01Introduction
This policy explains how Edebo ("Edebo", "we", "us") looks after personal data when you visit our website or use the Edebo app, and the rights you have over that data.
Edebo is software that turns a smartphone camera into a 3D scanner for the face and body. Because a 3D scan of a person's face is sensitive personal data, we handle it with particular care. We process personal data in line with India's Digital Personal Data Protection Act, 2023 and other applicable law.
02Our principles
Transparency
We tell you what we collect, why we collect it and who can see it.
Minimal collection
We collect only what is needed to run the service you asked for.
Regulatory compliance
We follow applicable data protection law, including the DPDP Act, 2023.
03Information we collect
Biometric and 3D scan data
- 3D facial and body scans captured through the Edebo app.
- Topographical maps and measurements derived from those scans, such as volume, symmetry and contour.
Clinical metadata
- Patient identifiers that a clinic chooses to attach to a scan.
- Practitioner details, including professional registration information.
- Treatment history and visit records linked to scans by the clinic.
- Clinic access keys used to sign in and control access.
Device and usage data
- Technical logs, device model, operating system and app version.
- Timestamps of scans, sign-ins and key actions, used for security and support.
Contact information
- Name, email address and communication preferences when you request a demo, sign up or contact us.
04How we use your information
| Purpose | Status |
|---|---|
| Building 3D models, measurements and visual comparisons for the clinic that captured the scan | Allowed |
| Sending appointment, treatment or service communications requested by you or your clinic | Allowed |
| Keeping the service secure, fixing faults and providing support | Allowed |
| Selling personal data, or sharing it with advertisers | Never |
We process scan data only with the consent of the person scanned, collected by the clinic before capture, or on another lawful basis permitted by law.
05Clinics and patients
When a clinic uses Edebo to scan its patients, the clinic decides why the scan is taken and how it is used. Edebo processes that data on the clinic's behalf and on its instructions.
If you are a patient and want to access, correct or delete a scan, you can contact your clinic directly or write to us. We will work with your clinic to respond.
07Data security
- Encryption at rest using AES-256.
- Encryption in transit using TLS.
- Role-based access, so staff see only what their role needs.
- Redundant, encrypted backups.
- Regular internal security reviews and penetration testing.
No system is completely secure. If a personal data breach affects you, we will notify you and the relevant authority as the law requires.
08Retention
We keep personal data only for as long as it is needed for the purpose it was collected for, or as long as the law requires. Clinics can delete scans from their account. When data is no longer needed, we delete it or make it anonymous.
09Your rights
- Access a summary of the personal data we hold about you.
- Correction of data that is inaccurate or incomplete.
- Erasure of data that is no longer needed, or where you withdraw consent.
- Withdraw consent at any time. This does not affect processing already carried out.
- Object or restrict processing in certain cases.
- Portability of your data in a commonly used format, where applicable.
- Grievance redressal, and to nominate another person to exercise your rights in case of death or incapacity.
To use any of these rights, write to [email protected]. You may also approach the Data Protection Board of India if you are not satisfied with our response.
10Children
Edebo is used by clinics, not directly by children. A clinic may scan a person under 18 only with verifiable consent from a parent or lawful guardian. We do not use children's data for tracking, behavioural monitoring or targeted advertising.
11Changes to this policy
We may update this policy as the service or the law changes. We will change the "Last updated" date above and, for significant changes, tell you through the app or by email.
12Contact us
Questions about your data, this policy or a privacy request? Write to us:
We aim to respond within 1 business day.