Privacy Policy

Who we are

Smyly™ is a product of DDS Web Solutions. DDS Web Solutions is the business responsible for the personal information described in this policy. You can reach us at [email protected].

Smyly is a consumer tool, not your provider's records system

This matters, so we want to be direct about it. When you use Smyly, you are the user. You are not using your practice's software, and your practice is not sending us your information.

Smyly is not a healthcare provider. We do not diagnose, treat, or advise. We are not a HIPAA covered entity, and we do not act as a business associate of any practice: we do not create, receive, maintain, or transmit patient records on a practice's behalf. A practice may pay us so that its patients can use Smyly, but that does not give the practice access to your preview. Nothing you make here is added to your chart unless you and your provider decide to do that yourselves.

What we collect

When you make a preview

• Your photo. The image you take or upload.
• The treatment you picked and any options you chose.
• The generated preview images.
• Basic technical data such as your IP address, which we use only to keep the service secure and to stop abuse.

We do not ask for your name, address, date of birth, insurance details, or medical history, and you should not send them to us.

If you ask us to email you your preview

We collect your email address, and only if you explicitly ask us to. We use it to send you the preview you requested.

If you ask a practice to contact you

If you tick the box asking a practice to get in touch, we collect the contact details you give us and the treatment you were interested in, and we pass them to that practice. That is the whole purpose of the box, and it only happens if you choose it. We do not send a practice your details otherwise.

Your photo is sensitive, and we treat it that way

A photo of your face can identify you. Under California law it may also be treated as biometric or sensitive personal information. So:

• Your preview expires 24 hours after you create it. After that it cannot be opened by you, by a provider, or by anyone else. The underlying image files are then permanently erased from our storage on a daily deletion cycle.
• They are stored in a private store that is not publicly readable or browsable.
• We do not use your photo to train any AI model, and we do not permit our providers to use it to train theirs.
• We do not sell, rent, or share your photo, and we never will.
• We do not use your photo for advertising, and we do not allow anyone else to.

Who else touches your data

We use a small number of service providers to run Smyly. They act on our instructions only, they are bound by contract, and they may not use your information for their own purposes. They fall into these categories:

• AI image processing. Generates the preview from your photo.
• Cloud hosting and storage. Runs the service and holds the images until they are deleted.
• Email delivery. Sends you your preview, if you ask us to.
• Payment processing. Bills the practices that subscribe. This never applies to patients. Patients never pay us.
• Traffic measurement. Counts page views so we know the site is working. It is anonymous and cookie-free, it cannot identify you or follow you to other sites, and it never receives your photo.

None of them is permitted to use your photo to train an AI model, to sell it, or to use it for advertising. We keep a current list of these providers and we will tell you who they are if you ask, at [email protected].

Your provider and the share code

If you want to show your provider your preview, Smyly gives you a six-character code. You choose whether to read it to them. The code expires after 60 minutes, it shows only the preview, and we do not record who looked at it. Showing your provider your preview is your decision, in the same way that handing them your phone would be.

Your rights

The fastest way to exercise your deletion right is built into the product: the "Delete my photo now" button on your results screen deletes your photo and previews from our servers immediately and cancels your share code. No email, no form, no waiting.

Because your photo is deleted within 24 hours regardless, there is usually nothing left for us to hand over or erase. If you have given us an email address, or asked a practice to contact you, you can ask us to access, correct, or delete that information at any time by emailing [email protected].

If you are a California resident, you have rights under the CCPA as amended by the CPRA, including the right to know what we collect, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share your personal information, so there is nothing to opt out of, but the right exists and we will honour it. We will not discriminate against you for exercising any of these rights.

Children

Smyly is for adults. You must be 18 or older to use it. We do not knowingly collect information from anyone under 18. If you believe a minor has used Smyly, contact us and we will delete the information immediately.

Only upload your own face

Please only upload a photo of yourself. Do not upload a photo of another person unless they are an adult and have agreed to it.

Changes

If we change this policy we will update the date at the top of this page. If the change is significant, we will do more than that to tell you.