Private by Design
We built privacy into every feature from day one—not as an afterthought.
Protecting your child's privacy
Built by NHS dentists with privacy by design.
No adverts. No data sales.
ICO reg ZB894415
Encrypted storage in the UK (AWS London)
Pseudonymised profiles
Working to UK GDPR
Privacy Features
No adverts. No data sales.
We do not show third-party adverts or sell personal data. Optional website analytics only run if you turn them on.
Pseudonymised & Encrypted
Child profiles use a first name or nickname and birth month and year; data is encrypted at rest. Encrypted storage in the UK (AWS London).
Parents in Control
Rewards and reminders are set by you, not us. You can ask to see, export or delete your child's information at any time.
Professional Standards
GDC-registered clinicians, enhanced DBS checks, safeguarding policies in place.
What schools see
(and don't see)
What we provide to schools:
Class and setting-level session totals and brushing minutes
Exportable programme summaries
What schools NEVER see:
Individual children's app brushing data
Parent contact information
Documentation for schools and authorities
Privacy notices for each audience
Public DPIA summary (Vision school research)
Data sharing arrangements on request
Parent information and permission forms
Frequently Asked Questions
For MD App: a parent account (email or Apple/Google sign-in), each child's first name or nickname, avatar, birth month and year, reminders, brushing sessions and rewards. See the MD App Privacy Notice.
You (the parent or carer). Schools see class and setting-level totals, not individual app brushing data. We do not sell personal data; our notices list the providers that help us run the service.
Account and child profile data are kept while the account is active. You can delete a child profile or your account in the app; deletion from live systems is prompt and backup copies expire on a schedule. Details are in the MD App Privacy Notice.
Yes. Use the in-app delete option or email privacy@mydentalbuddy.com. We remove live records promptly and explain what is kept and why.
ICO-registered (ZB894415) and working to UK GDPR; our notices explain exactly what we do.