Privacy policy
Last updated 26 October 2026.
MDS Clinical Case Album (“the app”) and this website are run by Sajan Thesis Works, 3/245/B Nedungottil House, Moongode, Trivandrum 695573, Kerala, India (“we”, “us”). This policy explains what personal data we collect, why, and the choices you have. It is written to meet India's Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.
Your photos and albums are not collected
The app runs on your own computer. Your photos, albums, project files and exported PDFs stay there. We never receive, upload, view or store them. Clinical photographs may contain patient information; keeping them safe on your computer, and having the patient's consent to use them, is your responsibility.
What we collect
- Account: your email address, when you sign in on the website to buy or manage a licence.
- Orders and payments: order number, amount, date, status and the payment reference from Razorpay. Your card, UPI or bank details are entered on Razorpay's secure page and are not seen or stored by us.
- Licence: your licence key, its validity, when it was activated and last checked, and a code made from your computer's ID. This code is a one-way hash: it cannot be turned back into the ID and identifies only that the same computer is in use. The app sends your key and this code when you activate it and when it checks the licence, about every two weeks. It sends nothing else.
- Messages: your name, email, phone number if you give it, the topic and your message, when you use the contact form, and a one-way hash of your internet address to limit spam.
- Website: our hosting provider keeps standard server logs (such as internet address, browser and time of visit) for security. We do not use advertising or tracking cookies. Signing in stores a session token in your browser so you stay signed in.
Why we use it
- To issue, deliver, check and renew your licence, and to stop one key being used on many computers.
- To process payments and keep the accounting records the law requires.
- To answer your messages and give support.
- To send you messages about your licence, such as your key, receipts and renewal reminders.
We do not sell or rent your personal data, and we do not use it for advertising.
Who processes it for us
- Supabase: database and sign-in (account, licence, order and message records).
- Razorpay: payments.
- Google Firebase: website hosting.
- Supabase and Amazon Web Services: sending emails.
These providers may store data on servers outside India. They handle it only to provide their service to us, under their own security and privacy terms.
How long we keep it
- Account and licence records: while your licence is valid and for up to 3 years after it ends, so you can renew with the same key.
- Order and payment records: for as long as tax and accounting law requires (generally 8 years).
- Contact messages: up to 2 years.
Your rights
You can ask to see the personal data we hold about you, correct it, or have it deleted (except records we must keep by law). You can withdraw consent to optional messages at any time. Contact us through the contact page or on WhatsApp at +91 85474 11710 or email info@mdsphotoalbum.com; we reply within 30 days.
Security
Data is sent over encrypted connections. Each student can only read their own records; changes are made only by our server. No system is perfectly secure, but we take reasonable care to protect your data.
Children
The app is meant for postgraduate dental students and professionals. It is not intended for anyone under 18.
Grievances
For any complaint about your personal data, contact Sajan Thesis Works through the contact page or WhatsApp +91 85474 11710, email info@mdsphotoalbum.com. We acknowledge complaints within 7 days.
Changes
If we change this policy, the new version is posted here with a new date. Important changes are also shown on the website.