OmniDent Privacy Policy

Effective date: 7 October 2026 (supersedes the 27 September 2026 version; describes the Home Screen widget as the photo-journal glance it now is, where the previous version called it a care-status line; says what a Mac shows if you add your iPhone's widgets to it; says that Delete All Scans & Data also removes an old copy of the database the app moved aside, and asks the system to redraw the widget, and names the one rare case it cannot reach; and says that a photo you take on its own is filed under no view)
Publisher: Prameya LLC, a United States limited liability company ("Prameya", "we", "us")
Contact: admin@prameya.legal
This policy lives at: https://prameyallc.github.io/privacy/omnident/
All Prameya app policies: https://prameyallc.github.io/privacy/

Consumer health data

OmniDent processes consumer health data. Washington State law requires a separate policy for that. It is here, and it is a distinct document from this one:
OmniDent Consumer Health Data Privacy Policy
If you live in Washington or Nevada, please read it. It applies to you in addition to this policy.

The short version

• OmniDent lets you photograph your own teeth and gums, keep a dated record, log home-care habits, keep visit notes and documents, and read educational information. It runs on iPhone and iPad, on Mac and Apple Vision Pro (without the camera), and has an Apple Watch app and an Apple TV app.
• Your photos stay on your device. They are saved inside the app's private storage. They are never sent to Prameya, and OmniDent never puts them in iCloud. Prameya operates no server that receives your photos, your analysis, or your notes.
• A household on this device is local. You can add people (owner, child, adult you care for, caregiver). Each person has one mouth record. Photos, visits and documents are never uploaded. Switching away from a child session asks the device to confirm it is you, with Face ID, Touch ID or Optic ID, or the device passcode or Mac password.
• Two small things do go to your own iCloud while iCloud Sync is on (it is on unless you turn it off): your app preferences, and a short "continue" note — the tab you were on and the last photo record you opened (as a random identifier). No person's name and no education topic go to iCloud. Your other devices, including Apple TV, use it to offer to continue where you left off. While iCloud Sync is on, Handoff also carries the education topic you last opened to your own nearby devices (never a name), and your paired Apple Watch gets the name of the person whose record is active. Details are in section 6.
• The AI runs on your device. Ask uses Apple Intelligence on your device, or a model you downloaded. Nothing you photograph or type is sent to Prameya or to any online AI service.
• The app connects to the internet in a few narrow ways, all listed in section 8: downloading AI model files from Hugging Face, your own iCloud account, and Apple's own services (Sign in with Apple, purchases, Handoff).
• No ads. No analytics. No trackers. No third-party SDK that phones home. We do not sell your data. We have never sold your data.
• Prameya has no user database. We do not know who you are. There is no account on our systems to look you up in.
• Sign in with Apple is optional, and iCloud Sync does not need it. Signing in turns iCloud Sync on and signing out turns it off; you can also switch it yourself in Settings, and what syncs is the same either way. If you use it, you can delete your account and everything on the device from inside the app. Because OmniDent has no server and never exchanges Apple's authorization code, no Apple token for OmniDent exists, and there is no token for the app to revoke.
• OmniDent is an educational wellness app with no FDA authorization of any kind, and HIPAA does not apply to it. The on-device photo reading and Ask can describe what they think they see, and the photo reading can name a dental condition. Do not use anything the app shows you to decide whether to seek or delay dental care.

1. What OmniDent does

OmniDent is a direct-to-consumer app for your own oral care. The tabs a person reads are You / Record / Do / Ask / More. Capture is a full-screen cover, not a tab. It lets you:

• take photographs of your mouth with the in-app camera (iPhone and iPad only), and keep them as a dated record;
• run an on-device AI model over a saved photo when you ask for a "What this photo looks like" reading (taking a photo runs no AI model);
• ask questions in Ask, answered by Apple Intelligence on your device or by a model you downloaded;
• log daily habits such as brushing, flossing, mouthwash and sugary drinks;
• log visits you attended and drop a treatment plan, radiograph, clinic photo, receipt or EOB into Record — those files stay in the app container;
• keep a visit packet of identifiers (photos + standing questions + a visit), not a diagnosis;
• keep more than one mouth on this device (Household), with a shorter kids care session when the active person is a child;
• run illustrative cost scenarios using figures you enter;
• read general information about oral health, on the phone, the Watch and the TV;
• turn on morning and evening care reminders;
• show a one-line photo-journal glance on the Home Screen widget (the date of the active person's last photo, whether two of their photos are of the same view, and whether today's care is logged; no photograph and no name), and a care-session timer on the Lock Screen;
• optionally share brushing and dietary-sugar entries with Apple Health.

OmniDent has no FDA authorization. Analysis of dental images for clinical purposes is a regulated activity in the United States. We do not make a blanket "the app does not diagnose" claim, because it would not be true of everything on screen. What each AI feature does with its output is set out in section 4 and section 18. The short form: taking a photo runs no AI model, and no model writes anything about it; the photo reading shows what the models wrote, headed "This looks like", and can name a condition; Ask checks its answers against a fixed list of condition names. Do not act on any of it. Ask a dentist.

Some feature descriptions in the app still use dental-condition wording — "caries, erosion, stain & gum risks", "gingival inflammation" — to describe what a feature is about. That is subject-matter wording, not a finding the app has made about your mouth.

2. Subscriptions and In-App Purchases

Available tiers

There is one paid upgrade, OmniDent Pro, sold as three products. Buying any one of
them grants exactly the same Pro — there are no separate feature tiers.

Family Sharing is enabled on all three. Subscriptions renew until you cancel (how, on each
device, is under Cancellation and refunds below); Lifetime is a one-time non-consumable.

The knowledge layer is free and stays free. Without paying anything you get
your routine, the reference library, a visit-prep outline and the visit sheet, with no account and no time limit. You can take as many photos as you like; the free timeline, compare and visit sheet show your three most recent, and every photo stays on your device and in your export. Pro adds full photo history (on iPhone and iPad, the only devices that keep photos), cadence reminders and the print-ready visit sheet.

Pro does not add cloud sync, and there is no paid iCloud option. OmniDent stores your
records on your device in every case, paid or not. If a subscription lapses you keep your
own data and can still export it in its raw form; only the Pro tools stop.

Free vs paid tier data collection

Both tiers process the same consumer health data (listed in the Consumer Health Data Privacy Policy).

• Free: Photos analysed on-device, as many photos as you like with the three most recent shown, habits logged locally, your routine, the reference library, a visit-prep outline and the visit sheet
• With Pro: Photos analysed on-device (same models), full photo history, habits logged locally, cadence reminders and the print-ready visit sheet. The Mac and Apple Vision Pro keep no photos, so there Pro adds the cadence reminders and the print-ready visit sheet

In both tiers:
- Photos stay on your device
- Photos, analysis, your health profile, habit logs, visits and documents never go to iCloud; what does go to your iCloud (section 6) is the same in both tiers
- No transmission of photos or analysis to Prameya
- Same AI models, same on-device processing

Subscription unlocks features. It does not change what data is collected or where it goes.

Cancellation and refunds

Subscriptions are managed by Apple:
- Cancel on iPhone or iPad: Settings → your name → Subscriptions → OmniDent
- Cancel on a Mac: the App Store app → your name → Account Settings → Subscriptions → Manage
- Cancel on Apple Vision Pro: Settings → your name → Subscriptions → OmniDent
- Refund requests: reportaproblem.apple.com

Prameya cannot cancel your subscription or issue refunds. Apple controls all billing.

What the app keeps about a purchase

OmniDent keeps no purchase record of its own. Each time it needs to know whether you have Pro, it asks StoreKit — Apple's purchase system on your device — for your current entitlements and keeps the answer in memory only. Apple processes the payment and keeps its own transaction records, on your device and in your Apple Account, under Apple's terms. The app sends nothing about a purchase to Prameya, and we never see payment details. "Delete All Scans & Data" does not touch Apple's purchase records, and does not need to: they are Apple's, not ours.

3. Photographs of your mouth

Photographs of a person's mouth are sensitive. Here is exactly what happens to them.

Where they are stored

When you take a photo in OmniDent on iPhone or iPad, the image is written as a JPEG file into the app's own private storage on your device — the Documents/Scans folder inside the OmniDent sandbox. A small thumbnail and the date are stored in the app's local database, also on your device, with the caption and view tag if you add them. A photo you take as part of a set of photos is also filed under the view of your mouth that the set asked for; one you take on its own is not (earlier versions filed it as Smile). Taking a photo runs no AI model, so nothing a model wrote is stored with it.

On iPhone and iPad that storage is protected by iOS Data Protection at the Complete level. In practical terms, the files are encrypted with a key tied to your device passcode and are unreadable while the device is locked. This is why OmniDent requires a passcode-protected device to be meaningful — if you have no passcode, iOS has nothing to protect the files with.

The Mac and Apple Vision Pro apps have no camera capture. Photos taken on your iPhone or iPad are not copied to them.

Where they are not stored

• They are never uploaded to Prameya. We have no server that could receive them.
• They are not synced to iCloud by OmniDent. The local photo database is configured with cloud sync switched off entirely, and no photo, thumbnail or file path is ever put in the iCloud key-value store or in Handoff.
• They are not sent to Hugging Face, to any AI provider, to any partner, or to any advertiser.

One thing this does not mean: OmniDent does not mark the Documents/Scans folder as excluded from your device backup. If you back your iPhone or iPad up to iCloud or to a computer, those files are part of that backup, in your own Apple Account or on your own computer, under Apple's terms rather than ours.

One important exception: your own Photos library

OmniDent has a setting called auto-save captures to Photos. When it is on, every new photo you take in the app is also copied into your device's system Photos library, the same place your ordinary camera photos go. You can also save a single past photo there with its Save button.

This setting is off by default. You have to turn it on.

While a child profile is active, auto-save is forced off, even if you turned the setting on. A child's mouth photos must not silently enter iCloud Photos.

If you turn it on (and you are not in a child session) and you use iCloud Photos, that means new mouth photos will be backed up to your personal iCloud Photo Library, under your Apple Account, subject to Apple's terms — not ours. This is still your data in your account, and Prameya still never sees it. But it does leave OmniDent's protected container, and you should know that.

You can turn it on at Settings → Photos inside OmniDent. You can also revoke OmniDent's permission to add to your Photos library at any time in iOS Settings → Privacy & Security → Photos. OmniDent asks only for permission to add to your library; it cannot read it.

Household mouths stay on this device

Settings → Household (and Family & kids mode) adds people on this device. Each person has one mouth. Photographs, visits and documents are keyed to the active mouth. A child session cannot open another person's photos, Ask, Settings, Paywall, dentist share, the photo reading, or the visit packet.

Leaving a child session for an adult record asks the device to confirm it is you: Face ID or Touch ID, or the device passcode on iPhone and iPad; Touch ID or your Mac password on a Mac (a Mac without Touch ID asks for the password); Optic ID or the device passcode on Apple Vision Pro. The app does not keep a second password. If the device has no passcode or password, the system cannot lock, and Household settings says so.

The household itself — names, roles and photos — does not sync, and no person's name goes to iCloud or through Handoff. While iCloud Sync is on, the name of the person whose record is active does go to one other device: your paired Apple Watch, which shows it. With iCloud Sync off, the Watch does not get it. Section 6 explains.

A passphrase-sealed transfer file moves names and roles to another of your devices. Photos, visits and documents stay on the sending device. This is not iCloud household sync, and there is no Household subscription. StoreKit Family Sharing covers Pro on other Apple IDs; it does not share this record.

Files you pick

Record lets you add a document you pick with the system file picker (or drop onto the photo comparison screen), and Household lets you open a transfer file with the same picker. OmniDent receives only the file you pick or drop. The in-app chat does not take photos: a picture is never attached to an Ask question.

Files you share yourself

Share care summary (under More, adult sessions only) builds a short summary — the active person's display name, their care streak, the number of recent care days, the dates of the photos you select — and, with Pro, a one-page PDF of it, and hands that together with small previews of the photos you selected to the iOS share sheet. On a Mac or Apple Vision Pro, which keep no photos, it shares your care days alone. Export My Data (section 10) and the household transfer file work the same way. OmniDent sends none of these anywhere itself: each goes only where you send it from the share sheet.

Visit dates in Spotlight

When you log a visit, OmniDent adds an entry to your device's Spotlight search index so you can find it from system search. The entry's title is the date alone — for example "Visit on 2026-09-01" — with no practice name, no notes, no document and no person's name. Deleting that visit removes its entry, and Delete All Scans & Data removes all of them. Photos, documents, marks you draw and Handoff activities are not added to Spotlight.

Deleting photos

• A single photo: open the scan and delete it. The JPEG file and its database record are both removed.
• Everything: Settings → Privacy & Security → Delete All Scans & Data. This is immediate and permanent. Section 10 lists everything it removes, and the few things it leaves.
• If you turned on auto-save to Photos, or saved a photo there, copies in your Photos library are yours to delete in the Photos app. OmniDent cannot reach into your Photos library to remove them, and does not try to.

4. The on-device AI, and what it downloads

Everything runs on your device

OmniDent uses two kinds of on-device model:

• Apple Intelligence — Apple's on-device language model, built into iOS, iPadOS, macOS and visionOS where you have turned Apple Intelligence on. OmniDent downloads nothing for it.
• Open models you download, run with Apple's MLX framework on your device's own chip (section "Model files come from Hugging Face" below).

When you ask a question or ask the app to read a photo, the image and the text are processed in memory on your device. They are not transmitted to Prameya, to a cloud AI provider, or to anyone else. There is no remote inference path in the app, and no remote fallback. Settings → General → Enable on-device answers switches off Ask, the photo reading, and Ask iPhone on Apple Watch (section 6). Taking a photo runs no model, with the switch on or off.

Ask

• The Ask tab appears where Apple Intelligence is turned on and ready and on-device answers are on. It is hidden in a child session.
• Your question goes to Apple Intelligence on your device. Apple Intelligence may look things up in OmniDent's built-in reference library, which is also on your device. If Apple Intelligence cannot answer that question, Ask tries a text model you downloaded, if there is one.
• Each answer is checked, a sentence at a time, against a fixed list of dental-condition words. If a sentence uses one, the answer stops there, or is replaced by a line saying the app will not name a condition. This is a word list, not a safety review: an answer can still describe a condition in other words.
• Ask does not read photos. The conversation is kept in memory only while you are on the Ask tab; it is not saved.

Taking a photo

Taking a photo runs no AI model. The photo is saved as you took it, and no model writes anything about it. The only feature that runs a model over a photo is the reading below, and only when you tap its button.

"What this photo looks like"

On a saved photo, an adult session shows a Read this photo on-device button. Tapping it:

1. runs the vision model you downloaded (SmolVLM) over a reduced copy of that photo, on your device, and
2. passes the vision model's written notes — text, not the photo — to Apple Intelligence, or, if Apple Intelligence is not answering, to a text model you downloaded, which writes a short reading headed "This looks like", one care job for the week, and questions to take to a dentist.

Both texts are shown as the models wrote them. They are not checked against the word list, and they can name a dental condition. The card says it is not FDA-authorized. The reading is not saved: it disappears when you close the photo, and it is not in the export.

Model files come from Hugging Face

The downloadable models are not shipped inside the app. Downloads come from Hugging Face (huggingface.co), the public repository where these open models are published.

Each model row shows its approximate download size. Settings names huggingface.co under AI Models. The app does not show the model's licence before a download begins. This section is that disclosure.

Earlier versions of OmniDent offered Llama 3.2 1B, Gemma 3 4B and PaliGemma 3B. They are no longer offered, and OmniDent deletes any copy of them from your device when it starts.

Hugging Face is not our processor and receives nothing about you from us. Your connection to them is governed by their own privacy policy.

5. Sign in with Apple, and how to delete your account

Signing in is optional. OmniDent works fully without it, and iCloud Sync does not depend on it: sync uses the iCloud account your device is signed in to. Signing in does move one switch: it turns iCloud Sync on, the same switch as Settings → iCloud Sync, so what syncs is exactly what section 6 lists, as when you turn it on yourself. Signing out turns it off (below). You can turn it back on in Settings without signing in.

If you choose Sign in with Apple (at the top of Settings), this is what we get and where it goes:

• an opaque Apple user identifier — a random-looking string that identifies you to this app only;
• your name and email address, only if Apple passes them and only on the very first sign-in. Apple lets you use its private email relay instead of your real address, and we recommend it.

All three are stored in your device's Keychain, on this device only. Settings shows them back to you. When the app starts, and when you open Settings, iOS asks Apple whether that sign-in is still valid, and OmniDent removes the stored identifier, name and email if Apple says it was revoked or not found. None of it is sent to Prameya. We have no account record for you, no profile database, and no way to look you up.

Deleting your account

Apple requires that an app offering Sign in with Apple also lets you start account deletion from inside the app. Where an app has exchanged Apple's authorization code for tokens on its own server, Apple additionally requires those tokens to be revoked through Apple's Sign in with Apple REST API.

OmniDent has no server and never exchanges the authorization code. No access token and no refresh token for OmniDent is ever minted, so none exists anywhere to revoke, and the app makes no revocation call. The only thing that ever exists is the app-scoped identifier sitting in the Keychain on your own device, and deleting that is the whole of the deletion rather than part of it.

In OmniDent, Settings → (your account, at the top) → Delete Account & All Data does all of the following:

1. clears the Apple user identifier, name and email from this device's Keychain, ending the association;
2. turns iCloud Sync off on this device, as signing out does, and removes the iCloud "continue" note;
3. removes the records this app placed in your private iCloud database, by deleting the app's CloudKit zone — if you are not signed into iCloud, are offline, or the zone was never created, there is nothing there to remove and the step simply completes;
4. runs Delete All Scans & Data (section 10).

Because OmniDent sets up its iCloud connection when it starts, preference syncing stops completely the next time you open the app, as it does when you turn the switch off yourself. Until then, the reset, first-launch preferences can still be written back to your private iCloud database. Nothing is written to the continue note while the switch is off. You can turn iCloud Sync back on in Settings whenever you want it.

If you also want OmniDent removed from the list of apps you have used Sign in with Apple with, that control belongs to Apple, not to us: iOS Settings → your name → Sign in with Apple → OmniDent. You can use it at any time, before or after deleting in the app.

You can also sign out without deleting. That clears the Keychain entries on that device, leaves your data in place, and turns iCloud Sync off.

6. iCloud sync, Continue and your other devices

iCloud Sync is on by default when your device is signed in to iCloud. You can turn it off at Settings → iCloud Sync. Signing in with Apple turns it on, and signing out turns it off (section 5); you do not need to sign in to turn it on. While it is on, OmniDent puts two things in your own iCloud account. Neither goes to Prameya, and we cannot read either.

Your preferences (CloudKit)

Your app preferences sync between your devices through CloudKit, into your private iCloud database, inside your own Apple Account. We have no CloudKit administrative access to your private database.

The set of records permitted to sync is pinned in the app by an allow-list: exactly one record type, the preferences record. If anything ever drifts from it, CloudKit mirroring switches itself off rather than send something it should not.

Turning iCloud Sync off stops preference syncing the next time you open the app.

The "continue" note (iCloud key-value store)

So that your other devices can offer to pick up where you left off, OmniDent keeps a short "continue" note on your device: the tab you were on; the identifier of the education topic you last opened — for example diabetes_and_oral_health or gum_health_and_periodontal_disease, which can reveal what you were reading about; the identifier of the last photo record you opened — a random string, not the photo; the display name of the person whose record is active — for example, a child's first name or nickname — if there is one; and when it was written. Handoff and your paired Apple Watch get parts of it, as set out below.

Only part of it goes to iCloud. OmniDent writes one small entry to iCloud's key-value store for this app, in your iCloud account. It contains:

• the tab you were on;
• the identifier of the last photo record you opened;
• when it was written;

and, as a second entry, your appearance choice (light, dark or system).

It never contains a person's name or the education topic, and never a photo, a thumbnail, a file path, an analysis, or anything from your health profile, habit log, visits or documents. Each new entry replaces the last one; it is not a history. Earlier versions of OmniDent also put the topic identifier and the active person's name there, and a device still running one can write such an entry again until it is updated. OmniDent replaces an entry like that with the tab and the record identifier when it starts and each time it saves the note, or removes it if iCloud Sync is off.

This entry is written only while iCloud Sync is on. Turning iCloud Sync off removes both entries from iCloud straight away, and that device writes nothing more there while it is off. Delete All Scans & Data also removes them. Continue then starts again from what you do next, if iCloud Sync is still on.

The iCloud Sync switch is set on each device separately. Turning it off on your iPhone does not turn it off on your iPad or Mac: a device where it is still on keeps writing its own entry — the tab and a record identifier — to the same place. Turn it off on every device if you want none written.

Deleting the app from one device does not by itself remove these entries, or your preferences, from iCloud. Use Delete All Scans & Data, or turn iCloud Sync off, before you delete the app.

Handoff

While you use OmniDent on iPhone, iPad, Mac or Apple Vision Pro, it tells Apple's Handoff where you are, so a nearby device signed in to the same Apple Account can offer to open the same place. While iCloud Sync is on, the Handoff message carries the tab, the topic identifier and the photo-record identifier from the continue note described above — never a person's name. With iCloud Sync off it carries only the tab. Its title names the tab, never the topic. While you are taking a set of photos, or have a visit packet open, and iCloud Sync is on, it can instead carry random identifiers of that capture session or packet, of the mouth record and of a visit, and which photo views of an unfinished set are done (for example the upper or lower arch). With iCloud Sync off, those identifiers do not travel either: a set of photos or an open packet hands off the tab alone. It never carries a photo or a file path, and OmniDent does not add it to Spotlight. You can turn Handoff off for all apps in your device's settings (on iPhone: Settings → General → AirPlay & Continuity).

Apple Watch

The Apple Watch app works with the iPhone app over Apple's paired-device connection (WatchConnectivity). Nothing it does reaches Prameya.

• Learn shows the reference library, which is inside the Watch app.
• Now shows the built-in care prompts (morning brush, evening brush, start a care session, log sugar). Tapping Confirm on a brush prompt records a brushing in the habit log on your iPhone and, if OmniDent's Apple Health switch is on, writes a toothbrushing entry to Apple Health (section 7). Snooze schedules a reminder on the iPhone only if you have turned care reminders on.
• While iCloud Sync is on, the iPhone sends the Watch the current continue note, so the Watch can show the active person's name and offer the last topic. With iCloud Sync off it sends only the tab, and after Delete All Scans & Data it tells the Watch to clear the name.
• Ask iPhone (under More) sends the question you type to OmniDent on your paired iPhone. The iPhone answers with a text model already downloaded there — the one Ask iPhone last used (Qwen2.5 0.5B at first) if it is still on the iPhone, otherwise any other text model you downloaded (Qwen2.5 0.5B or Gemma 4 E2B) — using passages from the built-in library, and sends the answer back. It does not use Apple Intelligence, and it does not apply the word-list check described in section 4 (a short list of question words, such as "diagnose", gets a fixed reply instead). It does not answer while OmniDent's Enable on-device answers switch is off or while a child session is active on the iPhone; the Watch shows a line saying why. It never starts a download: if no text model is on your iPhone, the Watch is told to download one in Manage Models. The question and answer are not saved.

Apple TV

The Apple TV app has four tabs: Continue, Library, Ask and About. It uses the same bundle identifier as the iPhone app. It reads the continue entry from your iCloud key-value store, which holds no name and no topic: while iCloud Sync is on, its Continue tab says which tab you were last in on another device and offers the Library. The TV shows no person's name and does not open the topic you last read. Ask on Apple TV answers only with a matching passage from the built-in library (a short list of question words gets a fixed reply instead); it runs no language model and downloads nothing. About shows the app's educational disclaimer, the short version of this policy, and the addresses of this policy, the Consumer Health Data Privacy Policy and the terms, as text built into the app: it fetches nothing and opens no link. The TV app has no camera, photos, household records, Apple Health or purchases.

Mac and Apple Vision Pro

The same app runs on Mac and Apple Vision Pro, with the same iCloud Sync, continue note, Handoff and Ask as on iPhone. Neither has camera capture, and the Mac app has no Apple Health. Because neither keeps a photo, neither offers the photo-reading model (SmolVLM) or the photo reading: they offer the two text models, and their download switch is Download over Personal Hotspot (section 4).

No push notifications

OmniDent has no push-notification entitlement, so neither Apple nor Prameya can push anything to it. iCloud changes are picked up while the app is running. OmniDent sends no marketing or promotional notifications, and Prameya sends you no notifications at all. The only notifications are the local care reminders you turn on yourself (section 7).

7. Apple Health and care reminders

Apple Health

OmniDent's Apple Health switch is off until you turn it on at Settings → Apple Health → Sync with Apple Health. Turning it on asks iOS for permission.

If you enable it:

• OmniDent writes into Apple Health a toothbrushing entry when you finish a care session in which you brushed, and a dietary-sugar entry when you log sugary drinks in a care session; a toothbrushing entry when you confirm a morning or evening brush from the Apple Watch Now tab, from the Confirm button on a care-reminder notification, or through OmniDent's Log care action (for example, run from the Shortcuts app); and a toothbrushing entry when you tick the brushing habit in the 30-day programme done. Unticking it, and ticking the flossing or other habits, writes nothing. Care days you add or edit in your care log are not written.
• OmniDent reads nothing from Apple Health. The permission request asks only to write those two kinds of entry.

With the switch off, nothing OmniDent does writes to Apple Health or asks iOS for Apple Health permission — not a care session, not the 30-day programme, not Apple Watch, a reminder or the Log care action.

Apple Health data lives in Apple's Health store on your device, under your control. Prameya never receives it. You can revoke that permission at any time in iOS Settings → Health → Data Access & Devices.

OmniDent does not request access to Health Records (clinical records from a provider) and cannot read them. There is no Apple Health on the Mac app.

Care reminders

Care reminders are off until you turn them on at Settings → Care reminders. Switching on a morning or evening reminder is the only thing in OmniDent that asks iOS for permission to send notifications. OmniDent then schedules local notifications on your device for about the next week — generic brushing nudges that name no person and no condition. Each has Confirm, Snooze and Not now buttons: Confirm records a brush (and, if the Apple Health switch is on, writes a toothbrushing entry), Snooze schedules one more reminder, and Not now does nothing. Nothing about a reminder is sent to Prameya or to any server. Turn them off on the same screen, or in iOS Settings → Notifications → OmniDent.

Widget and Lock Screen

The Home Screen widget, Photo journal, shows one line that the app writes to a storage area shared only with its own widget: the date of the most recent photo in the active person's record (for example "Last photo Oct 6"), "Same spot" when two of that person's photos are of the same view (the view tag you gave them, or the view the set of photos asked for when you took them), and "You're set for today" once today's care is logged. With no photo yet it says "No photos yet" or "Keep one photo". It shows no photograph and no name. OmniDent on a Mac or Apple Vision Pro keeps no photos, so the widget it puts there never shows a photo date. If you add your iPhone's widgets to your Mac, a feature of macOS, the Mac shows your iPhone's line, photo date included: your iPhone passes it to your Mac, and OmniDent sends nothing for it. Anyone who can see a screen you put the widget on can see that line. Tapping it opens OmniDent at your photo journal, or, on iPhone and iPad, at the camera if there is no photo yet.

During a care session, a Live Activity on the iPhone Lock Screen and Dynamic Island shows the timer, the step, and the name of the person whose session it is. Anyone who can see your Lock Screen can see it. It is started and updated on the device; it uses no push.

8. Everything the app sends over the network — the complete list

There is no token-revocation request in that list, because there is no OmniDent token to revoke — see section 5.

Files you share yourself from the iOS share sheet — the export, the care summary, the household transfer file — go wherever you send them; the app itself sends them nowhere (section 3).

Links to sources in the reference library, and links to this policy, open in your browser; the site you open sees an ordinary visit. Send Feedback opens your own email app.

All connections the app makes use HTTPS. The app disallows unencrypted connections at the platform level.

That is the whole list. There is no analytics endpoint, no crash-reporting endpoint, no advertising network, no attribution SDK, no remote AI service, and no Prameya server of any kind. The app's privacy manifests declare no collected data, no tracking and no tracking domains, and no crash-reporting SDK is built into the app. The app does subscribe to Apple's MetricKit, which hands it daily performance and crash summaries on the device; the app writes them to the device's own log and sends them nowhere.

What Prameya does receive

Almost nothing, and none of it from the app:

• Aggregate App Store statistics from Apple — downloads, territories, crash counts. Apple provides these in aggregate. They do not identify you. If you have Apple's "Share with App Developers" analytics setting enabled at the system level, Apple may include your device's crash reports in what it shares with us; you control that in iOS Settings → Privacy & Security → Analytics & Improvements.
• Emails you send us. If you write to admin@prameya.legal, we have your email and whatever you put in it. We keep support correspondence only as long as needed to handle it.

9. Things we do not do

One line each, because the honest answer is short.

• We do not sell your personal information. We never have.
• We do not share your personal information for cross-context behavioural advertising.
• We do not show ads. There is no ad SDK in the app.
• We do not track you across apps or websites. The app declares no tracking and no tracking domains, and does not ask for the App Tracking Transparency permission because it has nothing to track you with.
• We do not use third-party analytics.
• We do not build a profile of you. We have no database in which to put one.
• We do not use your photographs or your data to train AI models. Not ours, not anyone's.
• We do not share your data with dentists, insurers, employers or partners. The app no longer lists partner offers. If you claimed one in an earlier version, the claim is a note on your device and nothing was transmitted.
• We do not use geofencing around dental offices, hospitals, pharmacies or any other health care facility. The app requests no location permission and contains no location code.
• We do not contribute your data to any shared or "collective" dataset.

10. Retention, export and deletion

Retention. Because your content lives on your device, you decide how long it is kept. We impose no retention period because we hold nothing to retain. If you delete the app, iOS deletes its container and everything in it. What is in your iCloud (section 6) is not removed by deleting the app. Delete All Scans & Data resets your preferences to first-launch values; if iCloud Sync is on, the reset preferences are written back to iCloud. Delete Account & All Data deletes the app's records from your private iCloud database and turns iCloud Sync off on that device; preference syncing then stops completely the next time you open the app (section 5). The continue note is removed when you turn iCloud Sync off or use Delete All Scans & Data, and starts again if iCloud Sync is on on any of your devices.

Export. Settings → Privacy & Security → Export My Data produces a .zip file, generated entirely on your device, and hands it to the standard iOS share sheet so you can put it wherever you want. Inside it:

• export.json — your photo records, the caption and view tag you wrote on each one, your logged care days, your saved what-if scenarios, your claimed partner promotions, your 30-day programme progress and your oral-health profile. A per-scan entry carries coded dental vocabulary terms, capability labels and a number of findings only where an analysis is saved with that photo. Taking a photo runs no AI model and saves no analysis, so the entry for a photo you take leaves those fields out.
• Photos/ — every photograph you took in OmniDent, at full resolution, under the file name the matching scan entry gives as photoFileInExport. Location and camera details are removed from each copy; if they cannot be removed from a photo, no file is produced and the app tells you which one.
• Thumbnails/ — the small preview of each one.

If a photograph's file is missing from your device — it was removed outside the app, for example — the scan entry is still exported, marked photoFileMissingOnDisk, with the thumbnail. It is not quietly dropped, and the file does not claim a picture it does not carry. If a photograph is on your device and cannot be read, no file is produced at all and the app tells you which one: a short export that looks complete is worse than no export.

The file does not contain: the photo reading, household names, visits, plan lines, documents, visit packets, marks you drew, or the settings-store items (care-day history, Smile Points, widget snapshot, reminder schedule, cost-model sliders). Email admin@prameya.legal if you need help getting at any of those; they are on your device, not with us.

Deletion.

Delete All Scans & Data removes: your photos and their files, thumbnails and analyses; habit logs; what-if scenarios; claimed promotions; 30-day programme progress; your oral-health profile; household people and mouths; visits, plan lines, documents and their files, visit packets, and marks you drew; the settings store behind them (care-day history, profile names, Smile Points, widget snapshot, reminder schedule, cost-model sliders, the Apple Health switch); any old copy of the app's database that it moved aside because it could not open it at launch (the app tells you on screen when this happens); whether you have seen the welcome screen and acknowledged the wellness disclaimer on this device; the widget's shared storage, after which it asks the system to redraw the Home Screen widget, which then has no photo date to show; every downloaded model and its bookkeeping; the record of brushes confirmed from Apple Watch, a reminder or the Log care action; the visit entries in Spotlight; care reminders already scheduled; the iCloud continue note, and the name your paired Apple Watch was showing; and it resets your synced preferences to their first-launch values.

It leaves, and we list them so you are not surprised:

• your iCloud Sync switch, deliberately — deleting data does not change your sync choice;
• two device settings that are not about you: whether downloads may use cellular (on a Mac or Apple Vision Pro, a Personal Hotspot), and the camera framing choice;
• your Sign in with Apple entries in the Keychain (Delete Account removes them);
• in one rare case, the app's database file itself: when OmniDent can neither open it at launch nor move it aside, it says on screen that it is running on temporary storage, and Delete All in that session cannot reach the file (run Delete All again after a launch that does not say so, or delete the app);
• anything already written to Apple Health or copied to your Photos library, and Apple's own purchase records.

If you want help with any of this, or you want us to confirm in writing that we hold nothing about you, write to admin@prameya.legal.

11. Security

• On iPhone, iPad and Apple Vision Pro, the files OmniDent creates — photographs, documents and its database — default to Data Protection at the Complete level: encrypted at rest and inaccessible while the device is locked. On Mac, app data sits in the app's sandbox container and is protected by the Mac's own disk encryption if you have turned it on.
• Your Apple sign-in identifier, name and email are stored in the Keychain, on this device only.
• The household transfer file is encrypted with a passphrase you choose (at least eight characters).
• All network connections use HTTPS. Unencrypted connections are blocked by app configuration.
• The app uses only Apple's platform cryptography and standard TLS. We make no claims about proprietary or "military-grade" encryption, because we do not use any.

The strongest security property here is structural rather than technical: there is no Prameya server holding your data, so there is no Prameya breach that can expose it. The corresponding limitation is equally real — the security of your data depends on the security of your device and your Apple Account. Use a passcode. Use two-factor authentication on your Apple Account.

12. Children

OmniDent's account holder is an adult. There is no child Apple ID, no child sign-up, and the App Store listing is not in the Kids category.

Kids mode is a parent tool on the parent's device. Settings → Family & kids mode and Household add a person with the child role. The app does not create a kids profile unless you add one. A child person gets the shorter care session. Photographs, visits and documents for that person stay on this device, keyed to that mouth.

When a child profile is active:

• the tabs are You / Record / Do — Ask (including Ask iPhone on a paired Apple Watch), Settings, Paywall, dentist share, the photo reading, Smile Points and the visit packet stay with the grown-up;
• auto-save to Photos is off;
• the child cannot delete photos or the person;
• switching to an adult record asks the device to confirm it is you (Face ID, Touch ID or Optic ID, or the device passcode or Mac password).

A child's name can leave the device, in one way. While iCloud Sync is on and the child's record is active, the child's display name goes to your paired Apple Watch, which shows it. It does not go to iCloud or through Handoff, and Apple TV does not show it. Whatever the switch, it shows on the Lock Screen during that child's care session (section 6 and section 7). Use a nickname, or turn iCloud Sync off, if you would rather it did not.

The Children's Online Privacy Protection Act (COPPA) applies to operators of services directed to children under 13, or who have actual knowledge that they are collecting personal information from a child under 13. OmniDent's kids mode is a tool for a parent, on the parent's own device, with no transmission to us and no child-facing sign-up; on that basis we do not treat OmniDent as directed to children. We are stating the feature rather than relying on the conclusion, so that you can judge it.

If you believe a child's information has been entered into this app and you want it removed, write to admin@prameya.legal — although in almost every case the information is on your own device. Delete All Scans & Data also clears household people, their names and care-day history, including a child's; the continue note in iCloud; and the name your paired Apple Watch was showing. Deleting the app removes the container.

A parent supervising a child's brushing should know that photographing a child's mouth stores those photos on this device. Auto-save to Photos is forced off while that child is active. The consumer health data policy lists children's health data as its own categories.

13. California residents

If you live in California, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) gives you specific rights.

Categories of personal information. Over the past 12 months, OmniDent has handled, on your device and in your own iCloud account, the following categories as defined by the CCPA:

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have not done either in the preceding 12 months. We do not use or disclose sensitive personal information for any purpose other than the purposes permitted under the CCPA regulations without your direction — in practice, we do not receive it at all, so the "limit the use of my sensitive personal information" right has nothing to operate on. We provide the control anyway: turning off on-device answers, iCloud Sync and Apple Health stops most of that processing — section 6 lists what those switches do not stop (Handoff, which still carries the tab).

Your rights are to know, to access, to correct, to delete, to opt out of sale or sharing, to limit the use of sensitive personal information, and not to be discriminated against for exercising any of them.

How to exercise them. Because we hold no personal information about you on any server, the fastest route for access, correction and deletion is the in-app controls in section 10 — they are immediate and require no verification step. If you would rather make a formal request, or you want written confirmation of what we hold, email admin@prameya.legal with "California privacy request" in the subject. We will respond within 45 days, and may extend once by a further 45 days if we tell you why. We will verify a request by corresponding with you at the address you write from; we will not ask you for additional identity documents, because we have nothing to match them against. An authorised agent may act for you with your written permission.

We do not use personal information for automated decision-making that produces legal or similarly significant effects.

14. Washington and Nevada residents — consumer health data

Washington's My Health My Data Act (RCW ch. 19.373) and Nevada's SB 370 give you rights over consumer health data, and Washington requires a separate, distinctly linked policy for it.

That policy is here: OmniDent Consumer Health Data Privacy Policy. Both policies are also linked inside the app, as two distinct links, in Settings.

Two points worth stating in this document as well:

• Washington's definition of "collect" is much broader than Apple's. Apple's App Store privacy labels use "collect" to mean transmitting data off your device. Washington's statute defines it as to "buy, rent, access, retain, receive, acquire, infer, derive, or otherwise process" consumer health data in any manner. We do not use the narrow App Store definition to claim state health-privacy law does not reach us. Under Washington's definition, OmniDent collects consumer health data, and the separate policy is written on that basis.
• The Washington Act is enforced through the state Consumer Protection Act (RCW ch. 19.86), and a violation may be pursued by a private individual under RCW 19.86.090 as well as by the Attorney General.

15. Other US states

Several other states — including Colorado, Connecticut, Virginia, Utah, Texas, Oregon and Montana — give residents rights to access, correct, delete and port personal data, and to opt out of targeted advertising, sale, and profiling. Some require opt-in consent for sensitive data including health data.

We honour all of these. The mechanics are the same as everywhere else in this policy: the in-app controls are the fastest route, and admin@prameya.legal is the formal route. We do not conduct targeted advertising, sale of data, or profiling, so those opt-outs have nothing to switch off.

16. Outside the United States

If you use OmniDent in the European Economic Area, the United Kingdom or Switzerland, the GDPR or UK GDPR may apply. Prameya LLC is the controller for the limited processing described in this policy.

• Legal bases. Where processing occurs, we rely on your consent (Article 6(1)(a)) for optional features such as camera access, AI features, iCloud Sync and Apple Health, and on contract (Article 6(1)(b)) for the core operation of the app you installed.
• Health data (Article 9). Photographs of your mouth and oral-health information are special category data. Our basis is your explicit consent under Article 9(2)(a), given through the iOS permission prompts and the in-app wellness acknowledgement. Withdraw it at any time by turning the feature off or deleting the data; withdrawal does not affect processing that already happened.
• Your rights — access, rectification, erasure, restriction, portability, objection, and to complain to your supervisory authority. Exercise them in-app or at admin@prameya.legal.
• International transfers. We transfer none of your content, because we receive none. The only cross-border flows are your own connection to Hugging Face for a model file, and what OmniDent puts in your own iCloud account (section 6), under Apple's arrangements.
• Automated decision-making. The on-device AI does not make decisions producing legal or similarly significant effects about you. Its output is educational information.
• Representative. Prameya LLC has not appointed an Article 27 or UK representative, and none is named in this policy today. If OmniDent is released in the EEA or the United Kingdom and a representative is required, we will appoint one and name them here before the app becomes available in those territories.

17. HIPAA does not apply

We say this clearly because it is genuinely useful to know, and because plenty of health apps are vague about it.

The Health Insurance Portability and Accountability Act (HIPAA) does not apply to OmniDent. HIPAA regulates covered entities — health plans, health care clearinghouses, and health care providers who bill electronically — and their business associates. Prameya is none of those. You are our user, not our patient. We have no treatment relationship with you and no contract with your dentist.

Two consequences follow, and the second is the important one:

1. Data you put into OmniDent is not protected health information under HIPAA.
2. Do not read this as OmniDent having weaker protection. Your photos and records do not leave your device, so the practical protection is strong. But it is not HIPAA protection, and we will not imply that it is. Anyone who tells you their consumer app is "HIPAA compliant" when they have no covered-entity relationship is telling you something meaningless.

If OmniDent is ever offered through a dental practice or a dental service organisation, this analysis changes and this policy will change with it, before that happens.

18. No FDA authorization, and not medical advice

OmniDent has no FDA authorization, clearance or approval of any kind. It is not a substitute for examination by a licensed dentist, and it cannot see what a dentist sees. Analysis of dental images is a regulated activity in the United States. OmniDent is not an authorized device and does not claim to be.

We are not replacing that with a blanket "the app does not diagnose" claim. What can be checked:

• Nothing the app shows you has been reviewed or authorized by any regulator.
• Taking a photo runs no AI model, and no model writes anything about the photo.
• The "What this photo looks like" reading is not filtered. It is headed "This looks like", can name a dental condition, and suggests a care step and questions for a dentist.
• Ask checks its answers against a fixed list of dental-condition names and stops when one appears. A word list cannot catch every way of describing a condition, so an answer can still describe one in other words. Ask iPhone on Apple Watch does not apply that check.
• Do not use anything on those screens to decide whether to seek or delay dental care.

If something in your mouth hurts, bleeds, changes, or worries you, see a dentist. Do not wait for an app.

19. Changes to this policy

We will update this policy when the app's behaviour changes — and we will update it before the change ships, not after.

7 October 2026 — what changed. OmniDent was changed, and this policy describes the app with those changes:

• The Home Screen widget is now a photo-journal glance: it shows the date of the active person's last photo and whether two of their photos are of the same view, as well as whether today's care is logged. It still shows no photograph and no name, and OmniDent sends nothing off your device for it. If you add your iPhone's widgets to your Mac, the Mac shows your iPhone's line; section 7 now says so. The previous version called it a care-status line.
• A photo you take on its own is no longer filed as Smile. Now only a photo you take as part of a set of photos is filed under a view, so the widget and the photo comparison can tell when two photos really show the same view. The previous version said every photo is filed under a view.
• If OmniDent cannot open its database when it starts, it moves the old file aside and starts fresh, and tells you so on screen. Delete All Scans & Data, and so Delete Account & All Data, did not remove that old file: it kept the records it held, including photo thumbnails, your health profile, habit logs and household names, until you deleted the app. Section 10 did not list it among the things Delete All leaves, and it should have. Delete All now removes it, and says so if it cannot. Section 10 now also names the one rare case Delete All cannot reach: a database the app could neither open nor move aside, while it runs on temporary storage.
• Delete All Scans & Data now also asks the system to redraw the Home Screen widget. Before, the widget could keep showing its last line, including the date of a photo you had deleted, until you next opened the You or Do tab or ran a care session, or until midnight.

Sections 1, 3, 7 and 10 are updated. The short version is unchanged. No category of data, source, purpose or recipient is added, and nothing is sent to Prameya.

27 September 2026, third revision — what changed. The short version and section 5 said Sign in with Apple "does not change what syncs". What syncs is the same whether or not you sign in, but signing in turns the iCloud Sync switch on and signing out turns it off. That was already true of the app, and this policy now says so in the short version and sections 5 and 6. iCloud Sync can still be turned on or off in Settings without signing in. No category of data, source, purpose or recipient is added, and nothing is sent to Prameya.

Later on 27 September 2026 — what changed. OmniDent was changed for the Mac and Apple Vision Pro, and this policy describes the app with those changes. iPhone and iPad are unchanged.

• The Mac and Apple Vision Pro no longer offer SmolVLM, the model that reads photos: they keep no photo for it to read. They offer the two text models. The previous version said the same three models were offered on every device.
• On a Mac or Apple Vision Pro the download switch is Download over Personal Hotspot, and with it off a download waits for a network that is not a Personal Hotspot. The previous version named only the iPhone and iPad switch, Download over cellular.
• Pro's full photo history is on iPhone and iPad; on a Mac or Apple Vision Pro, Pro adds the cadence reminders and the print-ready visit sheet. Share care summary there shares care days alone.
• How to cancel now gives the Mac path (the App Store app → your name → Account Settings → Subscriptions → Manage) and the Apple Vision Pro path, as well as iPhone and iPad.
• The Apple TV app has a fourth tab, About, with the app's disclaimer, the short version of this policy and the addresses of the policies and the terms, as text built into the app. The previous version listed three tabs.

Sections 2, 3, 4, 6 and 10 are updated. The short version is unchanged. No category of data, source, purpose or recipient is added, and nothing is sent to Prameya.

27 September 2026 — what changed. The previous version said that leaving a child session asks for Face ID or the device passcode, on every device. That is what an iPhone or iPad with Face ID asks for. An iPhone or iPad with Touch ID asks for Touch ID, a Mac asks for Touch ID or your Mac password (the password alone on a Mac without Touch ID), and Apple Vision Pro asks for Optic ID; each can fall back to the device passcode or Mac password. The lock itself did not change; OmniDent's own Household screen now names the unlock for the device it runs on, and this policy names each. The short version and sections 3 and 12 are corrected. Nothing is sent to Prameya.

26 September 2026 — what changed. OmniDent was changed, and this policy describes the app with those changes:

• No person's name and no education topic go to iCloud. With iCloud Sync on, the continue note in your iCloud key-value store now holds only the tab and the last photo-record identifier; it used to carry the education topic you last opened and the name of the active household person as well. An entry an earlier version left there with a name or a topic is replaced when the app starts, or removed if iCloud Sync is off.
• Handoff never carries a person's name. With iCloud Sync on it still carries the tab, the topic identifier and the photo-record identifier to your own nearby devices; with it off, the tab alone, as before.
• Apple TV shows no name and does not open the topic you last read: its Continue tab says which tab you were last in on another device and offers the Library.
• Your paired Apple Watch still receives the active person's name while iCloud Sync is on, and only the tab while it is off.
• Whether you have seen the welcome screen, and whether and when you acknowledged the wellness disclaimer, are now kept on each device and no longer sync to your private iCloud database. Delete All Scans & Data clears them.

The short version and sections 3, 6, 8, 10, 12 and 13 are updated. No Prameya server was added, and nothing is sent to Prameya.

24 September 2026 — what changed.

• It no longer describes a note made at capture. The previous version said that, once you had downloaded a vision model, each photo you take gets a short note from that model, stored with the photo, and that switching off on-device answers did not stop it. OmniDent does not do that: taking a photo saves it and runs no AI model, and nothing a model wrote is stored with a photo. The one feature that runs a model over a photo is the "What this photo looks like" reading, which you start and which is not saved. Sections 1, 3, 4, 6, 10, 13 and 18 are corrected.

Also on 24 September 2026, OmniDent was changed, and this policy describes the app with those changes:

• With iCloud Sync off, Handoff no longer carries the random identifiers of a set of photos you are taking or of a visit packet you have open, of the mouth record or of a visit, or which photo views are done. It carries the tab alone, as the continue note already did.
• Ask iPhone on Apple Watch answers with any text model you downloaded. It used to answer only with Qwen2.5 0.5B, so if you had downloaded only Gemma 4 E2B the Watch was told to download Qwen2.5 0.5B. It still never starts a download.

No Prameya server was added, and nothing is sent to Prameya.

23 September 2026 — what changed. We re-read the app as it is built today and corrected this policy where it was wrong or silent:

• It says that, while iCloud Sync is on (the default), OmniDent writes a short continue note to your iCloud key-value store — the tab, the last education topic you opened, a photo-record identifier, and the name of the active household person — and that Apple TV and Apple Watch show that name. The previous version said nothing but preferences went to iCloud.
• It says Handoff carries the same note to your nearby devices whether or not iCloud Sync is on.
• It describes Ask (Apple Intelligence on your device first, a downloaded model second, answers checked against a word list), and the "What this photo looks like" reading, which shows the models' output unfiltered and can name a condition. The previous version said photo output never named a condition and that chat was unfiltered.
• It names the three models offered now (Qwen2.5 0.5B, Gemma 4 E2B, SmolVLM) and says Llama 3.2 1B, Gemma 3 4B and PaliGemma 3B were removed and are deleted from your device; that downloads wait for Wi-Fi unless you allow cellular; and that a question from Apple Watch can start a download on your iPhone.
• It adds the Apple Watch, Apple TV, Mac and Apple Vision Pro apps, care reminders, and the Lock Screen care timer.
• It says a brush confirmed from Apple Watch or a reminder writes to Apple Health even when OmniDent's Apple Health switch is off; that the 30-day programme and the Watch can raise iOS's Apple Health permission request while the switch is off; exactly which entries are written; and that the app does not currently read any Apple Health data.
• It says the date of each visit you log is added to your device's Spotlight search, and that Delete All does not remove those entries.
• It says the iCloud Sync switch is set on each device separately, and describes the care summary you can share yourself.
• It corrects purchases: the app keeps no transaction record of its own. It removes the Apple push signal, which the app does not receive, and the Studio projection and "collective priors" toggle, which are no longer in the app.
• It corrects deletion: Delete All now also removes household people, visits, documents and the iCloud continue note, and keeps your iCloud Sync switch; it leaves a list of Watch and notification brush days on your iPhone; and Delete Account does not turn iCloud Sync off.

Also on 23 September 2026, OmniDent was changed to fix defects that the version above disclosed, and this policy now describes the app with those fixes:

• Apple Health follows OmniDent's switch everywhere. A brush confirmed from Apple Watch, a reminder or the Log care action no longer writes with the switch off, and nothing raises iOS's Apple Health request while it is off. The 30-day programme writes only when you tick the brushing habit done, not for flossing or unticking. OmniDent no longer asks to read steps, sleep, mindful minutes or active energy.
• Ask iPhone on Apple Watch now respects Enable on-device answers and a child session, and never starts a model download.
• With iCloud Sync off, Handoff and your Apple Watch get only the tab — no name, topic or record identifier — and the Handoff title no longer shows the topic.
• Delete All Scans & Data now also removes the Watch and reminder brush record, the visit dates in Spotlight and the reminders already scheduled, clears the name on your Apple Watch, and no longer re-sends the last topic you opened to iCloud or Handoff at your next tab change.
• Delete Account & All Data now turns iCloud Sync off on that device.

No Prameya server was added, and nothing is sent to Prameya.

• The effective date at the top always reflects the current version.
• The 20 September 2026 revision matched the shipping household: people and mouths on this device, a child session that cannot see another mouth, Face ID or the device passcode to leave a child session, auto-save to Photos forced off while a child is active, visits and documents on Record, StoreKit on the network list, and the Home Screen widget's care-status line. The 24 August 2026 revision updated the export section so the export is a .zip that carries the photographs themselves, and so the deletion table names the per-record controls.
• The 21 August 2026 revision matched the shipping code on auto-save captures to Photos (off by default), withdrew the blanket "does not diagnose" wording in favour of describing the photo note and the chat, and corrected the Studio Regenerative Projection percentages.
• The 8 August 2026 revision was a correction pass. We re-read the shipping source code and rewrote every statement that did not match it. In particular: the previous version said that deleting your account revokes your Sign in with Apple token through Apple's REST API. It does not, and it never did — the app has no server and mints no token, so there is nothing to revoke; section 5 now describes what deletion actually does.
• For any material change — a new destination the app connects to, a new category of data, a new third party, a change to what syncs, or the addition of any advertising or analytics — we will show an in-app notice and, where the law requires it, ask for your consent before the change takes effect. Under Washington's My Health My Data Act, collecting a new category of consumer health data, or using it for a new purpose, requires your affirmative consent first, and we will obtain it first.
• Previous versions are available on request from admin@prameya.legal, and in the public repository that publishes these pages: https://github.com/prameyallc/privacy.
• Continuing to use the app after a non-material change means the updated policy applies. That is not how we will handle a material one.

20. Contact

Prameya LLC
Privacy questions, data requests, complaints: admin@prameya.legal

Please put "Privacy" in the subject line. We answer every request, including the ones where the answer is "we do not have any of your data, and here is how to confirm that yourself."

All Prameya app privacy policies: https://prameyallc.github.io/privacy/
OmniDent consumer health data policy: https://prameyallc.github.io/privacy/omnident/health-data/