Privacy Policy

1. Introduction

UDA Pulse ("the App") is a dental productivity application developed by Dr Kartik Datla ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect your information when you use UDA Pulse on iOS or Android.

We are committed to protecting your privacy. UDA Pulse is designed with a privacy-first, offline-first approach. Your clinical and financial data stays on your device unless you explicitly choose to export it. We do not require you to create an account, and we do not use advertising or third-party analytics.

This policy applies to all users of UDA Pulse, regardless of location. If you are located in the United Kingdom or the European Economic Area, your rights under the UK GDPR and EU GDPR are set out in Section 6 below.

2. Data We Collect

UDA Pulse is designed to minimise data collection. The vast majority of information you enter into the App never leaves your device. Below is a summary of what is and is not collected.

Data stored locally on your device only

• UDA entries and treatment records
• Private income entries
• Practice configurations, targets, and settings
• Expense records, mileage logs, and receipt photos
• Lab bill records
• CPD hours and certificate attachments
• Open courses of treatment
• Failed-to-attend (FTA) records
• Holiday calendar entries
• Notification preferences
• Theme and display preferences

This data is stored in the App’s private SQLite database, sandboxed by the operating system and inaccessible to other apps.

Data we do not collect

• Patient names, NHS numbers, or any patient-identifiable information
• Your name, email address, or contact details
• Location or GPS data
• Device identifiers for tracking purposes
• Usage analytics or behavioural data
• Cookies or tracking pixels

Data transmitted to third-party services

In limited circumstances described in Section 5, small amounts of non-personal data may be transmitted to third-party services (RevenueCat for subscription management and Supabase for voucher code validation). No clinical, financial, or personally identifiable data is included in these transmissions.

3. How We Use Your Data

Data stored locally on your device is used solely to provide the App’s functionality, including:

• Calculating UDA performance, targets, and pace indicators
• Tracking private income, expenses, and mileage
• Generating reports, tax estimations, and business insights
• Scheduling local push notifications (reminders, pace alerts, treatment follow-ups)
• Producing the monthly summary image and accountant PDF export

We do not access, read, or process your locally stored data. We do not share your data with any third party for marketing, advertising, or profiling purposes.

4. Data Storage

Local storage

All clinical and financial data is stored in the App’s private SQLite database on your device. Sensitive data such as subscription status and redeemed voucher codes are stored using your device’s secure storage (iOS Keychain / Android Keystore).

Cloud backup (optional, user-initiated)

UDA Pulse offers an optional cloud backup feature that allows you to export all your data as a JSON file via your device’s share sheet. This is entirely user-initiated — no data is transmitted automatically. The exported file is handled by whatever sharing method you choose (e.g. AirDrop, email, cloud storage). We do not receive, store, or have access to your exported backup files.

You may also import a previously exported backup file to restore your data on the same or a different device.

Data retention

Because all data is stored locally, you control retention entirely. If you delete the App or clear its data, your records are permanently and irrecoverably removed from your device.

5. Third-Party Services

UDA Pulse integrates with the following third-party services:

Apple App Store / Google Play Store

Used for app distribution and in-app purchase processing. Payment processing is handled entirely by Apple or Google — we do not have access to your payment card details. Please refer to Apple’s Privacy Policy and Google’s Privacy Policy for details.

RevenueCat

RevenueCat is used for subscription entitlement management. When you make an in-app purchase, RevenueCat processes an anonymous subscriber identifier to manage your subscription status. This identifier does not include your name, email, or any personally identifiable information. RevenueCat may also receive standard purchase metadata from Apple or Google (e.g. purchase date, product identifier, transaction ID). You can review RevenueCat’s privacy policy at revenuecat.com/privacy.

Supabase (voucher code validation)

When you redeem a voucher code, the App sends the voucher code and your device platform (iOS or Android) to a Supabase-hosted database to validate and record the redemption. This is necessary to enforce single-use voucher codes globally. No personal data, device identifiers, IP addresses, or account information is sent or stored as part of this process. You can review Supabase’s privacy policy at supabase.com/privacy.

Services we do not use

UDA Pulse does not use any third-party analytics, crash reporting, advertising networks, or tracking services. There are no cookies, tracking pixels, or fingerprinting mechanisms.

6. Your Rights (GDPR)

If you are located in the United Kingdom or the European Economic Area, you have rights under the UK GDPR and EU GDPR respectively. Because UDA Pulse stores data locally on your device and we do not collect or process personal data on our servers, you already have direct control over your data. Specifically:

• Right of Access: All your data is accessible within the App at any time. You can view every entry, record, and setting.
• Right to Rectification: You can edit or correct any entry within the App at any time.
• Right to Erasure: You can delete individual entries within the App, or delete the App entirely to permanently remove all data from your device.
• Right to Data Portability: You can export all your data as a JSON file using the cloud backup feature, or export records as CSV files (premium feature).
• Right to Restrict Processing: As we do not process your data on our servers, this right is inherently satisfied.
• Right to Object: We do not use your data for direct marketing, profiling, or automated decision-making.

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK or your local supervisory authority in the EEA.

7. Data Deletion

You can delete your data at any time through the following methods:

• Individual entries: Delete specific UDA entries, income records, expenses, or other items directly within the App.
• Full data deletion: Uninstall the App from your device to permanently delete all locally stored data, including the SQLite database and secure storage contents.
• Voucher redemption records: If you have redeemed a voucher code and wish to have the redemption record removed from our Supabase database, please contact us at drkdatla@gmail.com and we will action your request within 30 days.
• Subscription data: To request deletion of any data held by RevenueCat, please contact us and we will facilitate the request on your behalf.

No action is needed on your part to delete locally stored data beyond uninstalling the App. We do not retain backups of your data.

8. Children's Privacy

UDA Pulse is a professional tool designed exclusively for qualified dental practitioners and dental professionals. It is not intended for use by individuals under the age of 16. We do not knowingly collect or solicit data from children. If you believe a child has provided data to us, please contact us at drkdatla@gmail.com and we will take appropriate steps to address the matter.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App’s functionality or applicable law. Any changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this page periodically.

If we make material changes that affect how we handle your data, we will provide notice through the App or other appropriate means before the changes take effect.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or UDA Pulse’s data practices, please contact us: