Privacy Policy

Last Updated Date: September 27, 2026

Welcome, and thank you for your interest in the software applications that uLab Systems, Inc. (“uLab,” “we,” “us” or “our”) makes available for download to computer devices or other devices or through uLab’s websites or cloud platforms, including uDesign, uDesign.cloud, weDesign, and KAI, whether directly or through third parties (individually and collectively, the “Software”), the website located at www.ulabsystems.com and other online properties owned or controlled by or on behalf of uLab (each a “Website” and, collectively, the “Websites”) (the Software and any Websites are the “Service”). This Privacy Policy is incorporated into the End User License Agreement and Terms of Service available at www.ulabsystems.com (the “Terms”), and capitalized terms used, but not defined in this Privacy Policy, have the meanings given to them in the Terms.

This Privacy Policy describes what information we gather from you, how we use and disclose that information, and what we do to protect it. It also describes the rights you may have with respect to your information under applicable law.

uLab’s Role.

This Privacy Policy applies to two categories of information. (1) Account and Usage Information: information about our customers and their personnel, including Account Holders and Authorized Users, and about visitors to our Websites. uLab determines how this information is used and acts as a “controller” (or the equivalent term under applicable law) of it. (2) End-User Data: patient information that our customers submit to the Service in order to receive treatment planning, fabrication, and related services. For End-User Data, our customer (for example, the dental or orthodontic practice or treatment planning organization) is generally responsible for that data under applicable privacy laws, and uLab handles End-User Data as a “service provider” or “processor” under U.S. state privacy laws, in accordance with our agreements with that customer and applicable law.

HIPAA. In the United States, uLab receives End-User Data from health care providers for treatment purposes: to design and produce custom clear aligners, digital treatment plans, and related devices for the treatment of a specific patient. Medical device manufacturers that help produce unique custom devices for the treatment of a patient, such as prosthetics or uLab’s custom clear aligners and digital treatment plans, are not treated as “business associates” under HIPAA, and HIPAA permits covered health care providers to disclose protected health information to them for treatment purposes without a business associate agreement (see U.S. Department of Health and Human Services, HIPAA FAQ 490). Accordingly, uLab does not act as a business associate of its customers in providing these services and does not enter into business associate agreements. uLab nevertheless protects End-User Data as described in this Privacy Policy and in accordance with applicable law.

Patients who have questions about their End-User Data, or who wish to exercise rights with respect to it, should contact their treating dental professional. We will assist our customers in responding to such requests as required by applicable law and our agreements with them.

The Information uLab Collects

• User-Provided Personal Information. You may provide to uLab what is generally called “personally identifiable” information (such as your name, e-mail address, and telephone number, professional license or credential information, practice or business name and address, and billing information) when using the Service, such as when you register an Account, upload files, email or otherwise communicate with uLab.

Personally identifiable information does not include “aggregate” information that we collect about a group or category of products, services, or users that is not personally identifiable or from which individual identities are removed. We may use and disclose aggregate information, and other non-personally identifiable information, for various purposes, provided that we will not attempt to re-identify any individual from such information, and any de-identified information derived from End-User Data will be created and used only as permitted by applicable law and our agreements with our customers.

• “Automatically Collected” Information. When you use the Service, we may automatically record certain information by using different types of technology, including standard log files, “clear gifs” or “web beacons.” This “automatically collected” information may include Internet Protocol address, UDID, or other device address or ID, web browser and/or device type, the web pages or sites that you visit just before or just after the Service, the pages you view on the Service, and the dates and times that you visit the Service. We may also use cookies and similar technologies on our Websites. Where required by applicable law, we will ask for your consent before placing non-essential cookies.

We provide software products and services to assist health service providers to provide their service and develop orthodontic treatment plans. In order to provide these products and services, our customers may share personal information such as patient personal, sensitive and health information (End-User Data) with us. This may include information about an individual’s health, and their use, receipt or request for provision of health services, medical history and other information provided to us. End-User Data may include dental scans, images, and other clinical records. We process End-User Data as described under “uLab’s Role” above.

• Sensitive End-User Data. We only use End-User Data for the purpose of delivering our products and services to the customer that submitted it, including to support, secure, and maintain the Service, and as otherwise permitted by our agreements with that customer and applicable law. We do not sell End-User Data. We disclose End-User Data only: (a) to our service providers and subprocessors who need access to it to help us provide the Service and who are bound by written confidentiality and data protection obligations; (b) to dental laboratories, treatment planning organizations, or other parties at the direction of our customer; (c) with the authorization of our customer or, where required, the patient; or (d) as required by law. We do not use End-User Data for marketing purposes.

The Ways uLab Uses Information That It Collects

uLab uses the information that we collect to develop, operate, maintain, enhance, and provide all of the features and services found on the Service now and in the future, including the following:

• We may use the information that you provide or that we collect (other than End-User Data, which is used only as described above) to understand and analyze the usage trends and preferences of our users, to improve the way the Service works and looks, and to create new features and functionality.
• We may use “automatically collected” information and “cookies” information to: (a) monitor and analyze the effectiveness of the Service; and (b) monitor usage metrics.
• We may use your email address or other personally identifiable information to send (a) messages about the Service, and (b) promotional messages related to the Service. You may opt out of receiving promotional messages at any time through links provided in such messages or by contacting us. Where required by applicable law, we will send promotional messages only with your consent.

When uLab Discloses Information That It Collects

uLab is not in the business of selling your information. We do not sell personal information and do not share personal information for cross-context behavioral advertising. We do, however, disclose your personally identifiable information in a variety of circumstances in connection with developing, providing, and maintaining the Service and operating our business, including:

• uLab works with third party service providers (e.g., dental aligner suppliers, payment processors, and data storage providers) and, where directed by our customers, dental laboratories and treatment planning organizations, in the U.S. and other jurisdictions. To the extent it is necessary for these service providers to complete their work, these third parties may have access to or process your personally identifiable information and, where applicable, End-User Data. These disclosures are made under written agreements that require the recipients to protect the information in a manner consistent with this Privacy Policy and applicable law, and the recipients are limited to using the information for the purpose for which it was provided.
• Within Your Organization. If you use the Service as an Authorized User of an Account Holder, information associated with your use of the Service, including cases you create or modify, may be visible to the Account Holder, its administrators, and other Authorized Users of that Account.
• uLab may also disclose your information if required to do so by law or where uLab determines that such action is necessary to comply with applicable laws, to respond to a court order, judicial or other government subpoena or warrant, or to otherwise support or cooperate with judicial or law enforcement activity.
• We reserve the right to disclose your information that we believe, in good faith, is appropriate or necessary to take precautions against liability; to protect uLab and others from fraudulent, abusive, predatory, or unlawful uses or activity; to investigate and defend ourselves against any third party claims or allegations; to assist government enforcement agencies; to protect the security or integrity of the Service; or to protect or vindicate the rights, property, or personal safety of uLab, our users, or others.

In the Event of Merger or Sale

In the event that all or a portion of uLab or its assets are acquired by or merged with a third-party entity, we reserve the right, in any of these circumstances, to transfer or assign the information that we have collected from users, including personal information, in connection with such merger, acquisition, sale, or other change of control, subject to the recipient’s agreement to honor this Privacy Policy and our obligations under applicable law and our customer agreements with respect to such information.

Your Choices and Rights

You may, of course, decline to share certain personally identifiable information with uLab, in which case uLab may not be able to provide to you some of the features and functionality found on the Service. We may retain information you submit for a variety of purposes, as described under the heading “Data Retention”, below.

Depending on where you are located, you may have the right to request access to, correction of, deletion of, or a copy of your personal information; to object to or restrict certain processing; to withdraw your consent where processing is based on consent; and to lodge a complaint with a data protection authority. To exercise these rights, contact us at support@ulabsystems.com. We will respond within the time required by applicable law and may need to verify your identity before responding. We will not discriminate against you for exercising your rights. If your request relates to End-User Data, we will refer it to, and assist, the customer that submitted that data.

Data Retention

We will retain your data for as long as needed to provide you services and as otherwise described in this section. Retention periods for End-User Data are determined by our agreements with our customers and by applicable laws governing the retention of health and dental records. We may retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Where possible (and subject to the foregoing), we generally remove your data from active user databases promptly upon request, but a longer period may be required to delete other copies stored on our servers. Case files that are shared with other Accounts (for example, between a dental practice and a treatment planning organization) may remain available to those Accounts in accordance with their own retention obligations. Note that we may retain archival copies of all of your data stored in connection with routine information technology backups, which are protected and are deleted or overwritten in the ordinary course of our backup cycle.

Upon termination of a customer’s Account, the customer may request an export of case data associated with its Account within thirty (30) days, subject to applicable law and our agreements with that customer. After that period, we will delete or de-identify such data in accordance with our retention practices, except where retention is required by applicable law.

Data Security

We maintain administrative, technical, and physical safeguards designed to protect the information we process, including [encryption of data in transit and at rest, access controls, and activity logging]. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting personal information or End-User Data, we will notify affected customers, individuals, and authorities as required by applicable law and our agreements.

Third Party Services

The Service may contain links to websites and services provided by third parties, including dental aligner suppliers. Any personally identifiable information you provide on third party sites or services is provided directly to that third party and is subject to that third party’s policies, if any, governing privacy and security. We are not responsible for the content or privacy and security practices and policies of third-party sites or services to which links are displayed on the Service. We encourage you to learn about third parties’ privacy and security policies before providing them with personally identifiable information.

International Data Transfers.

The technology systems underlying the Service are located within the United States. Information submitted to the Service, including End-User Data, is stored on servers located in the United States. If you access or use the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, which may have data protection laws that differ from those in the country in which the information was collected. uLab personnel and service providers located outside the United States may access such information where necessary to provide support, treatment planning, or fabrication services, as described in our list of subprocessors. Where required by applicable law, we implement appropriate safeguards for such transfers.

U.S. State Privacy Rights

Residents of certain U.S. states, including California, may have additional rights regarding their personal information, including the right to know, delete, and correct personal information and to opt out of the sale or sharing of personal information. uLab does not sell or share personal information as those terms are defined under applicable state law. You may exercise your rights as described under “Your Choices and Rights,” and you may designate an authorized agent to submit a request on your behalf, subject to verification.

Children’s Information

The Service is intended for use by dental and orthodontic professionals and their personnel and is not directed to children. We do not knowingly collect personal information directly from children. End-User Data relating to minor patients is submitted by our customers and processed as described above.

Changes and Updates to this Privacy Policy

Please revisit this page periodically to stay aware of any changes to this Privacy Policy, which may be revised from time to time at uLab’s sole discretion. If we modify the Privacy Policy, we will make it available through the Service, and indicate the date of the latest revision. In the event that the modifications materially alter either of our rights or obligations hereunder we will make reasonable efforts to notify you of the change. For example, we may send a message to your email address, if we have one on file, or generate a pop-up or similar notification on the Service after such material changes are made. Our amended Privacy Policy will automatically take effect 30 days after it is made available through the Service, except that (i) we will not, without your consent, use your previously collected personally identifiable information in a manner inconsistent with the Privacy Policy in effect when we received that information, and (ii) if you do not agree with any changes to the Privacy Policy, you may cease your use of the Service. Your continued use of the Service after the revised Privacy Policy has become effective indicates that you have been informed of the current version of the Privacy Policy.

uLab Contact Information

Please contact uLab with any questions or comments about this Privacy Policy, your personally identifiable information, our use and disclosure practices, your consent choices, or to exercise your rights, by email at support@ulabsystems.com, or by mail at

uLab Systems, Inc., 7005 Appling Farms Pkwy, Suite 103, Memphis, TN 38133, USA, Attn: Privacy.

MAR-0002131 Rev 1