🦷 Dental AI Tutor Privacy Policy

1. Information We Collect

We collect only the minimum information necessary to provide and improve our services.

(a) Voice & Audio Data

• Voice Input: Your spoken questions or responses recorded via the device microphone.
• Speech Recognition (ASR): Your voice is transcribed into text for understanding and generating a response.
• Speech Output (TTS): AI-generated voice replies are created for natural dialogue.

Purpose: To enable two-way voice communication, understand user intent, and deliver accurate responses.

(b) Learning Interaction Data

• Questions asked, answers provided, and study session history.
• Contextual metadata (timestamp, feature usage, progress data).
• Feedback or ratings provided by you.

Purpose: To personalize your learning experience and continuously improve AI tutoring quality.

(c) Account & Profile Information (if applicable)

• If you log in via your University account (e.g., HKU SSO): basic profile info such as name, student ID, or email address.
• If you use guest mode: no identifiable personal data is collected.

Purpose: For authentication, account linking, and personalized learning analytics.

(d) Device & Technical Data

• Device type, operating system, app version, IP address, and crash logs.
• Cookies or local storage for maintaining session states.

Purpose: To maintain security, optimize performance, and improve reliability.

2. How We Use Your Information

We use the collected data only for legitimate educational and technical purposes:

1. To provide AI-driven voice tutoring using LLM, ASR, and TTS technologies.
2. To retrieve relevant course materials using Retrieval-Augmented Generation (RAG).
3. To personalize feedback and improve academic support.
4. To conduct anonymous research and analytics for academic improvement.
5. To comply with legal obligations and institutional requirements.

3. Data Storage & Retention

• All data is stored on secure, access-controlled servers located in compliant regions (e.g., Hong Kong or equivalent jurisdictions).
• Audio data may be processed into text and anonymized; original recordings are periodically deleted.
• We retain data only as long as necessary to fulfill the purposes stated in this policy.

4. Data Security

We implement strong security measures to protect your information, including:

• Encryption in transit (HTTPS/TLS)
• Access control and authentication
• Anonymization and pseudonymization
• Regular security reviews

Despite these measures, no system is 100% secure. We will promptly notify affected users and authorities in case of a data breach as required by law.

5. Sharing and Disclosure

We do not share your personal data with third parties except:

1. Educational Institutions (e.g., The University of Hong Kong) – for authorized academic use, progress tracking, and quality assurance.
2. Service Providers – to operate AI models (LLM, ASR, TTS) under strict data protection agreements.
3. Legal Compliance – when required by applicable law, regulation, or court order.

All third-party processors are contractually bound to protect your data and may not use it for independent purposes.

6. Your Rights

Depending on your jurisdiction (e.g., PDPO, GDPR), you have the following rights:

• Right of Access: Obtain a copy of your personal data.
• Right to Rectification: Correct inaccuracies.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data.
• Right to Withdraw Consent: Stop further processing at any time.
• Right to Data Portability: Request your data in a structured, machine-readable format.

To exercise these rights, contact us using the details below.

7. Children and Students

Our App is intended for students and educational use only.

• If you are under 18, you must use the App under supervision or with consent from a parent, guardian, or institution.
• We do not knowingly collect personal data from minors without proper authorization.

8. International Data Transfers

If data is transferred outside of Hong Kong, we ensure that adequate protection (e.g., standard contractual clauses, encryption) is in place in compliance with PDPO and GDPR.

9. Updates to This Policy

We may update this Privacy Policy periodically to reflect technical, legal, or operational changes. The latest version will always be available within the App and on our website.

• Material changes will be notified clearly in-app before becoming effective.

10. Contact Us