Your data. Protected transparently.

1. Controller

2. Scope and roles

ImplTrack is intended for dentists practising implantology and supports structured implant, treatment, clinical finding and follow-up documentation. ImplTrack Patient is the companion app for patients to view a provided digital implant passport locally.

When patient data is recorded in a professional setting, the respective dental practice or treating organisation generally acts as controller. ImplTrack provides a locally operating tool. The app operator has no access to case files created in the app.

3. Data processed in ImplTrack

Depending on use, the app may process patient and case data; implant manufacturer, system, dimensions, REF and LOT; practice locations; surgical protocols; clinical findings; recall data; radiographs; manually placed measurement points; calibrations; follow-up charts; voice notes and locally generated transcripts; optional inventory data including supplier, quantity, warning threshold, target quantity and order lists; exports, backups, settings, security options and subscription status.

This content is generally stored locally on the Apple device. There is no ImplTrack account and no central ImplTrack patient database. Data leaves the device only when a user actively initiates an export, sharing, import or backup operation.

4. Voice notes and transcription

Voice notes are stored locally. ImplTrack uses only the local speech-recognition functionality provided by iOS for transcription. ImplTrack does not send recordings to OpenAI or any other external transcription service.

5. Device permissions

When a relevant feature is used, ImplTrack may request access to the camera or photo library, microphone, speech recognition, notifications and Face ID. Permissions are controlled through iOS and can be changed in system settings. ImplTrack cannot access the underlying Face ID biometric data.

6. Exports, sharing and backups

Exports and backups may contain sensitive health data as well as inventory and order information. Users choose the storage location, recipient and transfer method and remain responsible for secure storage and authorised disclosure. A personal PDF code and Face ID configuration are not included in backup files.

7. ImplTrack Patient

ImplTrack Patient imports a digital implant passport supplied by a dental practice via scan or file and stores it locally on the patient’s iPhone. Sharing with another healthcare professional occurs only at the user’s direction. The app does not replace the practice’s medical record or professional advice.

8. Subscriptions and Apple

Purchases, trials and subscriptions are processed by Apple through the App Store. ImplTrack does not collect payment details and receives only the information required to determine entitlement status. Apple’s privacy terms apply additionally.

9. Website and technical access data

When impltrack.at is accessed, technically necessary data may be processed, including IP address, timestamp, requested page, browser and device information. This is required to provide and protect the website and is based on legitimate interests under Article 6(1)(f) GDPR. Technical service providers act as processors for hosting, delivery and security. The website does not use advertising or profiling cookies and does not operate its own analytics tracking.

10. Support

Contact details and messages provided voluntarily are processed to answer support requests under Article 6(1)(b) or (f) GDPR, depending on the matter. Support email is processed using a Google email service. Please do not include identifiable patient or health data. Messages are retained only as long as necessary to resolve the request and comply with legal obligations.

11. Retention and deletion

App data remains on the device until deleted by the user, replaced through an import or removed with the app. The relevant dental practice is responsible for statutory medical-record retention periods. Technical website logs and support data are kept only for their purpose and for as long as necessary.

12. Your rights

Subject to the GDPR, individuals may request access, rectification, erasure, restriction, portability or object to processing, and may withdraw consent for the future. For information contained in a dental case file, please contact the responsible dental practice. Complaints may be lodged with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna.

13. Security and updates

ImplTrack supports local storage, optional Face ID protection, protected PDF output and controlled backups. No technical system can guarantee absolute security. This policy will be updated when features, legal requirements or service providers change.