Privacy Policy

ViCeph and ViCeph Doctor · Last updated 3 September 2026

Who this covers

ViCeph Doctor is a professional tool for licensed dental and orthodontic clinicians. It is not intended for patients or for the general public, and it requires a ViCeph clinic account. Two different groups of people appear in this policy:

  • Clinicians — the people who sign in and use the app.
  • Patients — the people whose photographs, radiographs and clinical records a clinician handles using the app. Patients do not use the app themselves.

What we collect

From the clinician:

  • Account identity: the email address and credentials used to sign in. Sign-in is either a ViCeph account or Google Sign-In; where Google Sign-In is used we receive the account identifier and email address and nothing else.
  • Authentication tokens, held on the device so the clinician is not asked to sign in repeatedly.

About patients, entered or captured by the clinician:

  • Clinical photographs and cephalometric radiographs captured with the device camera or selected from the device photo library.
  • Patient records the clinician creates: name, date of birth, sex, treatment history and clinical notes.
  • Measurements and landmark data derived from those images.

The app does not collect location data, contacts, calendar, call logs, SMS, or device identifiers for advertising.

What we do not do

  • No advertising. The app contains no advertising and no advertising SDKs, and does not use the Android advertising ID.
  • No analytics or tracking SDKs. There is no third-party analytics, crash reporting, attribution or profiling SDK in the app.
  • No sale of data. Patient data is never sold, and is never used to train models for anyone else.
  • No profiling of clinicians or patients for advertising or marketing.

The only third-party component in the app is Google Sign-In, used solely to authenticate the clinician.

Where the data goes

  • The app communicates with the ViCeph server over HTTPS. All data is encrypted in transit.
  • Images uploaded for analysis are processed on ViCeph's own analysis infrastructure. They are not sent to any third-party AI or cloud analysis provider.
  • Analysis results are cached on the ViCeph server, keyed by a hash of the image, so that repeating the same analysis does not require recomputation.
  • Data is stored on ViCeph's servers in Vietnam.

How it is protected

  • Authentication tokens are stored in the device's encrypted secure storage rather than in general application storage, because those credentials open a clinician's whole account.
  • Access to the app can additionally be protected by the device's biometric unlock. Biometric data never leaves the device and is never seen by ViCeph.
  • Access to clinical data is scoped to the clinic the signed-in clinician belongs to.

Permissions the app requests

  • Camera — to photograph patients and radiographs at the chairside.
  • Photos and media — to attach existing clinical images to a patient record.
  • Biometric / fingerprint — optional local unlock of the app.
  • Internet and network state — to reach the ViCeph server.
  • Vibrate — interface feedback.

The app does not request microphone, location or contacts, and the Google Play build does not request permission to install other applications.

Deleting your account and data

A clinician can request deletion from within the app, under Settings, or on the web at viceph.net/account/delete.

  • A deletion request that is not confirmed lapses by itself after 7 days.
  • Once confirmed, the account enters a 30-day grace period during which the request can still be cancelled.
  • After the grace period the account and its associated data are purged.

Patient records are held by the clinic, which is the controller of that data. A patient wishing to exercise rights over their record should contact their clinic, which can act on the record through ViCeph.

Automated analysis

The app can propose cephalometric landmarks and measurements automatically. This is decision support, not a diagnosis: proposed landmarks are a starting point for the clinician, are always reviewable and correctable, and are not a substitute for clinical judgement. ViCeph Doctor is not a medical device and makes no diagnostic claim.

Children

The app is intended for licensed professionals and is not directed at children. Patient records may concern children, but those records are created and controlled by the treating clinic.

Changes

Material changes to this policy will be published on this page with a revised date.

Contact

Questions about this policy, or requests relating to your data, can be sent to contact@viceph.net.