Last updated: 11 October 2026
This Privacy Policy explains what personal data Dentus collects, why, who it is shared with and your rights. Dentus (the website dentusapp.com, the dentist portal portal.dentusapp.com, the Dentus Doctor app and the Dentus patient app) is provided by TANL Business App Studio Private Limited (CIN U70200HR2024PTC124033), IREO Skyon, HNO 309 BLN0, A2, FL NO-A2-309, Sector 60, Gurugram, Haryana 122011, India ("TANL", "we"). We process personal data under India's Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023.
1. Who is responsible for your data
- Dentist and clinic accounts, sign-in and Dentus plans: TANL decides how this data is used.
- Patients' records kept by a clinic (appointments, treatments, prescriptions, medical records, payments to the clinic): the clinic decides how they are used, as your healthcare provider; Dentus stores and processes them for the clinic. Questions about your treatment records should go to your clinic; we will help if needed.
2. What we collect
Patients
- Name, mobile number, email (optional), gender and date of birth; family members you add (for example a child), with their name, relation, gender and date of birth.
- Appointments, the clinic and dentist chosen, treatments, treatment plans, cancellations, prescriptions and invoices.
- Medical records you or your clinic upload (documents and photos).
- Payments: amount, status and the Razorpay payment reference. We never see or store your card number, UPI PIN or bank login; Razorpay handles them.
- Loyalty points, offers used, referral codes, ratings and reviews you write.
Dentists and clinic staff
- Name, mobile number, email, gender, date of birth, photo; Dental Council registration (number, council, year), education, experience, specialisations, services, languages, awards and a short description.
- Clinic details: name, address, location on the map, photos, opening hours, leave, treatments and prices, GST rate, cancellation policy, offers and posts.
- Plan and billing: chosen plan, trial and paid periods, payments and, if you turn on automatic renewal, the Razorpay subscription reference (the card or UPI mandate itself stays with Razorpay).
Everyone
- Sign-in codes (we keep only a scrambled version for 10 minutes), device type and a notification token so we can send reminders, basic technical logs (time, IP address, errors) to keep the Service secure.
- With your permission only: camera and microphone for video consultations and to photograph documents; photos to add a profile picture or medical records; location to show nearby clinics. You can refuse or withdraw these permissions in your phone settings.
We do not use advertising trackers and we do not sell personal data.
3. Why we use it
- To run your account and sign you in securely.
- To let patients book, pay, cancel and be reminded of visits, and clinics manage their calendar, patients, treatments and payments.
- To send messages you expect: sign-in codes by SMS, appointment and plan reminders, birthday wishes and clinic offers (you can turn notifications off in the app's settings).
- To check new dentists before patients can book them.
- To process payments and refunds, keep invoices and meet tax and legal obligations.
- To keep the Service secure, prevent fraud and fix problems.
4. Who we share it with
- Your clinic: a patient's bookings, payments, ratings and records are shared with the clinic and its dentists. A clinic owner can limit what each partner dentist sees.
- Service providers working for us under contract, only for the purposes above:
- Amazon Web Services (servers and file storage in Mumbai, India);
- Razorpay (payments, refunds and automatic renewal);
- Pinnacle Teleservices (sign-in codes and reminders by SMS);
- Google Firebase Cloud Messaging and Apple Push Notification service (notifications on your phone);
- Agora (video consultations);
- our email provider (emails we send you);
- Meta (Facebook and Instagram): our website dentusapp.com uses the Meta Pixel, a small piece of code that tells Meta which pages were visited and which buttons were clicked, with your device's IP address and browser details, so that we can measure our advertising and show our ads to people who may be interested. It is on the website only, not in the apps or the clinic portal, and it never receives patient or clinic records. You can limit this in your Facebook or Instagram ad settings or with your browser's tracking protection.
- Authorities, only when the law requires it.
5. How long we keep it
- Account data: while your account is open. When you delete your account, we delete or anonymise your personal data within 30 days.
- Records that the law requires to be kept (for example invoices, payment and treatment records) are kept for the period the law requires, then deleted.
- Technical logs: up to 90 days. Sign-in codes: 10 minutes.
6. Security
Data travels encrypted (https). Access is limited to the people who need it; each dentist sees only their own clinic's patients. Payment card data never reaches our servers. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
7. Your rights
- See and correct your data in the app or portal, or ask us for a copy.
- Delete your account from the app's Settings (Delete account) or by writing to us.
- Withdraw consent for optional uses (notifications, camera, photos, location) at any time.
- Name someone to exercise your rights if you die or cannot act.
- Complain to our Grievance Officer (below) and, if not satisfied, to the Data Protection Board of India.
8. Children
Accounts are for adults. A parent or guardian can add a child as a family member and manages the child's bookings and records.
9. Changes
We will update this policy when our practices change and show the date above. Important changes will be shown in the app or sent by email.
10. Contact and Grievance Officer
Privacy questions or requests: contact@dentusapp.com. Grievance Officer: Laurent Gonnet, TANL Business App Studio Private Limited, at the address above. We acknowledge requests within 48 hours and reply within 15 days.