Operator: Hao Wu; contact the operator via the Support page; location: Shanghai, China.
1. Appointment data on your device
Appointment business data, including patient names, dates and times, duration, treatments, tooth positions, notes, status, reminders, and templates, is stored on this iPhone in a data file encrypted with AES-256-GCM. The profile name is stored in iOS secure storage (Keychain). The avatar is stored separately as a local image file in the app sandbox and is not part of that AES-256-GCM-encrypted file. Dental Calendar does not upload these local items to its cloud backend or use them for advertising, profiling, or data sales.
2. Patient information and authorization
Patient names, appointment information, treatment items, tooth positions, notes, and appointment photos may contain sensitive personal information. You may enter or upload another person’s information only after providing any required notice and obtaining authorization from the patient or guardian. This confirmation does not replace obligations that apply to you under law.
3. Voice and photos
Apple recognizes Chinese and English speech on device; Dental Calendar does not upload the original recording. An appointment-sheet photo is sent over HTTPS to Alibaba Cloud Function Compute and Bailian photo-recognition services in mainland China only when you actively start recognition. Dental Calendar's business workflow does not write the original image, raw model response, or appointment draft to Tablestore. Alibaba Cloud Model Studio may process and retain model and application call data under its service terms and applicable law; the applicable scope, duration, and deletion arrangements depend on the relevant terms and service configuration.
4. Minimum cloud data
Alibaba Cloud Tablestore uses a random anonymous identifier to record the server-side Free Access start time, service-protection records, and Apple purchase entitlements, including product identifiers, lifetime-entitlement status, refund or revocation status, and transaction-identifier hashes. It does not store patient appointment content. Public database access is disabled, and only Dental Calendar cloud functions can reach it through the dedicated VPC network.
5. Permissions
The microphone supports on-device voice entry. The camera and photo library support an avatar or appointment sheet that you actively select. Notifications support local reminders. Face ID supports unlocking. Permissions are requested only when needed and can be disabled in iPhone Settings.
6. Backup, security, and deletion
The on-device data key is stored in iOS secure storage. Exported backups are encrypted with a separate password you set, which Dental Calendar cannot recover. Uninstalling normally removes the app-sandbox data file and avatar. iOS Keychain items may remain after reinstalling with the same app identifier, but persistence is not guaranteed. Uninstalling does not automatically delete anonymous service-protection records on our server or Apple purchase records. Export an encrypted backup before uninstalling.
7. Privacy requests
To request access, a copy, correction, deletion, or withdrawal of voice/photo-recognition consent, visit App Support and tap the email action. Provide only the request type, relevant feature, approximate time, and minimum locating information; do not send a full medical record, original photo, or identity document. We ordinarily acknowledge receipt within 5 business days and respond within 15 business days; we will explain the scope and reason for complex requests or information that must be retained by law. No paid entitlement is required.
8. Contact and updates
Visit App Support to contact the operator. You manage appointment data on your device in the App; random cloud identifiers and service records are handled according to actual service capability, purchase restoration, security/dispute handling, and legal requirements. Material updates to this policy will be announced in app update notes or on this page.