Privacy Policy

Effective date: November 4, 2026

1. The short version

• Every answer is a total, like 43 crowns or $118,558 net production.
• Patient names, patient numbers, chart numbers, and dates of birth never leave your practice.
• Ask My Practice stores aggregate data for benchmarking. You can stop sharing at any time.

The rest of this policy gives the detail. It applies to askmypractice.com and to the Ask My Practice connector. KouryWeb LLC, doing business as Ask My Practice, runs both. In this policy, "we" means KouryWeb LLC.

2. What we collect

• Account email. We use it to sign you in and to contact you about your account.
• Email alerts. If you asked us for an email alert, we store your email address until we send it.
• Passkeys. We store the public part of each passkey. We never see your private passkey or any biometric data.
• Practice details from Open Dental. We read the practice name, the clinics, and the addresses. We ask the Owner to confirm or change them.
• Aggregate totals. These are the totals that make each answer, like a count of crowns or a dollar amount of production.
• The query log. We store the dataset each request used, its filters, and the exact statement we ran. We also store how well the dataset fit the question, picked from a fixed list. We never receive or store the words of your question.
• Billing details. Stripe handles billing. We store your Stripe customer ID, your plan, and the card brand and last 4 digits. We do not store card numbers.
• Technical records. These include the time of each request and error records, so we can run and fix the service. They never hold a patient value.
• Website visits. On our public pages and our sign-in page, Google Analytics counts visits and new accounts. It uses cookies and records the pages viewed, the browser and device, the general location, and the site that sent the visitor. It never receives what you type on these pages, and it does not run on signed-in pages. You can block cookies in your browser settings.

3. What we never collect

We never collect or store any of these.

• Patient names
• Patient numbers and chart numbers
• Dates of birth
• Patient rows of any kind

4. How answers are made

• You ask a question in your AI app.
• Your AI app turns the question into a request for totals. We turn that request into one aggregate query, a statement that counts and adds up.
• The query runs on your practice's own Open Dental database through the Open Dental API.
• Only totals and group labels come back to us. A group label is a name like a location, a month, a provider, or a procedure code.
• We pass the totals to your AI app, which writes the reply.

Our query builder only makes aggregate queries. We log every statement we send.

Your AI app is chosen by you. It has its own terms and privacy policy. We do not control how it handles what you type or what it receives.

5. Data stored for benchmarking, and admin reads

Every practice shares by default. For each sharing location, we store aggregate data for benchmarking. This data holds totals only, never patient rows. We keep monthly totals for up to 24 months.

A benchmark shows only when its group has 5 or more sharing practices. It never names another practice.

An Owner can stop sharing at any time by asking in the chat. After that, the practice gets no benchmarks.

Our fixed statement about who reads data is this.

Ask My Practice stores aggregate data for benchmarking, may read aggregate data to support and improve the service, and never reads or stores patient data.

6. How we use your Open Dental key

Open Dental requires Read All and Queries permissions on the key. With Queries, a statement can read the full database.

We use the key for three things only.

• Running a fixed statement for each question.
• Reading your office settings.
• Reading your clinic list.

We never see patient data. Open Dental reads patient rows to count and add up each total. We receive only the totals. No patient name, number, or record ever reaches us.

We never call Open Dental's patient record endpoints. An answer of more than 500 rows is refused. We log the exact statement for every question.

7. Where data is hosted

We host Ask My Practice on Laravel Cloud, in the United States.

8. Who else handles data

These companies help us run the service.

• Laravel Cloud. Hosts the service and its database.
• Stripe. Takes payments and holds card details.
• Amazon SES. Sends email, once we turn email on.
• Nightwatch. Monitors errors and speed. Its records never hold patient values.
• Google Analytics. Counts visits to our public pages and sign-in page. It never receives practice data.

None of them receives PHI from us. See the full list of subcontractors.

We do not sell your data. We do not use it for advertising.

9. How long we keep data

We keep account data while your account is open. We keep the query log and stored totals to run, support, and secure the service.

An Owner can close the account in Settings, under Close account. The plan is cancelled, and the account keeps working until the end of the period already paid for. Then every connection is turned off. We delete the account and its data 30 days after it closes, except records the law requires us to keep, like billing records. Backups that include the data expire within 7 days after we delete it. An Owner can reopen the account before then.

When a practice is deleted, we also remove its customer key from our records. Remove the key from Open Dental too.

10. Security

• We store each customer key in encrypted form.
• Our hosting account uses 2-factor sign-in and has few members.
• Our queries return totals only, so patient rows do not reach our servers.
• We watch our logs and error records so they never hold a patient value.

No service is perfectly secure. If a customer key is stolen, we will tell the practice quickly so it can remove the key in Open Dental.

11. Changes to this policy

We may update this policy. We will post the new version here and change the effective date. For a material change, we will tell you by email or in the chat.

12. Contact

KouryWeb LLC, doing business as Ask My Practice
[email protected]