Privacy Policy

1. Who we are

Dentella (dentella.app) is developed, operated and owned by Dentra Connect, which acts as the Data Fiduciary for the personal data processed through the Platform. This policy explains what data we collect, why, and the rights you have under India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

2. Data we collect

• Account data: name, email, phone number, password (stored hashed).
• Health data: appointments, clinical notes, prescriptions, treatment plans and documents shared by you or your clinic.
• Usage data: device, log and access information used to operate, secure and improve the service, including aggregate analytics.
• Payment data: billing details for clinic subscriptions and for paid patient consultations, processed by our payment partner Razorpay. We do not store full card numbers.

3. How we use your data

We use your data to provide and improve the service: managing appointments and records, sending reminders and notifications, processing payments and subscriptions, ensuring security, and meeting legal obligations. We process health data based on your consent and to deliver the care you request. We do not use your health data for advertising, and we do not permit third parties to use it to train their artificial-intelligence models.

4. We never sell your data

Dentella will never sell, rent or trade your personal data — including your health data — to anyone, for any purpose. This is a permanent commitment, not a current practice that might change: it applies regardless of any future change in our ownership, investors or business model. Your health information exists on Dentella for one reason only — to deliver the dental care you ask for.

5. Consent

We collect explicit, informed consent before processing your personal and health data, and again for any optional uses such as marketing communications. You may withdraw consent at any time (see your rights below); withdrawal does not affect processing already carried out.

6. Sharing your data

We share data only as needed to provide the service, and never for anyone else’s marketing:

• Your clinic(s) and practitioners: the dental providers you book with or consult see the information needed to treat you.
• Processors acting on our instructions, under contract: cloud hosting (Amazon Web Services, Mumbai, India), SMS and WhatsApp delivery (MSG91), payments (Razorpay), and privacy-respecting usage analytics (Google Analytics — usage data only, never your health records).
• Legal requirements: we may disclose data where required by law or a competent authority.

7. Data storage, security and breach notification

Your data is hosted in India (Amazon Web Services, Mumbai region). Data is encrypted in transit (TLS) and at rest, access to health documents is logged, and access within our systems is restricted to what each role needs. We retain personal data only as long as necessary for the purposes described, subject to record-retention obligations that apply to health records under applicable law and professional regulations. In the event of a personal data breach, we will notify the Data Protection Board of India and affected users as required by the DPDP Act.

8. Children and guardian-managed profiles

Dentella accounts are for adults (18+). A parent or legal guardian may add and manage a dependent’s profile — including a child’s — under their own account. We process a child’s data only with the verifiable consent of the parent or guardian, only to deliver the care requested, and never for tracking, behavioural monitoring or advertising directed at children.

9. Your rights (DPDP Act 2023)

As a Data Principal, you have the right to:

• access a summary of the personal data we hold about you;
• request correction or completion of inaccurate data;
• request erasure of your data (subject to legal retention requirements);
• withdraw consent;
• nominate another individual to exercise your rights in the event of death or incapacity; and
• grievance redressal in respect of your data.

You can exercise data access and deletion from within your account, or by contacting us using the details below. If you are not satisfied with our response, you have the right to complain to the Data Protection Board of India.

10. Cookies and analytics

We use strictly necessary cookies to keep you signed in and to secure the service, and analytics cookies (Google Analytics) to understand aggregate usage of our public pages so we can improve them. Analytics data is not linked to your health records. We do not use cookies for third-party advertising. You can control or block cookies through your browser settings, though disabling essential cookies may affect functionality.

11. Changes to this policy

We may update this policy from time to time. Material changes will be notified through the Platform or by email, with the “last updated” date revised above. We will never weaken the commitment in Section 4 (“We never sell your data”).

12. Contact & Grievance Officer

For privacy questions or to exercise your rights, contact the Grievance Officer at Dentra Connect, the operator of Dentella:
Email: [email protected]

We acknowledge grievances within 72 hours and aim to resolve them within 30 days, in line with the DPDP Act.

See also our Terms of Service.