Patient Terms & Privacy Notice

The Cavitech AI patient app gives you a convenient way to stay connected with your dental practice. Through the app, you can:

• View your dental records, X-rays, and treatment history
• See upcoming and past appointments
• Review treatment plans your dentist has prepared for you
• Sign consent forms and documents electronically
• Receive appointment reminders, recall notices, and other notifications from your practice

Important: This app does not provide medical or dental advice. It is not a substitute for seeing your dentist. If you have a dental emergency or need clinical guidance, please contact your dental practice directly.

Your dental practice is the custodian and controller of your clinical data. They decide what information is stored, how it's used for your care, and who on their team can access it. Cavitech AI provides the technology that powers the app, but your practice is in charge of your records.

This means that if you want to:

• Access or get a copy of your clinical records
• Correct information in your dental file
• Ask questions about how your data is used for treatment
• Request deletion of clinical information

...your first step should be to contact your dental practice directly. They are best placed to help with anything related to your clinical care and records. For questions about your app account itself (login, password, account deletion), you can reach us at privacy@cavitech-ai.com.

Cavitech AI uses artificial intelligence to help your dentist analyse X-rays and other clinical images. Here's what that means for you in simple terms:

• AI acts as a second opinion for your dentist. It highlights areas on X-rays that may need attention, similar to how a colleague might review a case.
• Your dentist reviews and approves everything. No AI finding is shared with you until your dentist has personally reviewed it and decided it's accurate and relevant.
• You see your dentist's conclusions, not raw AI output. What appears in your app are the findings your dentist has confirmed — not unfiltered computer suggestions.
• AI does not diagnose. Only your dentist can make a diagnosis. The AI is a tool that supports their expertise, not a replacement for it.
• Your dentist is responsible for all clinical decisions. Whether or not AI is involved, your dentist retains full responsibility for your care, diagnosis, and treatment plan.

You are always welcome to ask your dentist about how AI was used in your care. They can explain what the technology flagged and how they reached their clinical conclusions.

When your dental practice uses Cavitech AI, the following information about you may be stored in the system:

• Your name and contact details (phone number, email address)
• Appointment history and upcoming appointments
• Dental X-rays and clinical images
• Treatment plans and clinical notes
• Electronic signatures on consent forms and documents
• Medical and dental history relevant to your care

All of this information comes from your dental practice — we don't collect it directly from you, except for your email address and password when you create an app account.

We do not use your data to train AI models. Your records are never sold to third parties. Your data is used only to provide the service to you and your dental practice.

When you sign a consent form or document through the app, your electronic signature is legally binding. This is recognised under the following laws:

• South Africa: Electronic Communications and Transactions Act 25 of 2002 (ECT Act)
• United States: Electronic Signatures in Global and National Commerce Act (ESIGN Act) and the Uniform Electronic Transactions Act (UETA)
• European Union: eIDAS Regulation (EU No 910/2014)
• United Kingdom: Electronic Communications Act 2000

Each electronic signature is timestamped and securely stored alongside the document you signed. If you prefer to sign on paper instead, just let your dental practice know — a paper alternative is always available.

Depending on where you live, you have specific privacy rights under law. Here's a summary of what's available in each region:

For clinical records (X-rays, treatment plans, clinical notes): contact your dental practice directly. They manage your clinical data and can help with access, corrections, or deletion requests.

For your app account (login details, account settings, account deletion): contact us at privacy@cavitech-ai.com.

We take the security of your data seriously. Here's how we protect it:

• Encryption at rest: Your data is encrypted using AES-256, the same standard used by banks and government agencies.
• Encryption in transit: All data sent between your device and our servers is protected with TLS 1.3, the latest transport security protocol.
• Per-tenant isolation: Your dental practice's data is kept completely separate from other practices. No one outside your practice can see your records.
• No AI training: Your data is never used to train or improve AI models.
• Never sold: Your data is never sold to advertisers, data brokers, or anyone else.
• Breach notification: In the unlikely event of a data breach that affects your information, we will notify your dental practice and, where required by law, you directly, as quickly as possible.

You must be at least 18 years old to create an account and use the Cavitech AI patient app. If you are under 18, your parent or legal guardian can access your dental records and manage appointments on your behalf through the dental practice. Minors' records are managed by the practice directly — not through individual patient app accounts.

You can delete your account at any time. There are two ways to do this:

• In the app: Go to Settings and select "Delete Account."
• By email: Send a request to privacy@cavitech-ai.com and we'll take care of it.

Here's what happens when you delete your account:

• Your app login and account settings are permanently removed.
• Clinical records (X-rays, treatment plans, clinical notes) are maintained by your dental practice as part of their legal record-keeping obligations. Deleting your app account does not delete your dental records from the practice.
• Electronic signatures you've provided remain on file, as they form part of the legal record for the documents you signed.
• Account deletion is processed within 30 days of your request.

This account deletion process complies with Apple App Store and Google Play Store requirements for user account management.