Privacy policy and optional analytics

The clinic app

The Nitentia — Minha clínica app uses your email address, account identifier and sign-in details to give you access to your practice. You can sign in with email and password or with Google; Google sign-in also provides your name and profile photo.

We use practice and professional details to build the website and run the features you choose. We hold patient data entered by the practice on its behalf, such as names, contact details, messages, requested treatments and appointments. The practice is the controller of these data and Nitentia is the processor.

Features you choose may process conversations, files, photos of production sheets, production records, amounts, commissions and Pix keys. Connecting Google allows reading authorised spreadsheets. The vault holds credentials you provide for the services you choose.

When you request text or use the assistant, we send your request, conversation history and tool results to language models. Spreadsheet content and photos of production sheets may include personal and health data; the entire sheet photo is sent to the model.

If you allow phone notifications, we associate an identifier for the app on your device with your account to send task notifications. We also record app usage, failures and technical data such as IP address, browser and response time to analyse performance, manage usage limits and protect the service. Detailed recording depends on enablement by the operator; the app does not offer an option to disable these records.

Data are shared with authentication, cloud, storage and notification providers, including Google/Firebase, and with language model providers contracted to operate the service. Tools may access external services you choose. Access to the app uses HTTPS, which encrypts data in transit on that connection. The verified notification, media storage and spreadsheet reading flows also use HTTPS.

Some features use third-party services directly: the postcode you type goes to BrasilAPI to complete the address, and internet searches made by the assistant use Microsoft Bing, under Bing’s own terms. The assistant can also open web pages you point it to.

People without an account also send data when the practice asks: a dentist who receives a link sends the photo of her production sheet, which may include patient data, and her Pix key; someone who receives a password link, valid for 24 hours and for a single use, types a username and password, which are encrypted in the practice’s vault and used only when the practice asks.

If you connect an external AI app to Nitentia, with your authorisation, it can see the practice’s details, the dentists’ production and commissions, propose post texts, publish the website and record entries in the dentists’ settlement, while the connection is active. What that app does with the data follows its own terms.

Nitentia’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention: assistant conversations and memory are kept for 12 months after last use; app usage measurement for 90 days; vault passwords until the practice deletes them; other data until the account is deleted. Deletion is completed within 30 days of the request.

To request access to your data, write to ola@nitentia.com. To request deletion of your account and data, follow the steps on the page below. Requests about patient data are handled with the responsible practice.

Delete app account and data

Account and signup source

When you create an account, we use your sign-in details to authenticate you in the portal. Some Nitentia links carry a fixed entry-page code. The portal keeps that code only in the current tab and uses it for up to 30 minutes and associates it with the initial clinic registration to measure which entry points help people get started. The temporary code is removed after creation or when an existing clinic signs in. This measurement uses only the page code, without browsing history, a full referring URL or a visitor identifier. This existing attribution belongs to the portal signup flow, separate from optional Google Analytics on this website.

Analytics on this website

Before you accept, we do not load the Google Analytics tag, send events to it or set analytics cookies. Site fonts and images are self-hosted. The appearance preference is functional and separate from analytics.

If you accept, we use Google Analytics to observe public pages visited, foreground time and actions such as navigation, opening the demo, going to signup or choosing a contact channel. Opening a link does not establish account creation, care or an outcome. Google receives the measurement requests, including technical connection data such as IP address and browser.

We send only approved public paths, without URL query parameters or fragments. A path can indicate the topic of the page read. We do not send entered text, disclosure-check answers, names, email addresses, phone numbers, patient data or account identifiers. Advertising features, Google Signals, session recording and automatic form/search collection are not used.

Accepting and declining are optional. Your choice is saved in this browser for up to 180 days; first-party cookies used by Analytics last up to 30 days. Browser privacy signals such as DNT and GPC disable analytics. You can decline or withdraw through “Privacy preferences” at the end of the page without losing access to the content.

Withdrawal stops new sends and deletes this site’s analytics cookies. It does not automatically delete data already received by Google; contact us below about access or deletion requests. Hosting may keep technical request logs. Following an external link takes you to that service under its own terms.

If you write to us

We use email for enquiries, support and proposals, with assistance from AI tools. An operational monitor checks registered conversations and specific support subjects, records requests and notifies the owner. Messages are not treated as authorization to release patient data. We retain correspondence needed for service and applicable obligations; contact us to request access or deletion. Do not send passwords or clinical records.

Data we hold for a practice

When a practice is a customer, patient enquiries submitted through its website are held by us on that practice’s behalf. They are the practice’s data. Each record carries what the person submitted, where they came from, and — when they were shown a consent notice — the exact wording and version of what they agreed to. If the version cannot be identified, the submission is rejected rather than stored with an empty consent field.

In Brazil this processing is governed by the Lei Geral de Proteção de Dados (Lei nº 13.709/2018), with the practice as controller and Nitentia as processor. The specific data-protection obligations of other markets are handled in the agreement with each practice rather than asserted here, for the same reason the compliance gate stays closed where it has not been verified.

Asking us something about this

Write to ola@nitentia.com. If your question is about data held for a specific practice, that practice is the controller and we will work with them to answer you.