YOUR PRIVACY
Privacy Policy
This policy explains what BraceLog collects, why it is needed, how it is protected and the choices available to you.
Last updated: September 24, 2026
The short version
Your private BraceLog journey stays private. Community is optional for eligible Pro members. When you deliberately join, your community profile and ranking participation start on by default so you can share stories and appear in rankings. You can turn either setting off at any time, delete stories, leave Community, or request account deletion. Private progress photos, notes, appointments, and chats are never made public automatically.
1. Information we collect
We collect information you provide when creating an account or using the app: your name, email address and authentication provider; treatment dates and details; care routines, reminders and appointments; progress photos and notes; subscription status; and support messages. We collect progress photos when you take them with the in-app camera or choose them for the app. These photos may show your face, mouth, teeth and braces. We also receive technical information such as app version, device type, crash data and product-usage events. If you join Community, we process your chosen community name, avatar, sharing and ranking choices, submitted story photos or videos, captions, blocks, reports, moderation status, and an eligibility result indicating whether Apple’s shared age range meets the 16+ requirement. BraceLog does not receive your exact birth date through this check.
2. How we use information
We use information to provide account access and synchronization, display your treatment timeline, send reminders you enable, process subscriptions, generate requested AI responses or visual comparisons, operate optional Community profiles, stories and rankings, review Community submissions and reports, enforce safety rules, provide support, prevent abuse and fraud, diagnose crashes, monitor reliability and improve the product.
3. Photos, Community and AI features
Face data and progress photos: During guided camera capture, Apple’s on-device Vision framework checks live frames for face and mouth landmarks so the guide can help position your photo. Those landmark measurements are temporary, remain on the device, and are not saved, uploaded or used to identify you. BraceLog does not create a face-recognition template. Saved front, right and left progress photos may show your face, mouth, teeth and braces. BraceLog stores the photos in protected app storage on your device and, when you are signed in, in private Supabase storage tied to your account for backup and synchronization. They are not automatically public. If you select before-and-after checkpoints for AI photo analysis and give separate in-app permission, BraceLog sends up to six resized copies of those selected photos through its authenticated Supabase function to OpenAI for a visible-change comparison. Your name, email, notes and profile details are not included; a pseudonymous safety identifier derived from your account ID accompanies the request. AI chat sends your submitted text and recent conversation turns to OpenAI. If you request an AI journey note, BraceLog sends treatment dates and saved journey totals, not photos. You can turn off either AI permission in Settings to stop future requests. A Community photo or video is shared only when you explicitly select and submit it; profiles and stories are reviewed before publication. Public stories expire 24 hours after approval, while pending, rejected, hidden and expired media is removed by scheduled cleanup. Other members may still take screenshots. AI output can be inaccurate and is not a diagnosis or substitute for an orthodontist.
4. Service providers
BraceLog uses Supabase for authentication, database, private photo storage and authenticated AI request routing; RevenueCat and Apple for subscriptions; OpenAI for AI features you request and separately permit; Sentry for crash reporting; PostHog and Google Analytics for Firebase for optional product analytics; Better Stack for service monitoring; and Resend for transactional email. OpenAI receives only the AI request content described in Section 3 and the pseudonymous safety identifier, not your name or email. Optional analytics is disabled unless you consent in the app. We do not send progress photos, private notes, AI chat content, names, email addresses or treatment details to analytics services, and we do not use advertising identifiers or advertising features. We require third-party service providers that receive personal data to provide the same or equivalent protection for that data as described in this Privacy Policy, including confidentiality, security and use limitations. These providers process information to deliver their services under applicable privacy and security commitments; limited retention is described in Section 6.
5. Security and access controls
We use authentication, encrypted network connections, account-based access controls and row-level database policies intended to keep each user’s data separate. Private storage rules restrict access to account-owned files. No online system can guarantee absolute security, so please use a strong password and protect access to your device and email account.
6. Retention and deletion
Face landmark measurements used for camera guidance exist only during live capture and are not retained. Saved progress photos remain in protected on-device storage and your private Supabase account storage while your account is active, until you delete the photos or your account; there is no automatic expiry for saved progress photos. Deleting progress photos removes the app’s local copies immediately and requests deletion of their private cloud copies on the next successful sync. If the device is offline or synchronization fails, cloud deletion may be delayed until it succeeds. Deleting your account removes account-owned progress photos from BraceLog’s cloud storage, along with Community membership and stored Community media. AI photo and text requests are processed by OpenAI with response storage disabled. Under OpenAI’s standard API controls, request content may be retained in abuse-monitoring logs for up to 30 days, or longer when required by law or necessary for safety. BraceLog does not control OpenAI’s limited retention. Temporary AI chat history on your device is removed automatically after approximately 12 hours. Community stories are visible for 24 hours after approval; pending submissions and non-public story media are normally removed within 48 hours by scheduled cleanup. Leaving Community hides your Community profile and stories. You may use Delete Account in BraceLog settings or contact support@bracelog.app. Some limited records may be retained where legally required.
7. Your choices and rights
You can edit information in the app, control notification permissions in iOS, manage or cancel subscriptions through Apple, request a copy of your information, or request correction or deletion. Depending on where you live, additional privacy rights may apply.
8. Children, changes and contact
BraceLog’s private tracking tools remain available to younger users where permitted, but Community stories, public profiles and rankings are restricted to people whose Apple-provided age range confirms they are at least 16. Declining the check or receiving an inconclusive result keeps Community unavailable without blocking the rest of BraceLog. We may update this policy as the product changes and will update the date above. Community questions and reports can be sent to community@bracelog.app; privacy questions to hello@bracelog.app; support and deletion requests to support@bracelog.app.
BraceLog
A calmer, clearer way to care for your smile throughout orthodontic treatment.
© 2026 BraceLog. All rights reserved.