1. Overview

DentFlow is an internal procurement, materials request, purchase order, and inventory management platform for clinics and organizations. It is designed to help authorized users manage material requests, approvals, supplier receiving, stock movements, deliveries, and operational reports.

DentFlow is not a patient management system, electronic medical record system, prescription system, treatment system, pharmacy system, or medical product sales platform. The platform is intended only for administrative and operational procurement and inventory workflows.

2. Information We Collect

• Account information such as name, email address, phone number, role, organization, branch, and user code.
• Procurement data such as material requests, quantities, approvals, purchase orders, supplier receipts, deliveries, and inventory movements.
• Authentication and verification data, including verification status and device notification tokens.
• Operational records such as audit logs, notifications, and system activity needed to secure and operate the service.
• DentFlow does not require or intentionally collect patient names, patient files, prescriptions, treatment notes, diagnoses, or other patient health records.

3. How We Use Information

• To create and manage user accounts and organization access.
• To process material requests, approvals, purchase orders, supplier receiving, stock allocation, and delivery handover.
• To send account verification, password reset, workflow, and system notifications.
• To generate operational reports for authorized users, managers, warehouse staff, and administrators.
• To protect the platform, detect misuse, maintain audit history, and improve service reliability.

4. Data Isolation and User Permissions

Organization data is separated by account. Users can only access records permitted by their organization, branch, role, and assigned permissions. Administrators may access platform-level information required to operate, support, and secure the service.

5. Third-Party Services

DentFlow may use third-party services such as Firebase or similar services for email or phone verification, authentication support, push notifications, analytics, crash reporting, or technical operations. These services may process technical identifiers needed to deliver their functionality.

6. Data Retention and Security

We keep operational information as long as needed to provide the service, meet procurement and inventory requirements, maintain audit records, resolve disputes, prevent misuse, or comply with applicable obligations.

We use reasonable administrative and technical safeguards, including password protection, role-based permissions, token-based API access, encrypted communications where applicable, audit logging, and organization-level data scoping.

7. Account Deletion

Users may request account deletion or use the in-app delete account option when available. Some operational records may be retained where necessary for procurement history, inventory integrity, audit requirements, security, dispute resolution, or legal obligations.

8. User Responsibilities

Users are responsible for entering accurate operational information and must not upload or store patient health records, prescriptions, treatment notes, diagnoses, or unrelated sensitive medical information in DentFlow.

9. Contact

For privacy questions, account requests, or data-related inquiries, please contact your organization administrator or the DentFlow support team.