Privacy Policy

Osiolog — Last updated: October 2, 2026

1. Who We Are

Osiolog ("we", "our", "us") is a dental implant case management platform built for licensed dental professionals in India and worldwide. Our registered domain is osiolog.com. For privacy-related queries, contact us at admin@osiolog.com.

2. What Data We Collect

Doctor account data: Name, email address, phone number, dental registration number, college, specialization, clinic details, and profile photo.

Patient clinical data: Patient name, age, gender, contact details, medical history, dental implant records, FPD logs, surgical notes, ISQ values, follow-up dates, and radiograph/photo images uploaded by the treating doctor.

Billing data: Your plan, billing period, payment amounts, dates and invoice references. Card and bank details are entered on our payment provider's checkout (Paddle) and never reach Osiolog.

Usage data: Login timestamps, device type (web/Android/iOS), and app activity logs for security and debugging purposes.

3. How We Use Your Data

  • To provide implant case management features to the treating doctor
  • To send push notifications and emails for follow-up reminders (osseointegration milestones)
  • To process subscription payments and show your billing history
  • To generate clinical reports and analytics for the doctor's own practice
  • To maintain security, prevent fraud, and debug issues
  • We do not sell, share, or use patient data for advertising

4. Data Storage & Security

Clinical records are stored in a managed PostgreSQL database hosted by Render. Photos and radiographs are stored privately in Cloudflare R2 storage — they are never publicly accessible, and are shown only through time-limited links to signed-in users of the practice they belong to. If you choose to connect your own Google Drive as your storage, new photos are saved in your Google Drive instead, under your Google account. The Osiolog application servers run on Render in Singapore. All data in transit is encrypted via HTTPS/TLS. Authentication is handled by Google Firebase Authentication.

5. Who Can Access Patient Data

Patient data belongs to the practice in which it was entered. Only doctors who are members of that practice can access it — if your practice has more than one doctor, those doctors share the practice's patient records. No other practice and no Osiolog staff can access a practice's patient records. Osiolog engineers may access anonymised logs for debugging purposes only, never clinical records.

6. Data Retention

Patient records are retained for as long as the doctor's account is active. Doctors can delete their account at any time from the Account page inside the app. When a doctor deletes their account, their practice's patient records, implant logs, and the photos and files stored with Osiolog are permanently deleted straight away. If the practice has other doctors, the leaving doctor's patients pass to a colleague in the same practice instead, so the practice keeps its records. Photos you chose to keep in your own Google Drive stay in your Drive. Copies in our automatic database backups expire within 30 days.

7. Your Rights

  • Access: Request a copy of all data we hold about you
  • Correction: Update your profile details from the Account page
  • Deletion: Delete your account and all associated data from the Account page
  • Portability: Export your patient and implant data via the app's export feature

For any data requests not covered above, email admin@osiolog.com.

8. Third-Party Services

Google Firebase: Sign-in and push notifications — Firebase Privacy Policy

Cloudflare R2: Photo and radiograph storage — Cloudflare Privacy Policy

Google Drive (optional): Photo storage in your own Google Drive, only if you choose it — Google Privacy Policy

Render: Application hosting — Render Privacy Policy

Resend: Email delivery, including follow-up reminders that name the patient, tooth and due date — Resend Privacy Policy

Anthropic: Powers the AI assistant, the scanning of handwritten implant log sheets and supplier bills, and "Import from my CV" on your profile. Only what you send to these features is processed — your message, photo or CV file (read once and not stored by Osiolog), plus a patient's records when you ask the assistant about that patient; under Anthropic's commercial terms it is not used to train their models — Anthropic Privacy Policy

Paddle: Subscription payments. Paddle acts as the reseller (merchant of record) and receives your name, email, billing address and payment details — never patient data — Paddle Privacy Policy

9. Children's Privacy

Osiolog is intended for use by licensed dental professionals only. We do not knowingly collect data from individuals under 18 years of age.

10. Changes to This Policy

We may update this policy from time to time. We will notify registered doctors via email before any material changes take effect. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or requests:
Owner: GOLTHI MIDHILESH MOHAN KRISHNA, trading as Osiolog
Data Protection Contact: GOLTHI MOHAN JAYANTH
Technical Operations: GOLTHI RITHVIK
Email: admin@osiolog.com
Website: track.osiolog.com