Operator: FOP Kiliushyk Yurii Oleksandrovych (ФОП Кілюшик Юрій Олександрович), Ukraine. Data requests: privacy@brama.dental.
STL, PLY and OBJ files are read and processed in your browser tab. We do not store the file name anywhere. In Prep depth and CT + scan, closing the tab destroys the case unless you have shared it. In Bite, when you are signed in, the case is kept — see “Cases we keep”.
While a measured case is open, its scans and result are kept in this browser’s own storage, so that “← Alignment” can take you back to the alignment. They never leave the browser, are deleted when you start another case or start over, and are not read after an hour.
When you are signed in and Bite finishes — the bite found or not — we keep that case, so that you and we can come back to it: to recompute it when the method improves, to compare with a later visit, and to improve how BRAMA measures. What is kept: both scans, rewritten as bare STL — the scanner’s file header, which can carry a name, is replaced; the position found and the numbers shown; the checks behind them; which version of the method produced them; and the keyed hash of your Telegram account. No name, date, scanner or file names. The scans are stored in Bunny storage (BunnyWay d.o.o., Slovenia; data centre in Frankfurt), the rest in a database at Supabase (Supabase Inc., USA; data centre in Ireland). A case is kept until you ask us to delete it: write to privacy@brama.dental and we delete the case, its scans and its numbers within 7 days. Demos and cases opened from someone else’s link are not kept. Without sign-in nothing is kept.
When you click “Share link”, the measured case — geometry and numbers, without the file name — is uploaded to Bunny storage (BunnyWay d.o.o., Slovenia; data centre in Frankfurt). The link is random: anyone who has it can open the case without signing in. The case deletes itself after 30 days; you can delete it sooner. Alongside it we store the date and a keyed hash of your Telegram account, so that only you can delete it. Nothing is sent until you click. A CT markup link works the same way: it carries only the 3D markup — the surfaces of the teeth, jaws and canal — with no CT slices, no name, no date and no scanner.
In “View CT” the CT stays in your tab unless you press “Share link” there and confirm. Then the whole CT volume (or, if it is too big for a link, the part around the teeth) is uploaded to the same storage, coarsened to 0.4 mm, as a bare grid of densities: not DICOM, so without the name, date, scanner or series description. What you placed on screen — the cursor, zoom and ruler — travels in the link itself, after the #, and never reaches our servers. The same 30 days and the same deletion apply.
Your browser reads the CT folder in your tab. When you choose a folder in “CT segmentation”, the CT volume — the density grid of the scan's entire field of view, without the name, date, scanner or file names — is sent for computation to Modal (Modal Labs, USA; computation runs in an EU region). The volume also contains the soft tissues of the face if they are within the field of view. If the volume is too large, only a crop down to the jaws and joints is sent. Sending starts when you press “Segment”; a line on the screen states how many megabytes are going and where. What comes back is the markup: numbered teeth, the jaws and the canal. We store neither the volume nor the markup, and keep no record of the request.
In “CT + scan”, the jaw scans you add are sent to the same computation (Modal Labs, USA; computation runs in an EU region) together with a crop of the CT around the dental arch, so that the scans can be placed on the CT. What comes back is the position — sixteen numbers — and the checks behind it. Neither the scans, nor the crop, nor the position is stored, by them or by us. Alongside the keyed hash of your Telegram account we record only the time of the request, for a limit of 20 registrations per day; that record is deleted after one day. Nothing is sent until you press “Place scans”: the folder is read and cropped in your tab first.
In “Bite”, when the bite isn’t found on your computer near the position in the files, both jaw scans are sent to the same computation (Modal Labs, USA; computation runs in an EU region) to search wider, as bare STL — no name, date or file names. This happens on its own, without a button, and only when you are signed in. What comes back is the position — sixteen numbers — and the contact behind it. The scans are not stored, by them or by us.
When a scan doesn’t place, you can press “Send to BRAMA” and confirm, so that we can find out why. Only then is that case uploaded to the same Bunny storage: the scan, rewritten as a bare STL without its file header; the CT volume exactly as it goes for segmentation and the markup that came back, and the crop around the teeth — bare grids of densities, not DICOM; the CT’s teeth for that jaw; the numbers of the placement; and the keyed hash of your Telegram account. No name, date, scanner or file names. Only the BRAMA team opens it, and it is deleted after 30 days.
Sign-in is through Telegram. Telegram signs who pressed the button, and we store only the account number, in a signed session cookie, for 30 days. We do not store your name or phone number.
Messages you write to the bot, other than the sign-in command, are forwarded to the BRAMA team in Telegram so that someone can answer them. They are not stored on our servers.
We count whether clinicians reach a result: page views and events (how many triangles are in the file, how long the calculation took, an error code). Events contain no geometry, no file names and no people's names. To count returning cases, events carry an anonymous identifier: 16 characters of the keyed hash of the Telegram account. Without our server's key, it cannot be traced to a person. Analytics are collected by Vercel Web Analytics. Link identifiers do not enter the analytics, and link opens are not counted.
brama_session — sign-in, 30 days. brama_aid — anonymous identifier for analytics, 30 days. Without sign-in (the demos), the browser keeps a random 16-character number in its local storage instead, so that the demo analytics can tell one visitor from many; it names no one.
BRAMA is a set of measurement tools. The clinician decides.
Version of 29 September 2026.