Privacy policy — Mobile application

This policy describes how the Opal Dental Lab mobile application (the “Application”), reserved for partner dental practitioners, collects and processes personal data, in accordance with the General Data Protection Regulation (GDPR).

1. Data controller

OPAL DENTAL LAB, a French SAS with a share capital of €100, SIREN 107 246 142 (RNE), Route de Lignières, 36130 Déols, France.
Contact: contact@opaldentallab.fr.

2. Data collected

The Application processes the following categories of data:

• Practitioner account: name, email address, affiliated practice, role. Used for authentication.
• Order data: prosthesis type, teeth involved, material, shade, impression type, preferences, dates, comments.
• Patient reference entered freely by the practitioner (name or internal identifier), pre-approval photos and any digital scan/impression files that may be attached.
• Voice dictation: when you dictate an order, the audio recording and its transcript are attached to the order file (prescription traceability) and can be consulted by the laboratory.
• Scans received via your connected scanner (Medit, etc.): with your explicit authorisation given to the scanner vendor, cases and impression files are transmitted to the laboratory to prepare your orders.
• Minimal technical data required for operation (a secure session token stored on the device, a push notification token if you enable notifications).

The Application does not collect location data, displays no advertising and uses no advertising trackers.

3. Device access

• Camera and photo library: only when you choose to add a photo to an order.
• Microphone: only when you dictate an order or record a voice note, upon your explicit action.
• Files: only when you attach a scan file (STL, PLY, etc.) to an order.

No background access takes place.

4. Purposes and legal basis

Data is processed to enable the transmission, manufacture and tracking of dental prosthesis orders between the practice and the laboratory. The legal basis is the performance of the contract between the practice and the laboratory. Patient-related data is processed on behalf of the practice, which remains responsible for the lawfulness of its entry; the practitioner undertakes to enter only the information strictly necessary.

5. Recipients and processors

Data is accessible to the laboratory and its authorised dental technicians. It is hosted by the following technical processors:

• MongoDB Atlas (database);
• Amazon Web Services — S3 (storage of photos, scan files and audio dictations);
• Vercel (application hosting);
• Deepgram (transcription of dictations and voice notes);
• Anthropic (structuring of dictations into order forms — no data is used to train models);
• Medit (receipt of scans, if you connect your scanner with your consent).

No data is sold or transferred to third parties for commercial purposes.

6. Security

Exchanges are encrypted in transit (HTTPS/TLS). Access is restricted by authentication and limited to authorised staff of the laboratory and of the practice concerned.

7. Retention period

Manufacturing records (orders, files, photos, dictations) are retained for the periods required by the regulations applicable to custom-made medical devices (traceability), then deleted or archived. Files uploaded but not attached to an order are purged automatically.

8. Your rights

In accordance with the GDPR, you have the rights of access, rectification, erasure, restriction and objection. For patient data, such requests are relayed through the practice acting as controller. To exercise your rights, write to contact@opaldentallab.fr. You may lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

9. Account deletion

You can delete your account directly in the Application (Practitioner profile → Delete my account): your personal data (name, email, profile photo) is deleted and your access revoked immediately; manufacturing records are retained to meet legal obligations, detached from your personal data. You may also send a request to contact@opaldentallab.fr.

10. Changes

This policy may be updated; the date of the latest revision appears at the top of this page.