Privacy Policy

SmileDiary ("we", "our", or "the App") is developed and operated by Nanjing Xiaowei Technology Co., Ltd. This Privacy Policy explains what information the App handles, what stays on your device or in your own iCloud account, and what limited technical data is processed by the third-party services we use.

Your treatment data never reaches our servers. It stays on your device, and with a SmileDiary Pro subscription it is also synced to your own iCloud account. There are no user accounts and no registration, and the App shows no advertising. To understand how the App is used and to fix crashes, the App uses Google's Firebase Analytics and Firebase Crashlytics, which process the limited technical data described in Section 5. We do not sell your data, and we do not use it for advertising.

The following information is created and stored locally on your device and is never sent to us: • Your treatment plans, aligner numbers and change schedules, and wear and removal records • Progress photos you take or import, and any notes you add • Statistics and reports generated from your records • Your settings, including wear goals, reminder times, and preferences The App does not use Apple HealthKit. This information is health-related; it stays on your device unless you subscribe to SmileDiary Pro, which syncs it to your own iCloud account (Section 4), or you export it yourself (Section 6). Home Screen and Lock Screen widgets, Live Activities, Siri Shortcuts, and the Apple Watch app read a summary of your records that is shared only between the App and its extensions on your own devices.

If you subscribe to SmileDiary Pro, iCloud sync is turned on for you. From then on, your records and photos are stored in the private database of your own iCloud account using Apple's CloudKit, encrypted by Apple in transit and at rest, and synced between your devices signed in to the same Apple ID. Apple may send the App silent push notifications so it knows when data has changed. We cannot access your iCloud account or the data in it. Data already in iCloud can be managed in your Apple ID settings. For how Apple handles iCloud data, see Apple's Privacy Policy at https://www.apple.com/privacy/

The App uses the following services provided by Google LLC: • Firebase Analytics collects app usage events (for example, that the setup guide was completed, a timer was started, an aligner was changed, an export was made, or the upgrade screen was shown), the App version, device model, operating system version, language, country or region derived from your IP address, and a randomly generated app instance identifier. We look at this information in aggregate to understand how the App is used and to improve it. • Firebase Crashlytics collects a crash report when the App crashes, including stack traces, the state of the device at the time of the crash, device model, operating system version, App version, and an installation identifier, so that we can find and fix bugs. When we run ads for the App on the App Store, the App also uses Apple's AdServices framework: on launch it asks Apple whether this installation came from one of our App Store ads. Apple's answer says whether it did and, if so, which ad campaign it came from. It does not identify you, and it does not tell us which search term you used — that level of detail would require permission to track you, which the App does not request. We record the campaign identifier alongside the usage data described above, and use it only to measure how our advertising performs. This information does not include your treatment records, photos, notes, or anything else you create in the App, and it is not linked to your name, email address, or Apple ID. The App does not ask for permission to track you, and without that permission iOS does not make the Advertising Identifier (IDFA) available to the App. Data processed by Firebase may be stored on Google servers outside your country or region. For details, see Google's Privacy Policy (https://policies.google.com/privacy) and Firebase's privacy information (https://firebase.google.com/support/privacy).

You can export all of your records and photos as a ZIP file and choose where to save or send it through the iOS share sheet; the file goes only where you send it. The App also keeps automatic backups of its database on your device so that records can be recovered if the database is damaged. Progress videos you create are saved or shared only where you choose. Data on your device may be included in device backups that you manage through iOS (such as iCloud Backup or a computer backup); we cannot access those backups.

The App asks for camera access to take progress photos, and for photo library access only when you choose to import photos or save them to your library. Photos are stored inside the App on your device. Reminders (wear time, aligner changes, appointments, and photo check-ins) are local notifications scheduled on your device; no reminder information is sent to us. If you use Siri or the Shortcuts app to log removals and put-backs, the request is handled on your device through Apple's App Intents; Apple processes your voice request under Apple's Siri privacy terms. You can revoke any of these permissions in iOS Settings.

SmileDiary Pro subscriptions and the lifetime purchase are processed entirely by Apple through the App Store. We do not receive or store your payment information. The App checks your purchase status on your device through Apple's StoreKit and shares that status with its widgets and the Apple Watch app on your own devices.

SmileDiary is a general-audience tool for people undergoing aligner treatment and is not directed to children under the age of 13, or the equivalent minimum age in your country or region. The App does not ask for your name, email address, or any other information that identifies you, so younger users may use it under the supervision of a parent or guardian. We do not knowingly collect personal information from children; if you believe a child has provided personal information through the App, please contact us and we will take appropriate steps.

Your records stay on your device and, if you enable sync, in your own iCloud account. You can view, edit, export, or delete them in the App at any time, and deleting the App removes them from that device. Depending on where you live (for example, in the European Union, the United Kingdom, California, or mainland China), you may have rights to access, correct, or delete your personal information, to restrict or object to certain processing, and to withdraw consent. Because we do not know who you are, we may ask you to help us locate the relevant data. To exercise your rights, contact us at contact@smilediary.cc.

Your records stay on your device until you delete them or the App, and in iCloud until you delete them, or turn off sync and remove the data in your Apple ID settings. Data processed by Firebase Analytics and Firebase Crashlytics is kept only for a limited period under the retention settings of those services, after which it is deleted or anonymized.

Data on your device is protected by the security features of iOS, and data in iCloud is encrypted by Apple. Data sent to Firebase is encrypted in transit. No method of storage or transmission is completely secure, but we take reasonable measures to protect the information described in this policy.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the App after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or want to exercise your rights, contact us at: contact@smilediary.cc Developer: Nanjing Xiaowei Technology Co., Ltd.