Legal
Privacy Policy
Last updated July 12, 2026
The short version
- Your photo is yours. You take it, on your own device, and you decide who sees it.
- We use it to make your preview, and then we delete it. Your preview expires after 24 hours, and the image files are permanently deleted from our storage on a daily cycle after that.
- We never sell or rent your photo. We never share it with anyone for advertising.
- We do not run advertising or analytics trackers on the preview flow. No Meta pixel, no Google Analytics.
- Your dentist does not get your photo. They only see a preview if you choose to show it to them, using a code that expires in 60 minutes.
- We do not ask for your name, your date of birth, or any medical history.
Who we are
Smyly is a product of DDS Web Solutions, based in Sacramento, California. You can reach us at [email protected].
Smyly is a consumer tool, not your dentist's records system
This matters, so we want to be direct about it. When you use Smyly, you are the user. You are not using your dental practice's software, and your practice is not sending us your information.
Smyly is not a healthcare provider. We do not diagnose, treat, or advise. We are not a HIPAA covered entity, and we do not act as a business associate of any dental practice: we do not create, receive, maintain, or transmit patient records on a practice's behalf. A practice may pay us so that its patients can use Smyly, but that does not give the practice access to your preview. Nothing you make here is added to your dental chart unless you and your dentist decide to do that yourselves.
What we collect
When you make a preview
- Your photo. The image you take or upload.
- The treatment you picked and any options you chose.
- The generated preview images.
- Basic technical data such as your IP address, which we use only to keep the service secure and to stop abuse.
We do not ask for your name, address, date of birth, insurance details, or medical history, and you should not send them to us.
If you ask us to email you your preview
We collect your email address, and only if you explicitly ask us to. We use it to send you the preview you requested.
If you ask a practice to contact you
If you tick the box asking a dental practice to get in touch, we collect the contact details you give us and the treatment you were interested in, and we pass them to that practice. That is the whole purpose of the box, and it only happens if you choose it. We do not send a practice your details otherwise.
Your photo is sensitive, and we treat it that way
A photo of your face can identify you. Under California law it may also be treated as biometric or sensitive personal information. So:
- Your preview expires 24 hours after you create it. After that it cannot be opened by you, by a dentist, or by anyone else. The underlying image files are then permanently erased from our storage on a daily deletion cycle.
- They are stored in a private store that is not publicly readable or browsable.
- We do not use your photo to train any AI model.
- We do not sell, rent, or share your photo, and we never will.
- We do not use your photo for advertising, and we do not allow anyone else to.
Who else touches your data
We use a small number of service providers to run Smyly. They process data on our instructions only, and they may not use it for their own purposes:
- OpenAI generates the preview image from your photo.
- Cloudflare hosts the service and stores the images.
- Resend delivers email, if you ask us to email you.
- Stripe processes payments. This applies to dental practices that subscribe, not to patients. Patients never pay us.
The dentist and the share code
If you want to show a dentist your preview, Smyly gives you a six-character code. You choose whether to read it to them. The code expires after 60 minutes, it shows only the preview, and we do not record who looked at it. Showing your dentist your preview is your decision, in the same way that handing them your phone would be.
Your rights
Because your photo is deleted within 24 hours, there is usually nothing left for us to hand over or erase. If you have given us an email address, or asked a practice to contact you, you can ask us to access, correct, or delete that information at any time by emailing [email protected].
If you are a California resident, you have rights under the CCPA as amended by the CPRA, including the right to know what we collect, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share your personal information, so there is nothing to opt out of, but the right exists and we will honour it. We will not discriminate against you for exercising any of these rights.
Children
Smyly is for adults. You must be 18 or older to use it. We do not knowingly collect information from anyone under 18. If you believe a minor has used Smyly, contact us and we will delete the information immediately.
Only upload your own face
Please only upload a photo of yourself. Do not upload a photo of another person unless they are an adult and have agreed to it.
Changes
If we change this policy we will update the date at the top of this page. If the change is significant, we will do more than that to tell you.