Dental CBCT Studio Privacy Policy

Last updated: November 3, 2026

Developer: Sansar Gupta Contact: sansargupta10@gmail.com

Data stays under your control

Dental CBCT Studio processes the DICOM folders you choose on your device. This includes scan pixels, DICOM metadata (which may identify a patient), measurements, annotations, and segmentation masks. The app has no account, advertising, tracking, third-party analytics SDK, remote AI, or developer-operated upload service. The developer does not receive this data through the app, sell it, or use it for advertising. No patient studies or patient identifiers are indexed in Siri or Spotlight.

Local storage and retention

The current study and review state are held during your session. Large volumes can use private temporary disk storage. Prepared exports use private temporary files and are cleaned up after use or on a later launch. Temporary file dates are read only to identify stale app-owned export files for cleanup. Closing a study clears its active review state; it does not erase your original files or any files you saved.

The app keeps interface preferences in its own storage on this device: whether the tutorial and each workspace tip have been shown, whether you acknowledged the Implants notice, the segment colors and tooth-numbering convention you choose, and whether recovery copies are enabled. These preferences contain no study, patient, or file information and are not sent anywhere. An optional clinic header for PDF reports is also kept on this device; it contains the text you enter. Recovery-copy contents are stored separately as described below. On a Mac, the system's open and save panels may also remember the last folder and panel size, as they do for other apps.

Save Review explicitly writes a .cbctreview JSON file at a location you choose. It contains the DICOM series identifier and geometry, arch curves, canal traces, measurements, arrow captions and text labels you typed, segmentation edits, custom regions with their names, display settings, and endodontic segmentations, notes, and tooth/canal designations. It does not copy scan pixels, patient demographics from source DICOM metadata, source-folder paths, or file-access bookmarks. Series identifiers, anatomy, and user-entered text may identify a person; treat review files as sensitive. Open Review requires the original matching DICOM series. There is no automatic review saving or recent-study history.

Save State explicitly writes Dental-CBCT-State.cbctstate into the selected CBCT folder; Save State Copy lets you choose another location. Reopening a selected folder restores its last saved state only after checking the complete source scan and geometry using a randomly salted content fingerprint. It does not copy identifiers or patient demographics from source DICOM metadata, source scan voxels, source-folder paths, or file-access bookmarks. It includes display and view settings, measurements, arrow captions and text labels you typed, arches, canal traces, segmentation edits, custom regions with their names, endodontic segmentations, notes, and tooth/canal designations, saved views with their names, captions and small thumbnail renderings of the scan, and report notes. Saved geometry, thumbnails, and user-entered text may identify a person and must be treated as sensitive. Closing or replacing a study with unsaved changes asks whether to save or discard them; nothing is saved automatically. A state file is not an anonymized clinical record. The optional clinic header printed on PDF reports is kept only in this device's preferences and is never written to a state or review. The app holds folder access only for the open session and does not remember that location between launches. Clear Memory releases generated segmentation and 3D resources while preserving the source study and accepted edits in the current session; it does not delete saved files.

Keep a recovery copy is off by default. When you turn it on in Viewer Controls, the app writes the same state content Save State writes, for the open study only, into its own private container (Library/Application Support/Recovery) about half a minute after your changes pause and at most once a minute. The copy has the same contents and exclusions as a saved state and is as sensitive. Its file name is a salted content fingerprint of the scan, with a random salt kept on this device, so the copy is offered only when the same scan is opened again and names no scan outside the app. At most three studies keep a copy; the oldest is removed first. Save State, Close Study, Discard in the unsaved-changes prompt, discarding the offer, or turning the option off deletes the copy. Nothing is written into the CBCT folder, uploaded, or kept after the preference is off.

Saved states, reviews, images, videos, PDF reports, DICOM captures, and mesh exports are not encrypted by the app and remain wherever you choose to save them. Delete these files in Files or Finder when they are no longer needed. The app cannot delete copies you shared or copies held by another service.

Surface exports contain sensitive anatomy and coordinates. Segmentation and enhancement run locally. Export Enhanced CT preserves available patient and study identity in a processed DICOM copy. It checks free disk space and may leave an incomplete output folder after an interruption. Review and delete exported copies in Files or Finder.

Export De-identified DICOM writes a copy of the open study with identifying attributes removed or replaced under the DICOM PS3.15 Basic Application Level Confidentiality Profile and with new study, series, image and frame-of-reference identifiers. The copy keeps the pixel values and geometry, so text burned into the image pixels is not removed. You start the export and choose where it is written; the app keeps no record of it. Review the copy before sharing it.

Endo processing and exports

The experimental Endo workspace runs the bundled STSR26 single-tooth tooth-and-pulp model locally on the selected region of the scan. The scan is not sent to a remote AI service. Endo targets, predicted and corrected masks, tooth identifiers, canal traces, reference landmarks, notes, and model provenance are included when you save the study state or review.

Endo exports contain tooth and pulp STL surfaces and a JSON summary with measurements, selected-region geometry, model provenance, and the text you entered. Notes, landmarks, and tooth identifiers are not automatically scrubbed for personal information. Derived anatomy and coordinates may also link these files to a person. Treat Endo exports as sensitive even when no patient demographics were copied from the DICOM header, and review both their contents and destination before sharing. Files saved into a cloud-backed folder may sync under that provider's settings.

Implant plans

The experimental Implants workspace uses the CBCT on your device. Any implant-body STL files you choose are read locally and never uploaded. Crowns, implant bodies and geometric measurements are computed locally.

Save State and Save Review store implant and crown parameters and placements, the safety margin and measurements drawn in the implant views, but never imported meshes or file names. An imported implant body is identified only by a randomly salted SHA-256 digest so the same file can be re-imported after reopening the study.

Implant exports contain a PDF report, implant and schematic-crown STL surfaces, and a JSON file with positions in volume millimeters and DICOM patient coordinates. These coordinates can link the files to a study. Treat exports as sensitive. Licensed stock crowns are display only and never exported as meshes.

Implant visualization is an experimental feature. It is not a medical device, is not cleared or approved by the FDA and is not CE-marked, and it has not been validated for diagnostic use or treatment planning. Measurements are geometric readouts from the CBCT scan, its dental segmentation and the planned implant geometry, including any imported implant body file; they are not clinical recommendations. Clinical decisions must be made by a licensed clinician using cleared planning software.

Sharing, backups, and permissions

You choose which folders to open and where to save exports through system file dialogs. Files in an iCloud Drive or another cloud-provider folder can sync under that provider's settings. Device or computer backups may contain app files under your system settings. This is separate from a developer-operated data collection service.

Exports may contain patient names, metadata, captions, or identifying details already present in image pixels. Turning off added patient labels is not full de-identification. Review every export and its destination before sharing. The app does not request camera, microphone, location, contacts, or photo-library access.

Siri, Shortcuts, external links, and support

The Open Dental CBCT Studio shortcut opens the app and requires device authentication. Additional Siri and Shortcuts actions open, search, and read bundled public guide topics. Only those public topics are indexed in Spotlight. Onscreen context describes the visible workspace category or guide topic. Patient names, identifiers, study pixels, measurements, annotations, review files, and filenames are not indexed or donated. These actions do not diagnose scans, select patients, change studies, or approve exports. Apple controls how Siri and Shortcuts process your requests under your device settings and Apple's privacy policy.

Source and license links open external websites, whose operators may receive ordinary browser request data under their policies. Emailing support uses your chosen mail application. The developer receives information you choose to include in that message. Do not send patient data, identifiable screenshots, or full DICOM studies for ordinary support. Support correspondence is used to respond and investigate reported problems, and retained only while needed for those purposes or applicable legal obligations. Contact the email above to request access, correction, or deletion of correspondence we hold. The developer cannot retrieve or remotely delete studies or exports stored only on your device.

Intended use

The app has not been validated for diagnostic use. This privacy notice does not replace professional judgment or establish regulatory clearance.

Apple diagnostics

Apple may share diagnostics and usage statistics according to your sharing settings. Any reports we receive are used to improve reliability. See Apple's App Analytics & Privacy notice (https://www.apple.com/legal/privacy/data/en/app-analytics/).

Visiting this policy online

This policy page contains no advertising, analytics scripts, or cookies added by the developer. When hosted on GitHub Pages, GitHub logs visitors' IP addresses for security. See GitHub's privacy statement (https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement).

Changes to this policy

We will update this policy and its date when our data practices change. The current policy will be available with the app and on its published privacy page.

Language support

The app supports English only. Its interface, app-authored help, privacy policy and report text are bundled for offline use. Imported content, patient data, filenames, annotations and saved records are not translated. The app does not call a translation service or download language models. This does not change the data handling described in this policy.