Boom Consulting LLC ("we", "our", or "us") built the SplintFab Scanner app for professional orthotics and prosthetics clinicians. This policy explains what information the app handles and how.
1. Data We Collect
The app does not create accounts and does not require a login. It does not collect or transmit any data over the internet on its own. If you choose to submit a work order for fabrication, the app sends the finished scan and the order details you enter — your name, email, phone, clinic shipping address, and any notes — to SplintFab's servers. That path is described in Sections 4 and 6 below. Nothing else is ever transmitted.
2. Camera and Depth Sensor
The app uses your iPhone's front TrueDepth camera and depth sensor solely to capture 3D scans. Camera images and depth data are processed entirely on your device in real time. No camera image, depth frame, or video stream is ever uploaded, shared with us, or accessible to any third party. If you submit a work order, only the finished 3D scan — not the raw camera or depth frames — is uploaded; see Section 4.
Camera permission is required for the app to function. If permission is denied the scanning feature will not be available.
3. Face Data (TrueDepth Camera)
The app uses Apple's TrueDepth camera API as a 3D measurement sensor. During a scan it captures depth maps (per-pixel distance measurements) and colour camera images of whatever is in front of the camera — normally a patient's foot, ankle, or hand. If the camera is pointed at a face, the same depth maps and images may incidentally include face data. This data is collected for one purpose only: to reconstruct a three-dimensional model (a coloured point cloud) of the scanned body part for orthotic and prosthetic fabrication. There are no other uses, planned or otherwise.
To assemble the 3D scan as you move the device around the body part, the app aligns each new depth frame to the model built so far purely by matching their three-dimensional shape (geometric registration of the depth measurements). It does NOT use Apple's ARFaceTrackingConfiguration, any face-tracking API, or any other facial-analysis technology, and it does not use any motion or position sensor. The app performs no facial recognition, no face identification, and no facial analysis of any kind; it does not create faceprints or biometric templates; it does not use face data for authentication, advertising, or identifying any person; and it cannot identify any person from a scan. Like all other camera and depth data, the depth frames used for this alignment are processed on the device in real time and never uploaded or shared.
Storage and retention: in normal use, live depth frames and camera images are processed in memory on the device in real time and immediately discarded — they are not written to disk. Only the resulting 3D model is stored, and only when you explicitly tap Save; it remains in the app's private sandbox on your device until you delete it.
One optional exception: the app's Diagnostics screen includes a "Record scan data" setting that is off by default. If a clinician turns it on, the raw depth and camera frames from each scan are saved to the app's private sandbox on the device. This setting exists only to help improve scanning accuracy. While it is on, those raw frames — which, if the camera is pointed at a face, may incidentally include face data — are written to the device and remain there until you delete them; like all other data, they are never uploaded, transmitted, or shared. Leave this setting off unless you specifically intend to capture raw data.
We never receive or retain the raw camera images or depth frames captured during a scan. The only scan-derived data we ever receive is the finished 3D model, and only if you explicitly submit it to us as part of a work order — see Section 4.
Disclosure and sharing: face data — and all other camera and depth data — is never shared with us or with any third party, and is never uploaded to any server. The finished 3D scan leaves your device only if you explicitly export it using the Share function, or submit it to SplintFab as part of a work order (Section 4). The app contains no third-party SDKs that can access camera or depth data.
4. Scan Data Storage
All 3D scans captured with the app are stored locally in the app's private sandbox on your device.
Scans are shared or transmitted only when you take an explicit action: sharing a saved scan yourself using the app's Share function (for example, via AirDrop or email), or submitting a work order to SplintFab for fabrication.
If you submit a work order, the app uploads the scan, as a 3D model file, together with the order details you enter — practitioner name, email, phone, clinic shipping address, and any notes — to SplintFab-owned servers hosted on Amazon Web Services (region us-east-1). The upload is encrypted in transit and at rest. We retain that data for 180 days, after which it is automatically deleted; only the fabricator assigned to the order can access it, through a link that expires after one hour. A work order identifies a scan by a clinic-assigned scan number, not by patient identity — we do not ask for or knowingly receive patient names.
When you share a scan yourself using the Share function, that transfer is entirely under your control; we have no involvement in or access to it.
Deleting a scan in the app permanently removes the file from your device. We do not retain copies of scans that were never submitted as a work order.
5. Analytics and Tracking
The app contains no analytics, telemetry, crash-reporting services, or advertising SDKs. No usage data of any kind is collected or transmitted.
6. Patient Data
When you scan a patient's foot or other body part, that scan constitutes sensitive health-related data. This data never leaves your device without your explicit action — sharing it yourself, or submitting it to SplintFab as part of a work order for fabrication (see Section 4). Responsibility for appropriate handling, retention, and sharing of patient data in accordance with applicable healthcare privacy regulations (such as HIPAA in the United States) rests with the clinician and their organisation. If you submit patient data to SplintFab as part of a work order, you are representing that you have the right and any necessary authorization to do so.
7. Children's Privacy
This app is intended for professional clinical use by adults. It is not directed at children under 13 and we do not knowingly collect any information from children.
8. Changes to This Policy
If we update this privacy policy we will revise the "Last updated" date above. The current version is always available at this URL and within the app under About → Privacy Policy.
9. Contact
For privacy questions or concerns please contact:
Boom Consulting LLC
SplintFab Scanner
sam@splintfab.com