Privacy Policy

OrthoFrame

Effective Date: 24 June 2026

Perfect Paradox Ltd ("we", "us", "our") Registered in Northern Ireland, United Kingdom — Company Number NI739317 Registered Address: 36 Manse Gate, Newtownards, BT23 4DG, Northern Ireland ICO Registration: C1898593

The Short Version

OrthoFrame runs entirely on your Mac. Your patient photos, your library, and everything you do inside the app never leave your computer. The AI that classifies photos runs on-device. We have no servers that receive your data or your patients' data, no analytics SDK, no telemetry, no tracking.

Because your patients' photos never leave your Mac and we never receive them, you (the dentist or clinic) are the data controller for your patients' data — not us. OrthoFrame is a local tool that helps you keep that data safe.

The only personal data we (or our payment partner, Paddle) handle is what is needed to sell you a one-time licence and answer your support emails. That's the whole story — the rest of this document spells it out.

1. Introduction

This Privacy Policy explains how we handle personal data in connection with OrthoFrame (the "App"), our website https://perfectparadox.co.uk, and one-time licence sales.

OrthoFrame is a native macOS application (macOS 14 and later) for organising clinical orthodontic photography — sorting patient photos into ABO record sheets. It is not a medical device. It performs no diagnosis, no measurement, and makes no clinical decision.

This policy is issued in compliance with:

The UK General Data Protection Regulation (UK GDPR)
The Data Protection Act 2018
The Privacy and Electronic Communications Regulations 2003 (PECR)
The EU General Data Protection Regulation (EU GDPR), where applicable to EU-based users

For the limited personal data described in Section 4, Perfect Paradox Ltd is the data controller. For your purchase transaction, Paddle acts as the Merchant of Record and is an independent data controller for the payment data it collects (see Section 5).

For the patient photos and clinical data you process inside the App, see Section 3 — in short, you are the controller and we are neither a controller nor a cloud processor, because that data never leaves your device and we never receive it.

2. Data We Do NOT Collect

This is one of the most important sections of this policy. The App does not collect, access, transmit, store, or process on any server of ours:

Your patient photos or your photo library — every image you import, sort, classify, annotate, or export stays on your Mac. The on-device AI classifier never uploads photos anywhere.
Patient identities or clinical records — patient names, record sheets, and case data live only in your local library.
Your content or activity — what you do in the App is not logged, measured, or reported to anyone.
Usage analytics or telemetry — the App contains no analytics SDK, no tracking pixels, no crash-reporting service that sends data automatically, and no phone-home functionality beyond what is disclosed in Section 6.
Personal identifiers from your Mac — no advertising IDs, no fingerprinting, no contact lists, no location.

This is verifiable: you can monitor the App's network activity with any firewall tool (e.g., Little Snitch or LuLu) and confirm that the only connection it makes is the one listed in Section 6.

3. Patient Data and the Controller / Processor Split

This is the section that matters most for a clinical tool. Please read it carefully.

The photos OrthoFrame helps you organise are your patients' personal data, and clinical facial and intraoral photography is sensitive, health-adjacent information that attracts a high duty of care under the UK GDPR and the Data Protection Act 2018 (and the EU GDPR where it applies).

You are the data controller. Because patient photos never leave your Mac and we never receive, see, or store them, the dentist or clinic using OrthoFrame is the data controller for their patients' data. You are responsible for your own obligations to your patients — including establishing a lawful basis and appropriate consent for taking and keeping clinical photographs, your retention schedule, patient rights requests, and the physical and digital security of the Mac on which the library is stored.
We are not a cloud processor. OrthoFrame is a local tool that runs on your machine. There is no transmission of patient data to us, so we do not act as a processor handling your patients' data on a server on your behalf. We cannot access, retrieve, or delete your patient library — only you can.
No data-processing agreement with us is required. Because we never receive or process your patients' data, no Article 28 UK GDPR data-processing agreement between you and us is required for the patient data handled inside OrthoFrame; you remain the sole controller.

OrthoFrame includes features designed to help you meet your obligations as controller:

EXIF / GPS metadata stripping on import — when you import photos, embedded metadata (including camera GPS location, device identifiers, and timestamps) is removed, so that information is not carried into your library.
Optional eye-bar anonymisation — on export, print, or share you may apply an eye-bar to de-identify faces. This is applied to the exported/printed/shared copy only; the originals stored in your library retain the full, un-redacted face so your clinical record remains complete.
Optional encrypted backup (Pro) — the Pro tier can produce an AES-256-GCM encrypted backup of your library so that off-device copies are protected at rest.

We strongly recommend you also enable FileVault on your Mac and keep regular, secure backups, as the security of your patients' data ultimately depends on the security of the machine it lives on.

4. Data We Collect Directly

Category	Data	Purpose	Lawful Basis
Licence Data	Email address, licence key, activation status	Licence delivery, activation, recovery of lost keys	Contract performance (Art. 6(1)(b) UK GDPR)
Support Data	Email address, the content of your support messages	Answering your questions, fixing bugs you report	Legitimate interest (Art. 6(1)(f) UK GDPR)
Website Data	IP address, browser type, pages visited on https://perfectparadox.co.uk	Website operation and security	Legitimate interest (Art. 6(1)(f) UK GDPR)

We do not use your data for advertising, profiling, training AI models, or anything beyond delivering and supporting the App. We do not sell, rent, or trade personal data. We never have and never will.

5. Payments: Paddle as Merchant of Record

OrthoFrame is sold as a one-time purchase, not a subscription: the Normal tier is $99 (one-time) and the Pro tier is $179 (one-time). Each purchase is a perpetual licence — pay once, and it is yours forever, with one year of updates included. A 14-day free trial unlocks every feature with no card required; after the trial the App drops to the Normal tier unless a licence key is entered. You can upgrade from Normal to Pro at any time for a one-time $80 (you pay only the difference).

We sell OrthoFrame through Paddle (Paddle.com Market Ltd, UK / Paddle Payments Ltd for certain regions). Paddle is the Merchant of Record: when you buy a licence, your purchase contract for the transaction is with Paddle, which resells the App on our behalf and handles payment processing, VAT/sales tax, invoicing, and refunds.

What this means for your data:

Paddle collects your name, email address, billing address/country, and payment details (card number, etc.) directly at checkout. We never see or store your payment card details.
Paddle shares with us your email address, country, and order details so we can deliver your licence key and provide support.
Paddle is an independent data controller for the data it collects. Its handling of your data is governed by Paddle's privacy policy: https://www.paddle.com/legal/privacy

Third Party	Data Shared	Purpose	Safeguards
Paddle (UK)	Checkout and payment data (collected by Paddle directly)	Merchant of Record: payment, tax, invoicing, refunds	Paddle privacy policy; processing in UK/EEA/USA under SCCs, UK IDTA, and/or adequacy decisions as applicable
Email provider	Email address, communications	Licence delivery and support email	Standard Contractual Clauses where applicable

We may also disclose personal data if required by law, regulation, or court order, or where necessary to prevent fraud or protect the safety of users or the public.

6. Network Connections the App Makes

Your licence is validated entirely on your Mac. The App verifies your licence key offline using a cryptographic signature (Ed25519, with the public key embedded in the App) — it does not contact us, Paddle, or any server to activate or check your licence, and it transmits nothing when you enter your key. Your licence is perpetual and never expires; entering a valid key permanently unlocks your tier on the Macs you own or control.

In normal use, OrthoFrame makes no network connections at all. The only connection it can ever make is optional and user-initiated:

Manual update check (optional): automatic update checks are switched off by default. If — and only if — you choose to check for updates from within the App, it contacts our update server to see whether a newer version exists. This transmits the App version, your macOS version, and basic CPU type — no personal data, no licence key, no patient data, and no identifier used for tracking.

No other connections are made, ever. Your patient photos and library never require a network connection and are never transmitted anywhere. You can confirm all of this with a firewall tool such as Little Snitch or LuLu.

7. Your Licence Is Perpetual

Your licence is delivered as an offline licence key bound to the product. It is a one-time purchase, not a subscription: it does not expire, does not renew, and there is no recurring or automatic charge — you pay once and the App is yours forever. Your purchase includes one year of updates; after that year the App continues to work indefinitely and simply stops receiving new versions. That is not an expiry of your licence — your paid tier stays unlocked permanently.

Whatever happens, your data stays yours:

The App keeps working — your licensed features never switch off.
Your patient photos and library are never locked, hidden, or deleted.
You keep full access to all your existing data and can always export it.

We will never hold your patients' data hostage to a payment.

8. International Transfers

We are based in Northern Ireland (UK). Paddle is a UK company; depending on your location and payment method, payment data may be processed in the UK, EEA, or USA under Paddle's safeguards (Standard Contractual Clauses, UK IDTA, and/or adequacy decisions). Our own data (licence and support emails) is processed in the UK and EEA. Your patient data is not transferred anywhere — it never leaves your Mac.

9. Data Retention

Data Category	Retention Period	Basis
Licence Data	For as long as we operate, so you can recover or re-download your perpetual licence key	Contract performance
Order records (via Paddle)	6 years	UK tax and commercial law
Support Data	2 years from last communication	Legitimate interest
Website Data	12 months	Legitimate interest
Patient photos and library	Controlled entirely by you, on your Mac — we hold nothing and set no retention period	You are the controller (Section 3)

You may request deletion of your licence data at any time — but note that doing so means we can no longer recover your licence key for you. Retention of your patient data is your decision as controller; we have no copy to retain or delete.

10. Your Rights

Under the UK GDPR and the Data Protection Act 2018 (and the EU GDPR where applicable), you have the right to:

Access the personal data we hold about you;
Rectify inaccurate or incomplete data;
Erase your data, subject to legal retention requirements;
Restrict or object to processing based on legitimate interest;
Data portability — receive your data in a machine-readable format;
Complain to the Information Commissioner's Office (ICO) or, if you are in the EEA, your local supervisory authority.

These rights apply to the limited data we hold (Section 4). Requests from your patients about their data are directed to you as their controller — we hold no patient data and cannot action such requests on your behalf.

To exercise any of these rights, email info@perfectparadox.co.uk or privacy@perfectparadox.co.uk. We will respond within one calendar month.

For payment data held by Paddle, you can also contact Paddle directly at privacy@paddle.com.

11. Data Security

For the small amount of personal data we hold: data in transit is encrypted (TLS 1.2+), stored data is encrypted at rest, and access is limited to authorised personnel. For everything inside the App — including all patient photos and your library — security is inherited from your own Mac, because that data never goes anywhere else. We recommend you enable FileVault, keep regular secure backups, and use OrthoFrame's optional AES-256-GCM encrypted backup (Pro) for any off-device copies of your library.

12. Children

OrthoFrame is a professional clinical tool sold to dental and orthodontic practitioners. We do not knowingly collect personal data directly from children. Note that patient photographs you process with the App may include minors; you are responsible, as controller, for the appropriate consent and safeguards for those records. Purchases require agreement to Paddle's checkout terms, which require legal capacity to contract.

13. Cookies

The App itself sets no cookies and embeds no web trackers. Our website https://perfectparadox.co.uk uses only strictly necessary cookies — we set no analytics, advertising, or cross-site tracking cookies of any kind. Because no non-essential cookies are set, there is no cookie consent banner; the security logging described in Section 4 relies on legitimate interest. (Paddle's checkout sets cookies necessary to process your purchase — see Paddle's privacy policy.)

Given that Perfect Paradox Ltd is established in the UK and offers goods to the EU only on a minimal, non-targeted basis, we do not consider an EU GDPR Article 27 representative to be required, and none is currently appointed. EU users may contact us at the addresses in Section 17 and may complain to their local supervisory authority.

14. Refunds

OrthoFrame is backed by a 14-day money-back guarantee, no questions asked, handled by Paddle — simply reply to your receipt. Because a fully-unlocked 14-day free trial is available before you pay, you can evaluate every feature first.

15. Licensing

OrthoFrame is licensed, not sold. Use of the App is governed by its proprietary End User Licence Agreement. One perpetual licence is for one user and may be used on the Macs you own or control. Reverse engineering and redistribution are prohibited. The App is provided "as is"; our liability is limited to the amount you paid. OrthoFrame is not a medical device — clinical responsibility for your patients and their records remains with you, the practitioner.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced on https://perfectparadox.co.uk (and by email to licence holders where the change affects them) at least thirty (30) days before taking effect.

17. Contact and Supervisory Authority

Perfect Paradox Ltd (Company Number NI739317 · ICO Ref: C1898593) 36 Manse Gate, Newtownards, BT23 4DG, Northern Ireland Privacy: privacy@perfectparadox.co.uk Support: info@perfectparadox.co.uk Website: https://perfectparadox.co.uk

If you are not satisfied with our response to a privacy concern:

Information Commissioner's Office (ICO) Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Tel: 0303 123 1113 · https://ico.org.uk