JawAtlasFeature
Private by construction
The strongest privacy promise is one the code cannot break. JawAtlas has no networking code, so there is nothing to trust and nothing to audit except the absence.
No networking code
Most apps promise not to upload your data. JawAtlas cannot: the source contains no URL sessions, sockets or network frameworks, and an audit script greps for those symbols on every build and fails if any appear. There are no accounts, no analytics, no crash reporters and no third-party code of any kind.
Identifiers never stored
DICOM files carry patient identity alongside the pixels. The JawAtlas importer reads a whitelist of technical tags: image geometry, spacing, orientation, rescale values, transfer syntax and pixel data. Everything else, including patient name, ID, birth date, referring physician and institution, is never written to the app's storage. Tests verify that no identifying string survives into the stored case. Which tags carry identity.
On-device protection
Stored cases sit under iOS data protection, and an optional Face ID or Touch ID lock in Settings guards the app itself. The camera is used live for AR only and nothing from it is saved.
Sharing is always your action
Cases, images and PDFs leave the device only through the iOS share sheet, to a destination you choose. There is no sync, no cloud and no background transfer.
Why this matters for education
Teaching material should be built on openly licensed, anonymised scans, and students should never carry a clinic's patient data on a personal phone. The design above keeps the risk low even when someone makes a mistake. Read the privacy policy for the formal version, and free CBCT datasets for data you can use without worry.
Questions students ask
Does JawAtlas send scans to a server?
No. The app contains no networking code; an audit script checks the source for networking symbols on every build. Scans leave the device only when you explicitly share them.
What happens to the patient name in a DICOM file?
It is never read into storage. The importer reads a whitelist of technical tags only (geometry, spacing, pixel data and the like). Names, IDs, birth dates and contact details are not among them.
Can I lock the app?
Yes. Settings has an optional Face ID or Touch ID lock. The app never sees biometric data; iOS only reports whether unlocking succeeded.
Does the website track me?
No cookies, no analytics, no ads. Cloudflare serves the pages and sees ordinary request data such as IP addresses to do so.
JawAtlas is an education and training aid. It is not a medical device and must not be used for diagnosis, treatment planning or any clinical decision.
Last reviewed 2026-10-13