Privacy policy | Smile Fitter

Who we are

Smile Fitter is made and run by Miles Media in Pittsburgh, PA ("we", "us"). This policy covers smilefitter.com, the preview pages at demo.smilefitter.com, the smile preview when a dental practice installs it on its own website, and the practice dashboard.

When you use a smile preview offered by a dental practice, that practice decides what happens with your details, and we handle them on its behalf. The practice may have its own privacy notice, including a HIPAA Notice of Privacy Practices if you're already its patient. When you visit smilefitter.com or ask us for a demo, we're responsible for your details ourselves.

If you use a smile preview

Your photo

Face detection runs on your own device. Your full photo is never uploaded.
To make the preview, a square close-up of your mouth area (512 pixels across) is sent to our AI provider, Cloudflare Workers AI. The edited close-up comes back to your device and is blended into your photo there. We don't store that close-up.
We never use photos for facial recognition, to identify you, or to train AI models.

The full detail, step by step, is on how photos are used.

What you choose to send

When you unlock your preview: your first name, an email address or mobile number, the treatment and tooth shade you picked, and whether you'd like marketing messages.
If you leave "send my before and after photos" checked: two small close-ups of your smile (384 pixels across), before and after.
If you ask for a consultation: the days and time of day that suit you, a phone number if you add one, and any note you write.
With each request we also record the page address, the site that sent you there, and any campaign tags in the link (UTM tags) so the practice knows which ad or post brought you.

What we collect automatically

A scrambled, one-way version (a salted hash) of your IP address, kept for about an hour to limit how many previews one person can make. We never store the address itself.
Cloudflare Turnstile, the bot check on the page, looks at signals from your browser and device to tell people from bots. It never sees your photo or anything you type.
A count of how many times each preview page has been opened, and when it was last opened. Nothing about who opened it.
Cloudflare Web Analytics, run by our host, counts page loads and measures how fast pages load. It sets no cookies and doesn't identify you.

Preview pages carry no advertising pixels, no Google Analytics and no social media tags.

If you're a practice or visit smilefitter.com

When you ask for a demo: your name, practice, website, email, phone, role, number of locations and your message.
When you use Practice Scan: the web address you enter. We fetch that public page to read it and send you the result. We don't save the address or the result.
When we build a demo for your practice: public details about your practice, such as its name, logo, address, phone, hours and doctor, taken from your website and public listings.
Pages on smilefitter.com use Google Analytics, which sets cookies to count page views and records your approximate location, device and browser. You can opt out with Google's opt-out browser add-on. Google Analytics doesn't run on preview pages.

How we use it

To make your preview and show it to you.
To send your request to the practice so its team can contact you.
To stop abuse and keep the service running.
To reply to demo requests and build demos.
To understand which pages on smilefitter.com are useful.

We don't sell personal information, and we don't share it for advertising.

The dental practice whose preview you used. On our own public demo page, only the Smile Fitter team.
Our service providers, listed on subprocessors, only to run Smile Fitter.
Anyone the law requires us to share it with, such as a court order.

Never advertising networks, analytics companies or data brokers.

How long we keep it

The mouth close-up sent to the AI: not kept.
Requests sent to a practice that uses Smile Fitter: kept in that practice's dashboard while it uses the service, and deleted within 30 days after the practice asks us to or stops using Smile Fitter.
Requests sent from a demo page: deleted automatically after 90 days.
The scrambled IP used for limits: about an hour.
Demo requests from practices: until you ask us to delete them, or two years after we last heard from you.

Your choices and rights

Nothing is sent until you unlock your preview, and you can close the page at any point before that.
Marketing messages are only sent if you check that box, and every message lets you opt out.
To see, correct or delete what a practice holds about you, contact the practice, or email us at [email protected] and we'll pass it on or handle it directly.
Some states, including California, give residents specific privacy rights. We honor access, correction and deletion requests from anyone, wherever they live, and we'll never treat you differently for making one.

Children

Smile previews are for people 18 and older, and the page asks you to confirm that before you take a photo. We don't knowingly collect details from anyone younger. If you think a child has used it, email us and we'll delete what they sent.

Security and where data lives

Every page and request uses an encrypted connection (HTTPS). Requests are stored on Cloudflare, which encrypts them at rest, and only a practice's own dashboard key or Miles Media's key can read them. The link a patient gets to add consultation details works only for their own request. Cloudflare runs a global network, so your details may be processed in data centers outside your state.

Changes

If we change this policy, we'll update the date at the top. If a change affects how we use details we already hold, we'll tell the practices using Smile Fitter first.

Contact

Questions or requests: [email protected]. Miles Media, Pittsburgh, PA.