Privacy Policy

We collect only what the app needs to do its job:

• Account information — your name, email address, and (optionally) a phone number you provide at sign-up.
• Content you create — tray inventory and tray types, the hospitals you service, surgeons and their preference cards, your schedule and cases, notes and checklists, and the inventory movements you record.
• Tray photographs — images of trays and instruments you capture for inventory and verification. Two image sets are kept per tray (a master template and the most recent scan). EXIF metadata is stripped before storage or any further processing.
• Team data — if you join or create a team, your team membership, role, and invitations.
• Billing information — when you subscribe, payment is handled by our payment processor (Stripe). We do not receive or store your full card number; we retain your subscription status, plan, and a customer identifier.
• Usage & diagnostic data — limited technical data such as feature-usage counts (e.g. Dash AI assistant usage for billing limits) and, if enabled, error reports used to diagnose crashes.

We do not collect protected health information, and the app provides no field for it. We do not sell your data. We do not use your content to train third-party AI models. We do not track you across other apps or websites for advertising.

• To provide the app — store your inventory, photos, schedule, and notes, and sync them across your devices and team.
• To provide the Dash AI assistant when you use it (see §5).
• To operate your account, team, and subscription, and to send essential service messages.
• To secure the service, prevent abuse, and diagnose problems.
• To comply with legal obligations.

Dash’s AI assistant is assistive only — its answers and suggestions are for you to confirm, and are never treated as authoritative.

We do not sell your information. We share it only with service providers (“sub-processors”) that help us run Dash, each limited to what their function requires:

• Supabase — database, secure file storage, and authentication.
• Netlify — application hosting and delivery.
• Anthropic — powers the Dash AI assistant; processes your chat messages, relevant details from your own Dash workspace, and any image you choose to send it, to generate responses (see §5).
• Stripe — payment processing and subscription management.
• Sentry (if enabled) — error monitoring used to diagnose crashes.

We may also disclose information if required by law, or to protect the rights, safety, and security of Dash and its users.

Dash includes an optional AI assistant. When you send it a message, your message — together with relevant details from your own Dash workspace that help answer it, and any image you choose to attach (with EXIF metadata removed before it leaves your device) — is sent to our AI provider (Anthropic) to generate a response. Images you send the assistant are used only to produce that response and are not stored. Because Dash contains no patient data, no PHI is included, and the provider does not use your requests to train its models. If the assistant is unavailable, Dash degrades gracefully and the feature simply does not run — your other data is unaffected.

We keep your information for as long as your account is active. You can delete your account at any time from Settings. Deletion is recoverable for 30 days — sign back in within that window to restore your account — after which your data is permanently removed. Deleting your account also cancels any active subscription at the end of the current billing period. Some records may be retained where required by law (for example, payment records held by our payment processor).

Data is encrypted in transit. Every account’s data is isolated by row-level security so that one operator (or team) cannot read another’s. Tray photos are held in private storage scoped to your account, and image metadata is stripped before storage. No method of transmission or storage is perfectly secure, but we work to protect your information using industry-standard safeguards.

• Access & correct — view and edit your account details and content directly in the app.
• Delete — remove your account and associated data from Settings (see §6).
• Manage your calendar feed — reset your calendar subscription link at any time from Settings, which immediately invalidates the previous one.
• Depending on where you live, you may have additional rights (such as data access or portability). Contact us to exercise them.

If you use Dash as part of a team, your inventory, hospitals, schedule, and related content are shared among invited members of that team and visible according to each member’s role. Members outside your team cannot access it. Team owners and admins can manage membership.

Dash is a professional tool intended for adults and is not directed to children. We do not knowingly collect information from anyone under 18.

Dash is operated from the United States, and your information is processed and stored on our providers’ infrastructure. If you access Dash from outside the United States, you understand your information may be transferred to and processed in the United States.

We may update this policy from time to time. When we do, we will revise the “Last updated” date above, and for material changes we will provide notice within the app. Your continued use of Dash after a change takes effect means you accept the updated policy.

Questions about this policy or your data? Contact us at support@dashcheck.app, or by mail:

This Privacy Policy is governed by the laws of the State of Florida, United States, without regard to its conflict-of-laws rules.