Privacy policy

DrPhoto helps you organise photos and videos from your practice. This policy explains where data is stored, how the app's features use images, and what happens when you visit the website or contact support.

The app and this website are provided by Formaweb Serviços de Internet Ltda., registered in Brazil under CNPJ 10.733.239/0001-24. For privacy questions, write to support@drphoto.app.

When you add photos and patient details

The photos and videos you capture or import are stored in DrPhoto's private storage, separately from the iPhone Photos app. The app also stores the information you enter, such as patient names, identifiers and notes, along with each patient's profile picture, called an avatar. Photos, videos and avatars may show a person's face.

You can protect access with Face ID, Touch ID or your device passcode. Apple's system handles this check. DrPhoto only receives the authentication result, without access to Face ID images or stored biometric data.

The app does not collect usage statistics or send clinical images or face-analysis results to Formaweb servers or third-party artificial intelligence services.

When you use image features

Some features need to locate faces or parts of an image. This analysis uses Apple's technology and takes place on your iPhone:

• To create an avatar, DrPhoto locates the face in a photo. The first suitable photo may be used automatically, as long as you have not already chosen or removed an avatar.
• To align photos, the app locates points such as the eyes and nose. When you open a comparison for export, it also looks for the eyes to check whether the optional bars over the eyes can be applied.
• To draw ghost-photo outlines, the app separates the foreground from the rest of the image and identifies its edges.

Information about the position of the face, eyes and other points is used during processing. It is not kept as a separate set of facial data or sent to an artificial intelligence service. The avatar image, comparison alignment settings and images generated for export may be saved.

DrPhoto does not use facial recognition to identify people, create biometric identity models, infer personal characteristics from faces or use these images to train artificial intelligence.

When you allow camera, microphone and location access

The camera and microphone let you capture photos and videos. Location access helps the app select a nearby saved practice location. You can manage these permissions in iPhone Settings. If you deny one, the feature that depends on it may stop working.

When you import a photo, DrPhoto can read location information embedded in the photo to match it locally to a saved practice location. This does not depend on permission to access your device's current location. The imported photo file is saved without GPS metadata; other image metadata, such as the capture date, may remain.

When you sync with iCloud

When iCloud is available to DrPhoto, patient records, saved practice locations and their coordinates, media details, avatars and thumbnails may sync to a private area of your own Apple Account.

Original photo and video files have separate sync controls, which are on by default. Turning either control off disables synchronization of those files in the app's current storage system, without deleting copies already in iCloud. Records, saved locations, media details, avatars and thumbnails may continue to sync.

Some photos stored by earlier versions may still be part of their records, including full-size images and unedited copies. Those images can continue to sync with the records even when photo file syncing is off.

iCloud is an Apple service and follows Apple's terms and privacy policy. Syncing depends on your account, connection and service availability.

When you share photos and comparisons

You can send images and comparisons to another app or recipient through the iPhone's sharing options. The destination you choose handles those copies according to its own practices. Deleting the original in DrPhoto does not delete anything you have already shared.

When you close the export screen, the app tries to remove the temporary files created for the comparison. If any remain, it tries again when you open DrPhoto later.

The professional who records and shares patient data is responsible for the permissions and consents required for their clinical practice.

When you delete data

Photos, videos and patient records stay in the app until you delete them. Cancelling your Pro subscription does not delete these records.

When you delete a photo or video, the file normally moves to Bin, where you can restore it for 30 days. You can permanently delete it sooner. After that period, the app deletes it automatically while in use. Removal may therefore happen later if you do not open DrPhoto or if a deletion attempt cannot be completed.

An avatar is an image saved separately. Deleting the photo it came from does not remove it from the profile. To remove or replace it, edit the patient and save the change. Deleting a patient removes their record and avatar and moves their associated photos and videos to Bin.

Permanent deletion removes the photo or video's local records and files and requests removal of the originals synced to iCloud. This change reaches iCloud and other devices when syncing can be completed. Turning off syncing alone does not delete existing copies.

Data may also be included in device backups, depending on your iPhone and account settings. Deleting data in DrPhoto does not change existing backups or exported copies. You need to manage those copies separately with the service or recipient responsible for them.

When you visit this website

On this website, we may use Google Analytics to understand which pages people visit and improve navigation. We only collect these statistics if the feature is active and you accept analytics cookies. Declining does not prevent you from using any page.

These statistics may include the pages you visit and information about your browser and device. They do not include photos or patient records stored in the app. The content of support form messages is not sent to Google Analytics either.

When the feature is active, you can change your choice under “Analytics cookies” at the bottom of the page. Your preference is saved in the browser where you made the choice.

Google processes browsing information under its own terms, which may include processing outside Brazil. Details are in Google's privacy policy.

When you contact support

The form asks for your name, email and message. We use this information to reply, follow up on your request and meet applicable obligations. It is kept only as long as needed for those purposes.

The website uses Cloudflare infrastructure to receive the form and forward the message to support@drphoto.app. Connection information, such as your IP address, may be processed to deliver the message and protect the service from abuse.

Do not send photos, clinical records or other information that identifies patients. If you need to report a problem, describe what happened without including this data.

Your rights and how to exercise them

Under applicable law, including Brazil's General Data Protection Law (LGPD), you may request confirmation that we process your data, access to it, corrections, information about sharing and deletion where applicable. You may also withdraw your consent.

Send your request to support@drphoto.app. We may ask only for the information needed to confirm your identity. You also need to manage the records stored on your device and in your Apple Account.

When this policy changes

We may update this page to reflect changes to DrPhoto or how data is used. The date at the top shows when the policy was updated. If a change requires new consent, we will ask for it before using the data for that purpose.