Privacy Policy
Last updated August 1, 2026
TruthMolar reports what happened to other patients. This policy explains what we collect, what we delete, who sees what, and the rights you have. It starts in plain English and gets more detailed as it goes; the detailed parts exist because specific laws require specific words. This policy also serves as our Consumer Health Data Privacy Policy for the states that require one.
Who we are
TruthMolar is operated by UDIGHT LLC, a limited liability company registered in Massachusetts, USA ("UDIGHT LLC", "we", "us"). TruthMolar is an education service. We are not a dental practice, we do not provide care, and we are not your healthcare provider. We are not a HIPAA covered entity; instead, the state consumer health data laws and FTC rules described below apply to us, and we honor them.
The short version
You can use everything without an account and without giving us your name. If you upload a treatment plan, we read the codes and fees off it and delete the original right after. We keep only the de-identified details needed to compare plans: codes, tooth numbers, fees, how you pay, your 5-digit ZIP, your birth year, and an identifier for the dental office. We never sell your information, we never use it for targeted advertising, and no dental office can pay to change what we show you.
You are anonymous by default
The full flow works with no account. We never require your name, email, or phone number to show you results. An account exists only if you choose to save a result, and you pick the sign-in method. Contact information is never required to get results.
What we collect
What you give us: the treatment plan you upload or the codes and prices you type, your 5-digit ZIP code, your birth year, and how you pay for dental care. If you create an account: your chosen sign-in method (phone number, email, or Google account) and, optionally, your first name. What we collect automatically: basic technical logs needed to run and secure the service (such as IP address, browser type, and timestamps, kept briefly for security), and, only if you say yes, anonymous aggregate usage analytics with no personal data and no ads. We collect information directly from you, never by buying it from data brokers.
Uploads are deleted, and here is exactly what we keep
When you upload a document, we read the treatment codes and fees from it and automatically delete the original file right after reading. We do not keep your uploaded file, and we never keep your name, photo, or ID numbers even if they appear on the paper. What we keep from each check: procedure codes, tooth numbers, fees, how you pay, your ZIP code, your birth year, and an identifier for the dental office. The app shows you, for every submission, what was kept and confirmation that the original was deleted. If you type your plan in instead, nothing is uploaded and there is never a document to delete.
Your full ZIP code
We keep your full 5-digit ZIP code. Dental prices are local, and the full ZIP is what lets us pick the right price band for your area. We say this plainly because it matters.
Consumer health data
Some states, including Washington, Nevada, and Connecticut, give special protection to "consumer health data", and dental treatment information qualifies. Here is our consumer health data disclosure. What we collect: the dental procedure codes, tooth numbers, and fees on the plan you submit, plus how you pay for care. Why: solely to provide the comparison you asked for and to build the de-identified benchmark that powers it. Source: you, directly; we do not buy or infer health data. Sharing: only with the service providers who process it for us under contract (listed by category below); we do not sell consumer health data, and we do not share it with third parties for their own use. No advertising: we do not use your health data for any advertising. Your rights: you can withdraw consent for further collection at any time by stopping use of the service, and you can ask us to confirm, delete, or list who received your health data by emailing privacy@truthmolar.com; we honor these rights for all users, not just residents of those states. Because uploads are deleted right after reading and the rest is de-identified, in most cases the honest answer to "what do you hold about me" is: nothing that names you.
How we use your information
We use it to compare your plan against de-identified records from patients like you, to show you your results, and, if you have an account, to save your reports and send only the notifications you turned on. Using TruthMolar also adds the de-identified codes and fees from your check (never your name) to the benchmark that powers everyone's results. That exchange is part of the free service and is also stated in the Terms. We additionally use information to keep the service secure, prevent abuse and fraud, debug, and meet legal obligations. We do not use your information for profiling that produces legal or similarly significant effects, and we do not make automated decisions about you; the service reports statistics about other patients, it does not decide anything about you.
De-identification: our promise
Benchmark data is de-identified: it cannot reasonably be linked back to you. We commit that we will not attempt to re-identify de-identified data, we maintain technical safeguards against re-identification, and we contractually require anyone who receives de-identified data from us to make the same commitment. We publicly state here that we maintain and use this data only in de-identified form.
AI and its limits
Artificial intelligence reads uploaded documents, helps generate your results, and answers questions in the app. You are told in the app when you are interacting with AI, and this notice serves as our AI disclosure wherever state law requires one, including California, Texas, Utah, and Colorado. This is education, not a diagnosis. AI-generated content can be wrong. Always confirm with your own dentist.
Who we share information with
We use service providers in these categories: cloud hosting and storage, sign-in and account management, AI document reading and answer generation, text and email delivery, maps and office ratings, and consent-based analytics. Each may process your information only to provide our service, under contracts that restrict any other use. We share your information with a dental office only if you ask us to connect you to one. We may share de-identified, aggregate statistics that do not identify you. We may disclose information if the law requires it (we will push back on overbroad demands), to protect safety or our legal rights, or as part of a merger, financing, or sale of the company, in which case this policy continues to apply to information collected under it.
No sale, no targeted advertising, no dental office influence
We do not sell your personal information and have not done so. We do not share it for cross-context behavioral (targeted) advertising. We do not use advertising cookies or trackers. Because we do not sell or share personal information in those senses, there is nothing to opt out of; if that ever changes, we will provide the required opt-out link first and honor opt-out preference signals such as Global Privacy Control. And permanently: no dental office can pay to change what we show you. Sponsored placements and offers are always labeled and never affect comparisons or ratings.
Cookies and similar technologies
We use only the storage needed to run the service: keeping you signed in if you have an account, remembering your language, and holding your in-progress check. Analytics runs only if you accept it in the consent banner, is configured to be anonymous and aggregate, and can be turned off any time. We do not use third-party advertising cookies.
Your privacy rights, in every state
Depending on your state, you may have the legal right to know what personal information we have about you, to correct it, to delete it, to receive a portable copy, and to opt out of sales, targeted advertising, and significant profiling (none of which we do). We honor all of these rights for every user regardless of state. To exercise them: use the in-app tools described below, or email privacy@truthmolar.com. We will verify the request using the account or contact information involved, respond within 45 days, and never treat you worse for exercising your rights. You may use an authorized agent; we will verify the agent's authority. If we deny a request, we will explain why, and you may appeal by replying to our response with "appeal" in the subject line; we will answer the appeal within 45 days, and if you are still unsatisfied you may contact your state Attorney General.
Download and delete, built in
With an account, you can download everything we have about you, or delete your account and data, at any time from Account, under Privacy and data. Deletion has a 30-day grace period, then it is permanent, including from backups on their normal cycle. If you never created an account, there is no profile to delete; your upload was already destroyed and what remains is de-identified.
How long we keep things
Uploaded originals: deleted right after reading, automatically. Security logs: kept briefly, then deleted. Account information and saved reports: kept until you delete them or your account. De-identified benchmark data: kept and used to power results; it is no longer connected to you and cannot be pulled back out.
Security and breach notification
We use technical and organizational safeguards, including encryption in transit and at rest, access controls, and keeping as little identifying data as possible in the first place, which is the strongest safeguard there is. No online service can promise perfect security. If a breach of unsecured identifiable health data ever occurs, we will notify affected users and the Federal Trade Commission as required by the FTC Health Breach Notification Rule, and comply with state breach notification laws, including Massachusetts law.
Children
TruthMolar is for adults and is not directed to children under 13. We do not knowingly collect personal information from children. A parent or legal guardian may enter information about their own child's treatment plan as part of their own use of the service; that information is treated exactly like the parent's own submission, including deletion of originals and de-identification. If you believe a child has used the service directly, contact privacy@truthmolar.com and we will delete the data.
Where your data lives
TruthMolar is intended for people in the United States, and information is processed and stored in the United States.
Changes to this policy
If we change this policy, we will update the date at the top. If a change meaningfully reduces your privacy or affects how consumer health data is handled, we will tell you in the app and, where the law requires it, obtain your consent before the change applies to you.
Contact us
UDIGHT LLC, Massachusetts, USA. Privacy requests and questions: privacy@truthmolar.com. Legal notices: legal@truthmolar.com.