Legal
Privacy Policy
Last updated: October 6, 2026
1. Information We Collect
We collect information you provide directly to us, including: name, email address, mailing address, payment information, and health information you submit through our oral health quiz or telehealth consultations. We also automatically collect certain technical data when you use our platform, such as IP address, browser type, device identifiers, and usage patterns through cookies and similar technologies. In the iOS app, you may choose to use device location to suggest your current state for a dental consultation. With your permission, Apple location and geocoding services resolve that state. You confirm the state before continuing, and we store it with your consultation to route care. OneOral does not store the device coordinates from this lookup or track your location in the background. You can instead select your state manually and can change location permission in iPhone Settings.
2. How We Use Your Information
We use the information we collect to: deliver and personalize your OneOral kit; facilitate virtual dental consultations; process payments and manage your membership; communicate with you about your account, orders, and promotions; improve our products and services; comply with legal obligations; and detect and prevent fraud or security incidents. We do not sell your personal health information to third parties.
3. Health Information
Certain health information you share with us through the oral health quiz or telehealth platform may be protected under applicable state or federal law. We treat all health information with heightened care. Your health data is used solely to personalize your care protocol and to facilitate clinical services. It is not shared with advertisers or data brokers.
4. Sharing of Information
We may share your information with: licensed dental professionals providing telehealth services; our fulfillment and shipping partners; payment processors (Stripe); analytics providers; and other service providers operating under confidentiality agreements. We may also disclose information if required by law, court order, or to protect the rights and safety of our users or the public.
5. Cookies and Tracking
We use cookies to maintain your session, remember preferences, and analyze usage. If you allow analytics, our own first-party measurement records, under a random browsing-session identifier, which pages of this site you view; in the same browser, which section of our member portal at app.oneoral.com you open (a section name such as "dashboard" or "account" only, never the page address, your account details, answers, messages, or payment details); the general kind of site that sent you here (for example a search engine or social network, not the address); and whether in that session a quiz was saved, a new account was created, or a payment was completed, and which of the main checkout buttons were pressed (a fixed button name and plan tier only). These session records are pseudonymous rather than anonymous: they hold no name, email address, or account number, but when a new account is created or a care quiz is first saved during that session we keep a coded reference derived from the account with our own server key, so we are able to connect that session to the account. We use these records only for aggregate measurement, never share them with ad platforms, and make no new ones after you turn analytics off. If you allow analytics, arrive from one of our ads, and then create an account in the same browser within two hours of your last visit to one of our tracked ad pages, we save on your account which ad visit led to it: the ad platform, the campaign labels in the ad link, the first page of that visit, and whether an ad click ID was present (never the ID itself). We use this only to measure which ads lead to new accounts. If you later turn analytics off on this site, we delete that saved ad source; your account is not affected. Without analytics consent we do not save an ad source, only any offer you chose when signing up and the signup starting point described next. When you create an account, we save which part of our site you started from (such as Home, Pricing, Quiz, Checkout, or App) and the page of our site on which you started signing up (for example our home page, pricing page, quiz, or one of our offer or campaign pages; for a sub-page, only its section), regardless of cookie choices. It travels with your signup in the short-lived sign-in cookie that already carries the starting part of our site (no extra cookie), and we keep it with your account to run and troubleshoot our signup steps; it is deleted if your account is deleted. It is not the first page you visited and is not used to report to ad platforms, and it excludes ad identifiers, link parameters, the site that sent you, search terms, other pages you viewed, and browsing history. Also regardless of cookie choices, we save on your account the first time you reach each checkout step: seeing the membership plans, saving delivery details successfully, opening billing, and pressing activate. We keep only the step and when it happened, never what you entered, your address or your answers, to count how many people reach each step. We also count, on your account, presses of the main checkout buttons (choosing a plan, the plan's continue button, changing plan, saving delivery details and whether that save worked, and activating), keeping only a fixed button name, the plan tier, the type of card error if a card check fails, the first and last time and how many presses; never what you typed, your address, your answers or card details. With marketing consent, Meta and Google Ads measure page visits, and Google Ads measures completed purchases using the amount paid, currency, and a transaction ID that does not include your name or email. With marketing consent given before the step, Google Ads is also told when you create an account, save your first quiz answer, first see the membership plans, first save delivery details, or start a free trial: only the type of step, when it happened, and a random event ID derived with our own key. These reports never include your name, email address, delivery address, quiz answers, health information, prices or payment details. Google may also receive technical data such as browser and cookie identifiers to attribute a purchase to an ad. If you choose marketing in our cookie settings after we added this to them, and you arrived on our whitening offer page from a Google ad, we also keep the click ID Google added to that ad link (gclid, gbraid or wbraid) in a cookie on this site for up to 30 days from when this site first stored it; returning through the same ad link does not extend that time. If you then start a free trial while signed in on this site, we save that click ID with your trial, and if your first membership payment after the trial succeeds, we may report that payment to Google Ads by uploading a file containing only the click ID, the amount and currency paid, when it was paid, a transaction ID that does not include your name or email, and your consent status (ad measurement allowed, ad personalization not allowed). We do this so Google can tell us which ads led to paying members; we do not use it to build advertising audiences, and we do not send Google your email address, phone number, name, address, plan or kit, quiz answers, health or care information, or any consultation details. Later renewals are never reported. We delete the saved click ID 90 days after this site first stored it from the ad link (we do not know the exact time of the ad click itself, which is usually moments earlier), or sooner if your account is deleted or you turn marketing off in our cookie settings in the browser where you gave consent (a report already sent to Google cannot be recalled by turning marketing off, but no further report is made). Signing out of this site also removes the click ID cookie. If you choose marketing in our cookie settings after we added OpenAI to them, and you arrived from an ad in ChatGPT, we keep the ad-click reference from that ad link in a cookie on this site for up to 30 days, and our server then tells OpenAI when you create an account, save your first quiz answer (never the answer itself), first see the membership plans, first save delivery details (never the details themselves) or start a trial. Each of these reports contains only the type of event, when it happened, that ad-click reference, our website address (not the page), and a random event ID derived with our own key; it contains no name, email address, phone number, IP address, device details, quiz answers, health information, prices or payment details, and is marked not to be used for personalization. We report nothing to OpenAI without that ad-click reference, and turning marketing off deletes it. These ad events do not include quiz answers, oral-health results, consultation details, or payment credentials. Separately, whatever your cookie choices, our servers keep daily totals of requests to the public pages of this site, including our advertising landing pages, so we can see overall traffic and compare it with ad reports. Each total records only the date, the page, and whether the request appeared to come from an automated tool. The totals do not store your IP address, device or browser details, referring site, link parameters, or any identifier, so unlike the consented session records above they cannot be linked to you or to any session. Choose categories anytime via "Your Privacy Choices" in the footer. We do not respond to Do Not Track signals.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services, comply with legal obligations, resolve disputes, and enforce our agreements. Health information related to telehealth consultations is retained in accordance with applicable medical records retention laws.
7. Your Rights and Choices
Depending on your location, you may have the right to: access, correct, or delete your personal information; opt out of marketing communications; request a copy of data we hold about you; and restrict or object to certain processing. To exercise these rights, contact us at privacy@oneoral.com. We will respond to verifiable requests within 30 days.
8. Children's Privacy
Our services are not directed to children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.
9. Security
We implement industry-standard technical and organizational measures to protect your personal information, including encryption in transit and at rest, access controls, and regular security assessments. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
10. Third-Party Links
Our platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review the privacy policies of any third-party services you access through our platform.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on our platform. Your continued use of our services after any changes take effect constitutes your acceptance of the updated policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact the OneOral LLC Privacy Team at privacy@oneoral.com. For membership, billing, delivery, or account questions, contact support@oneoral.com.