Privacy Policy

1. Data Controller

Diş Hekimi AI (the "App") is provided and operated by DENTORAMA SAĞLIK HİZMETLERİ TİCARET LİMİTED ŞİRKETİ, a limited liability company incorporated in Türkiye, which is the data controller for your personal data (tax no. 2920605602, Beykoz Corporate Tax Office, MERSIS no. 0292060560200013, trade registry no. 748222-0 at the Istanbul Trade Registry Office). Address: Kavacık Mah. Fatih Sultan Mehmet Cad. No: 38 B Blok Kat: 2, 34810 Beykoz / Istanbul, Türkiye. For any matter regarding your personal data, contact us at Kopyala.

The data controller is established in Türkiye and is subject to Turkish Law No. 6698 (KVKK). To the extent services are offered to users located in the European Union, the GDPR (EU 2016/679) also applies pursuant to Art. 3(2) GDPR.

2. Data We Collect

Account data: email, name (optional), Apple/Google sign-in identifier.

Health data (special category): the complaints/questions you write, dental photos and x-rays you upload, and profile health details. This is treated as special-category data under GDPR Art. 9 / KVKK Art. 6.

Document archive ("Belgeler"): x-rays, lab results and prescriptions you optionally store. These are kept PRIVATE and encrypted in the EU until you delete them; they are special-category health data, processed only with your explicit consent and for your own access.

Location (coarse): your province/district or country/city, only as much as you enter. Precise GPS is used only for the "Nearby" map, with your permission, in real time, and is not stored.

Usage data: query counts, dates, language/theme preferences.

3. Purposes and Legal Basis

To provide AI-assisted preliminary information (performance of a contract and your explicit consent).

Processing of health data and sharing it with AI providers is done ONLY with the EXPLICIT CONSENT you give during onboarding (GDPR Art. 9(2)(a), KVKK Art. 6(2)). You may withdraw consent at any time.

Service security, abuse prevention, and legal obligations (legitimate interest / legal obligation).

4. Sharing with AI Providers

To answer your questions, the text and images you enter are sent to selected AI providers (OpenAI, Anthropic, Google) for processing.

These providers may process data outside the EU (e.g. the US). Such transfer relies on your explicit consent and the providers’ contractual safeguards (Standard Contractual Clauses, etc.). If you do not consent, you cannot use these features, but your data is not sent to providers.

See each provider’s privacy policy for their terms.

5. Where Data Is Stored and Sub-processors (EU)

Your data is hosted within the European Union: database on Neon (Frankfurt, Germany), hosting on Vercel (Frankfurt), file/image storage on Vercel Blob (Dublin, Ireland). Images are stored PRIVATELY and encrypted; only our server can access them.

Our infrastructure sub-processors are Neon (database) and Vercel (hosting + Blob storage), processing data within the EU. AI providers are listed in section 4.

6. Dentist Consultation (Telehealth)

If you use the "Ask a Dentist" feature, your question and the information you share are sent to the dentist YOU choose. This sharing happens only with your explicit consent.

That dentist is a SEPARATE data controller for the reply they give you and is bound by their own professional confidentiality duties. Their reply does not replace medical advice; a clinical examination is required for a definitive diagnosis.

7. Retention and Deletion

We retain your data while your account is active. When you delete your account from within the app, your account and all associated data (session logs, uploaded images, health profile) are permanently deleted.

8. Your Rights

Under the GDPR and KVKK you have the rights of access, rectification, erasure, restriction, objection, portability, and withdrawal of consent.

To exercise your rights, contact Kopyala. You also have the right to lodge a complaint with a supervisory authority.

9. Children’s Data

The App is not directed to persons under 18. If you enter information on behalf of a child (e.g. pediatric questions), you do so as a parent/guardian and under your responsibility.

10. Security

We apply reasonable technical and organizational measures: encrypted connections, encrypted EU storage, access control, and session security. No system is 100% secure.

11. Not a Medical Service

The App is NOT A MEDICAL SERVICE: it does not provide medical advice, diagnosis, or treatment; it offers general information and educational content only. Consult a dentist for diagnosis and treatment. In an emergency, call your local emergency number.

12. Changes

We may update this policy from time to time. For significant changes we will notify you in the app. The current version is always published on this page.