Privacy Policy
Last updated August 1, 2026
TruthMolar reports what happened to other patients. This policy explains what we collect, what we delete, who sees what, and the rights you have. It starts in plain English and gets more detailed as it goes; the detailed parts exist because specific laws require specific words. This policy also serves as our Consumer Health Data Privacy Policy for the states that require one.
Who we are
TruthMolar is operated by UDIGHT LLC, a limited liability company registered in Massachusetts, USA ("UDIGHT LLC", "we", "us"). TruthMolar is an education service. We are not a dental practice, we do not provide care, and we are not your healthcare provider. We are not a HIPAA covered entity; instead, the state consumer health data laws and FTC rules described below apply to us, and we honor them.
The short version
You can use everything without an account and without giving us your name. If you upload a treatment plan, we read the codes and fees off it and delete the original. If your plan is selected for review, we keep the original for up to 24 hours so a trained reviewer can check our reading, then it is deleted automatically. We keep only the de-identified details needed to compare plans: codes, tooth numbers, fees, how you pay, your 5-digit ZIP, your birth year, and an identifier for the dental office. We never sell your information, we never use it for targeted advertising, and no dental office can pay to change what we show you.
You are anonymous by default
The full flow works with no account. We never require your name, email, or phone number to show you results. An account exists only if you choose to save a result, and you pick the sign-in method. Contact information is never required to get results.
What we collect
What you give us: the treatment plan you upload or the codes and prices you type, your 5-digit ZIP code, your birth year, and how you pay for dental care. If you create an account: your chosen sign-in method (phone number, email, or Google account) and, optionally, your first name. What we collect automatically: basic technical logs needed to run and secure the service (such as IP address, browser type, and timestamps, kept briefly for security), and, only if you say yes, anonymous aggregate usage analytics with no personal data and no ads. We collect information directly from you, never by buying it from data brokers.
Uploads are deleted within 24 hours, and here is exactly what we keep
When you upload a document, we read the treatment codes and fees from it and then delete the original. If your plan is selected for review, we keep the original for up to 24 hours so a trained reviewer can check our reading against it, and it is deleted automatically after that. We never keep your name, photo, or ID numbers even if they appear on the paper. What we keep from each check: procedure codes, tooth numbers, fees, how you pay, your ZIP code, your birth year, and an identifier for the dental office. The app shows you, for every submission, what was kept and when the original was or will be deleted. If you type your plan in instead, nothing is uploaded and there is never a document to delete.
Your full ZIP code
We keep your full 5-digit ZIP code. Dental prices are local, and the full ZIP is what lets us pick the right price band for your area. We say this plainly because it matters.
Consumer health data
Some states, including Washington, Nevada, and Connecticut, give special protection to "consumer health data", and dental treatment information qualifies. Here is our consumer health data disclosure. What we collect: the dental procedure codes, tooth numbers, and fees on the plan you submit, plus how you pay for care. Why: solely to provide the comparison you asked for and to build the de-identified benchmark that powers it. Source: you, directly; we do not buy or infer health data. Sharing: only with the service providers who process it for us under contract (listed by category below); we do not sell consumer health data, and we do not share it with third parties for their own use. No advertising: we do not use your health data for any advertising. Your rights: you can withdraw consent for further collection at any time by stopping use of the service, and you can ask us to confirm, delete, or list who received your health data by emailing privacy@truthmolar.com; we honor these rights for all users, not just residents of those states. Because uploads are deleted within 24 hours and the rest is de-identified, in most cases the honest answer to "what do you hold about me" is: nothing that names you.
How we use your information
We use it to compare your plan against de-identified records from patients like you, to show you your results, and, if you have an account, to save your reports and send only the notifications you turned on. Using TruthMolar also adds the de-identified codes and fees from your check (never your name) to the benchmark that powers everyone's results. That exchange is part of the free service and is also stated in the Terms. We additionally use information to keep the service secure, prevent abuse and fraud, debug, and meet legal obligations. We do not use your information for profiling that produces legal or similarly significant effects, and we do not make automated decisions about you; the service reports statistics about other patients, it does not decide anything about you.
De-identification: our promise
Benchmark data is de-identified: it cannot reasonably be linked back to you. We commit that we will not attempt to re-identify de-identified data, we maintain technical safeguards against re-identification, and we contractually require anyone who receives de-identified data from us to make the same commitment. We publicly state here that we maintain and use this data only in de-identified form.
AI and its limits
Artificial intelligence reads uploaded documents, helps generate your results, and answers questions in the app. You are told in the app when you are interacting with AI, and this notice serves as our AI disclosure wherever state law requires one, including California, Texas, Utah, and Colorado. This is education, not a diagnosis. AI-generated content can be wrong. Always confirm with your own dentist.
Who we share information with
We use service providers in these categories: cloud hosting and storage, sign-in and account management, AI document reading and answer generation, text and email delivery, maps and office ratings, and consent-based analytics. Each may process your information only to provide our service, under contracts that restrict any other use. We share your information with a dental office only if you ask us to connect you to one. We may share de-identified, aggregate statistics that do not identify you. We may disclose information if the law requires it (we will push back on overbroad demands), to protect safety or our legal rights, or as part of a merger, financing, or sale of the company, in which case this policy continues to apply to information collected under it.
No sale, no targeted advertising, no dental office influence
We do not sell your personal information and have not done so. We do not share it for cross-context behavioral (targeted) advertising. The only advertising cookie we use is Google's own conversion cookie, set only if you accept it, and used only to tell us whether our own ad led to a result on our site; we never use it to target or personalize ads to you, track you across other sites, or build a profile of you. Because we do not sell or share personal information in those senses, there is nothing to opt out of; if that ever changes, we will provide the required opt-out link first and honor opt-out preference signals such as Global Privacy Control. And permanently: no dental office can pay to change what we show you. Sponsored placements and offers are always labeled and never affect comparisons or ratings.
Cookies and similar technologies
We use only the storage needed to run the service: keeping you signed in if you have an account, remembering your language, and holding your in-progress check. Analytics, and a single Google Ads conversion cookie that tells us whether our own ad led to a result, run only if you accept them in the consent banner; both are configured to avoid identifying you and can be turned off any time. We never use that conversion cookie to personalize ads, track you across other sites, or build a profile of you.
Your privacy rights, in every state
Depending on your state, you may have the legal right to know what personal information we have about you, to correct it, to delete it, to receive a portable copy, and to opt out of sales, targeted advertising, and significant profiling (none of which we do). We honor all of these rights for every user regardless of state. To exercise them: use the in-app tools described below, or email privacy@truthmolar.com. We will verify the request using the account or contact information involved, respond within 45 days, and never treat you worse for exercising your rights. You may use an authorized agent; we will verify the agent's authority. If we deny a request, we will explain why, and you may appeal by replying to our response with "appeal" in the subject line; we will answer the appeal within 45 days, and if you are still unsatisfied you may contact your state Attorney General.
Download and delete, built in
With an account, you can download everything we have about you, or delete your account and data, at any time from Account, under Privacy and data. Deletion has a 30-day grace period, then it is permanent, including from backups on their normal cycle. If you never created an account, there is no profile to delete; your upload is deleted within 24 hours and what remains is de-identified.
How long we keep things
Uploaded originals: deleted right after reading, or within 24 hours when your plan is selected for review. Automatic either way. Security logs: kept briefly, then deleted. Account information and saved reports: kept until you delete them or your account. De-identified benchmark data: kept and used to power results; it is no longer connected to you and cannot be pulled back out.
Security and breach notification
We use technical and organizational safeguards, including encryption in transit and at rest, access controls, and keeping as little identifying data as possible in the first place, which is the strongest safeguard there is. No online service can promise perfect security. If a breach of unsecured identifiable health data ever occurs, we will notify affected users and the Federal Trade Commission as required by the FTC Health Breach Notification Rule, and comply with state breach notification laws, including Massachusetts law.
Children
TruthMolar is for adults and is not directed to children under 13. We do not knowingly collect personal information from children. A parent or legal guardian may enter information about their own child's treatment plan as part of their own use of the service; that information is treated exactly like the parent's own submission, including deletion of originals and de-identification. If you believe a child has used the service directly, contact privacy@truthmolar.com and we will delete the data.
Where your data lives
TruthMolar is intended for people in the United States, and information is processed and stored in the United States.
Changes to this policy
If we change this policy, we will update the date at the top. If a change meaningfully reduces your privacy or affects how consumer health data is handled, we will tell you in the app and, where the law requires it, obtain your consent before the change applies to you.
Contact us
UDIGHT LLC, Massachusetts, USA. Privacy requests and questions: privacy@truthmolar.com. Legal notices: legal@truthmolar.com.
Anonymous usage records
As you move through our price tools we keep a step-by-step record of the screens you saw, the options you chose, the ZIP code you entered, and the web address of each page you visited. That record carries no name, phone number, or email address. If you never send us a request, we delete it within 367 days. If you do send one, we keep the record with your request.