encrypted, and access on the server is limited by rules that let each account read only its own data and the clinics it belongs to. No system is perfectly secure, so please use a strong password and turn on App lock if others use your phone.

Children

OnlyTeeth is for people aged 18 and over, and asks everyone to confirm this before they start. We do not knowingly let anyone younger have an account; if you believe a child has one, email us and we will delete it.

Emails

We send only the emails the service needs, such as sign-in links. We do not send marketing email. If we ever do, it will be only to people who agreed to it, and every message will have an unsubscribe link.

Changes

If we change this policy, we will update the date at the top and, for important changes, tell you in the app.

Contact

Questions or requests: hello@onlyteeth.app