Legal template
Privacy Policy
Privacy Policy
The coach gives habit guidance, not medical advice. For pain, bleeding, or anything worrying it will tell you to see a dentist. Please do.
The coach gives habit guidance, not medical advice. For pain, bleeding, or anything worrying it will tell you to see a dentist. Please do.
Last updated: July 12, 2026
Last updated: July 12, 2026
5. What we store when you create an account
5. What we store when you create an account
Smyle uses an account so your progress survives a lost phone. Stored on our backend (Supabase; row-level security means your account can only ever read its own rows):
Smyle uses an account so your progress survives a lost phone. Stored on our backend (Supabase; row-level security means your account can only ever read its own rows):
• Your email address (or Apple’s private relay address if you chose Hide My Email) and first name.
• Your email address (or Apple’s private relay address if you chose Hide My Email) and first name.
• Your onboarding answers: appliances, goals, brushing habit, optional gender.
• Your onboarding answers: appliances, goals, brushing habit, optional gender.
• Your measurements: per-scan sub-scores, Smile Score, and tooth shade with their dates. The numbers, never the photos.
• Your measurements: per-scan sub-scores, Smile Score, and tooth shade with their dates. The numbers, never the photos.
• Your routine, task completions, brushing sessions, streak, achievements, reminder settings, your dentist’s name and next visit date if you add them, your consent choices, and your subscription tier.
• Your routine, task completions, brushing sessions, streak, achievements, reminder settings, your dentist’s name and next visit date if you add them, your consent choices, and your subscription tier.
6. Usage analytics
6. Usage analytics
We use PostHog to understand how the app is used: which onboarding steps people finish, whether scans succeed, how often routines are completed, which paywall people saw. Events are linked to your account ID so we can see funnels, and to your acquisition source (section 7). Deliberately excluded from analytics: your photos, your scores and shades, your chat text, your name and email. Analytics events record that something happened, never what your mouth looks like. Session recording is off: nothing you see or type is captured.
We use PostHog to understand how the app is used: which onboarding steps people finish, whether scans succeed, how often routines are completed, which paywall people saw. Events are linked to your account ID so we can see funnels, and to your acquisition source (section 7). Deliberately excluded from analytics: your photos, your scores and shades, your chat text, your name and email. Analytics events record that something happened, never what your mouth looks like. Session recording is off: nothing you see or type is captured.
7. Advertising attribution (“tracking” in Apple’s sense)
7. Advertising attribution (“tracking” in Apple’s sense)
We advertise Smyle, and we use AppsFlyer to know which ad brought a new user; that is the only way paid ads can work without wasting money. AppsFlyer collects device identifiers (the device’s vendor identifier, and the advertising identifier only if you tap Allow on the iOS tracking prompt), install and session metadata, and events like sign-up and subscription (including the price paid), and shares attribution results with the ad network that showed you the ad (for example Meta or TikTok).
We advertise Smyle, and we use AppsFlyer to know which ad brought a new user; that is the only way paid ads can work without wasting money. AppsFlyer collects device identifiers (the device’s vendor identifier, and the advertising identifier only if you tap Allow on the iOS tracking prompt), install and session metadata, and events like sign-up and subscription (including the price paid), and shares attribution results with the ad network that showed you the ad (for example Meta or TikTok).
• If you decline the tracking prompt, Smyle works exactly the same; Apple’s privacy-preserving SKAdNetwork still tells us, in aggregate and anonymously, that campaigns work.
• If you decline the tracking prompt, Smyle works exactly the same; Apple’s privacy-preserving SKAdNetwork still tells us, in aggregate and anonymously, that campaigns work.
• Attribution never includes your photos, your measurements, or anything you write.
• Attribution never includes your photos, your measurements, or anything you write.
• We never sell this data, and we do not build advertising profiles of you for anyone else’s ads. Smyle shows no ads.
• We never sell this data, and we do not build advertising profiles of you for anyone else’s ads. Smyle shows no ads.
8. Subscriptions and payment
8. Subscriptions and payment
Payments are processed by Apple; we never see your card. Our paywall is presented with Superwall, which handles the purchase flow and receives the resulting transaction status. We store only your entitlement tier (free or Premium) on your account row. Manage or cancel anytime in your Apple Account settings; Restore Purchases is available in the app.
Payments are processed by Apple; we never see your card. Our paywall is presented with Superwall, which handles the purchase flow and receives the resulting transaction status. We store only your entitlement tier (free or Premium) on your account row. Manage or cancel anytime in your Apple Account settings; Restore Purchases is available in the app.
9. Where data lives and who sees it
9. Where data lives and who sees it
A small number of processors run the service. We share only what each needs, and none may use your data for their own purposes:
A small number of processors run the service. We share only what each needs, and none may use your data for their own purposes:
Processor
What for
What they receive
Supabase
Supabase
Database, auth, our server functions
Database, auth, our server functions
Your account data (section 5)
Your account data (section 5)
Anthropic PBC
Anthropic PBC
Scan analysis + coach replies
Scan analysis + coach replies
Consented scan photos (transient); chat + derived metrics
Consented scan photos (transient); chat + derived metrics
Google LLC
Google LLC
Goal-preview image
Goal-preview image
The consented photo (transient)
The consented photo (transient)
AppsFlyer
AppsFlyer
Ad attribution
Ad attribution
Device identifiers, install/session + sign-up/purchase events
Device identifiers, install/session + sign-up/purchase events
PostHog
PostHog
Product analytics
Product analytics
Usage events + account ID
Usage events + account ID
Superwall
Superwall
Paywall + purchase flow
Paywall + purchase flow
Account ID, purchase events
Account ID, purchase events
Apple
Apple
Sign in with Apple, payments, notifications, speech
Sign in with Apple, payments, notifications, speech
Per Apple’s own privacy policy
Per Apple’s own privacy policy
We do not sell your personal data, and we never share it with anyone for their own marketing.
We do not sell your personal data, and we never share it with anyone for their own marketing.
10. How your data is protected
10. How your data is protected
Everything travels over encrypted connections (HTTPS). Photos on your device use iOS complete file protection. On the backend, row-level security means your account can only ever read and write its own rows, and access to production is limited.
Everything travels over encrypted connections (HTTPS). Photos on your device use iOS complete file protection. On the backend, row-level security means your account can only ever read and write its own rows, and access to production is limited.
11. How long we keep it, and Delete Account
11. How long we keep it, and Delete Account
We keep your account data for as long as your account exists. Delete Account (in Profile) deletes your server data, every synced row and our ad-attribution record, and all local data including your photos, in one action. Backups may persist briefly before they cycle out. Analytics and attribution processors age out their event data under their own retention schedules; deleted accounts are no longer linked to new events.
We keep your account data for as long as your account exists. Delete Account (in Profile) deletes your server data, every synced row and our ad-attribution record, and all local data including your photos, in one action. Backups may persist briefly before they cycle out. Analytics and attribution processors age out their event data under their own retention schedules; deleted accounts are no longer linked to new events.
12. Your choices and rights
12. Your choices and rights
• Consent for photo analysis and the AI coach is yours to give and withdraw; declining never breaks the rest of the app.
• Consent for photo analysis and the AI coach is yours to give and withdraw; declining never breaks the rest of the app.
• The tracking prompt is yours to decline; everything works identically.
• The tracking prompt is yours to decline; everything works identically.
• See and edit your data in the app. Download my data (Profile) exports everything you have logged as a file you own.
• See and edit your data in the app. Download my data (Profile) exports everything you have logged as a file you own.
• Delete your account from inside the app, any time.
• Delete your account from inside the app, any time.
• Depending on where you live (EU/UK GDPR, California CCPA/CPRA), you may also have the right to request a copy of your data, correct it, have it deleted, or object to certain processing. Write to ⟦hello@smyleai.app⟧ and we will help. You can also lodge a complaint with your local data-protection authority. We do not sell or share personal information as those terms are defined by California law.
• Depending on where you live (EU/UK GDPR, California CCPA/CPRA), you may also have the right to request a copy of your data, correct it, have it deleted, or object to certain processing. Write to ⟦hello@smyleai.app⟧ and we will help. You can also lodge a complaint with your local data-protection authority. We do not sell or share personal information as those terms are defined by California law.
13. Children
13. Children
Smyle is not directed to children. It is intended for users aged 13 and older (16 in some regions). We do not knowingly collect data from children under that age; if you believe a child has given us data, contact us at ⟦hello@smyleai.app⟧ and we will remove it.
Smyle is not directed to children. It is intended for users aged 13 and older (16 in some regions). We do not knowingly collect data from children under that age; if you believe a child has given us data, contact us at ⟦hello@smyleai.app⟧ and we will remove it.
14. Not a medical device
14. Not a medical device
Smyle is a cosmetic and habit-building app. It does not diagnose, treat, or prevent any disease or condition, and nothing in the app is medical advice. For pain, bleeding, or any health concern, see your dentist.
Smyle is a cosmetic and habit-building app. It does not diagnose, treat, or prevent any disease or condition, and nothing in the app is medical advice. For pain, bleeding, or any health concern, see your dentist.
15. Changes to this policy
15. Changes to this policy
If we change what Smyle collects or shares, we will update this page and its Last updated date first; the policy always matches the shipping app, not the other way around. Substantive changes will be communicated in-app.
If we change what Smyle collects or shares, we will update this page and its Last updated date first; the policy always matches the shipping app, not the other way around. Substantive changes will be communicated in-app.
16. Contact us
16. Contact us
For questions, requests, or to exercise any of the rights described above:
For questions, requests, or to exercise any of the rights described above:
⟦hello@smyleai.app⟧
⟦hello@smyleai.app⟧
⟦Legal entity name, optional postal address (recommended for GDPR)⟧
⟦Legal entity name, optional postal address (recommended for GDPR)⟧