How patient photos are handled

Consent first

Before a photo is processed, the patient is shown what will happen and agrees to it. Nothing is sent for processing until they do.

Private storage, never the database

Photos are kept in private object storage, never in the database. They are not publicly accessible, and access is limited to the processing steps and, for saved images, to the practice that owns them.

AI Smile Simulator

Original uploaded photos are deleted immediately after successful processing where possible. Failed or abandoned uploads are removed by an automated cleanup process that runs hourly and deletes originals more than 24 hours old.

Generated Smile Preview images (the preview and the 'before' image shown beside it) are temporary: they are available for 24 hours and are then deleted automatically, unless the practice deliberately saves them from its DenBrain dashboard. Images a practice saves are held as that practice's own record, for as long as the practice keeps them, outside this temporary window.

What is never shared

Photos, names, email addresses and free-text concerns are never sent to analytics or advertising platforms.

Who processes photos

• Cloudflare R2: private object storage (r2).
• fal.ai: image-generation service used to create the smile preview.

The full list, with locations and transfer safeguards, is on the subprocessors page.

Not a diagnosis

AI Smile Simulator gives illustrative output only. See AI and dental safety.