← Back to portfolio

Legal document

Desk4Dent – Privacy Policy

/privacy-policy/desk4dent

The original English and Turkish policy text is preserved below.
EN TR 
Last Updated: 12.02.2026

Desk4Dent is a software system used only by dentists and authorized clinic staff to manage in-clinic operations. The app provides functions such as patient records, appointment planning, treatment management, accounting tracking, and user authorization. This privacy policy explains for which purposes personal data is processed within the application and how it is protected.

The data processed in Desk4Dent consists of information created and managed by the clinic. This may include patient name, surname, contact details, date of birth, identity number (if available), medical history, anamnesis records, chronic disease information, allergies, medications, dental status data (teeth JSON field), appointment dates, procedure history, and financial records. For user accounts, name, e-mail, role, and company membership data are also processed. For security and audit purposes, the system stores operation logs including created_by, updated_by, and timestamp records.

Desk4Dent infrastructure runs on Supabase (PostgreSQL). Data is hosted on secure servers and role-based access control is applied. Each user can only access data within their authorization scope. Company-based isolation (company_id) separates data between different clinics. Authentication and access-control mechanisms are applied to prevent unauthorized access.

The app may store device token information for appointment notifications. These tokens are used only for notification delivery and are not used for advertising or marketing by third parties. Desk4Dent does not provide advertising services and does not share user data with third parties for commercial purposes.

Health data is considered special category personal data under Law No. 6698 on the Protection of Personal Data (KVKK). Desk4Dent acts as a technical infrastructure provider; lawful collection of patient data and fulfillment of required disclosure obligations are the clinic's responsibility. However, the system commits to applying the necessary technical and administrative safeguards to protect this data.

Personal data is retained in the system as long as the service relationship with the clinic continues. When the service ends, data can be deleted or securely transferred based on the clinic's request. In cases where legal obligations apply, data may be retained in accordance with applicable legislation.

Although Desk4Dent cannot guarantee absolute security due to the nature of the internet, it continues to apply up-to-date security standards to protect data. Access logs are kept and in-system changes are recorded with timestamps.

This privacy policy may be updated due to legal changes, technical infrastructure updates, or changes in service scope. The updated text becomes effective as of its publication date. Users are advised to check the current version regularly.

For all data protection requests and questions: [email protected].