Dental Monitoring Pipeline
Back to Dashboard

Privacy Policy

Last updated and effective: October 30, 2026

1. Application Identity & Scope

This Privacy Policy applies to the Dental Monitoring Dashboard application ("the Application", "we", "our") hosted at https://dmd.qd.je/.

Dental Monitoring Dashboard is an operational productivity metrics tracking tool developed to help monitoring operators organize daily throughput reports in one secure dashboard. We place paramount importance on user privacy and full transparency regarding Google user data.

Productivity Telemetry Only — No Clinical Data: The application does not collect, process, or store clinical, patient, or medical health data. It is exclusively an operational throughput dashboard.

2. Google User Data Accessed & Collected

To provide dashboard metrics and automated folder syncing, the application accesses specific Google OAuth 2.0 scopes:

A. Authentication Scopes (openid, email, profile)

  • Email Address: Identifies your user account and links your productivity records.
  • Name: Displays your name on dashboard greetings and export headers. Can be customized anytime via Settings.
  • Profile Picture: Renders your user avatar in the navigation bar.

B. Google Drive Scope (https://www.googleapis.com/auth/drive)

  • Designated Folder Only: The application only inspects the single Google Drive folder you explicitly connect. We never inspect or access files outside of that specific folder.
  • Reading PDF Productivity Reports: The application reads daily PDF productivity reports deposited into your designated folder.
  • In-Place Archiving: Successfully ingested reports are moved to an archive/ subfolder within that same designated Drive folder to avoid duplicate processing.
  • Zero Deletion: The application never deletes files from your Google Drive.
  • No External Document Copies: PDF files remain in your Google Drive. We do not download or store copies of your PDF documents on external servers.

3. Data Extracted & Stored in Cloud Firestore

Only extracted operational numbers and audit metadata are stored in our Cloud Firestore database:

  • date: Calendar date of the productivity report (YYYY-MM-DD).
  • casesFinished: Number of cases processed during the shift.
  • individualScore: Efficiency score recorded on the report.
  • records & details: Hourly throughput and activity category counts.
  • metadata: SHA-256 file checksum (for duplicate detection), timestamp, and page count.
  • sourceFileId & sourceFileName: File identifiers linking back to your Drive file.
  • scheduleMinutes: Your background polling interval preference.

4. Google API Limited Use Requirements Disclosure

Limited Use Compliance: Dental Monitoring Dashboard's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Prohibition on Third-Party Sharing, Advertising & AI Training

  • No Data Sales: We do never sell, rent, monetize, or trade your Google user data.
  • No Advertising: We never share your data with advertisers, data brokers, or marketing networks.
  • No AI Model Training: We do never use your Google user data or report content to train or improve artificial intelligence (AI) or machine learning (ML) models.
  • Strict Confidentiality: Data is never shared or transferred to any third party except as strictly necessary to host the application infrastructure on Google Cloud Platform / Firebase.

6. Security, Encryption & Storage

  • AES-256-GCM Encryption: Google OAuth refresh tokens are encrypted at rest using AES-256-GCM.
  • TLS / HTTPS: All network communication is encrypted using TLS 1.3.
  • Tenant Isolation: Data in Cloud Firestore is strictly partitioned by authenticated user ID; other users cannot access your records.

7. Data Retention & Self-Service Deletion Rights

  • Instant Data Deletion: Clicking "Delete all data" in Settings permanently purges all parsed reports, metrics history, sessions, and OAuth tokens from our database.
  • Revoking Access: You can revoke the application's access at any time via your Google Account Security Permissions page.
  • Google Drive Untouched: Deleting your account leaves all original and archived PDF files intact in your Google Drive.

8. Contact Information

If you have any questions or data requests regarding this Privacy Policy: