Perla.ai is provided by R & R Newtech Dental Corp., a corporation registered in the Philippines (“Perla,” “we,” “us”). Perla is an AI receptionist and clinic-management platform used by dental clinics and their staff. This policy explains what personal data we process, why, who it is shared with, and your rights under the Philippine Data Privacy Act of 2012 (RA 10173) and its implementing rules.
Each dental clinic that uses Perla is the Personal Information Controller of its patients’ and staff members’ data. Perla acts as the clinic’s Personal Information Processor, handling that data on the clinic’s instructions under a data-processing agreement. For the account you create to sign in to Perla, we are the controller of your login details.
To provide the service the clinic has contracted; to perform the bookings callers request; for the clinic’s legitimate interest in running its practice; and on the basis of consent for call recording and for the AI features described below. We do not sell personal data and we do not use it for advertising.
Calls and chats with a clinic’s Perla receptionist may be recorded and transcribed. Callers are notified before a call begins, and continuing the call indicates consent. If you do not consent, do not start the call — contact the clinic directly instead.
Some features share limited data with the AI providers below, under contractual confidentiality and only for the stated purpose. For the staff features (Ask Perla and Perla Scribe) nothing is shared until the signed-in staff member gives explicit permission inside the app, asked per person and per feature before first use. Declining keeps the feature off; everything else keeps working.
AI outputs are drafts. The treating clinician remains responsible for reviewing any AI-drafted content before it informs care; Perla’s AI features do not make clinical decisions and Perla is not a medical device. Permission for the staff AI features can be withdrawn at any time by emailing us; withdrawal stops future sharing but cannot recall processing already performed.
We use vetted providers to run Perla: Supabase (database, authentication and file storage), Vercel (web hosting), Semaphore (SMS reminders), PayMongo (clinic subscription payments, on the web only), Google (calendar sync a clinic connects deliberately) and Cloudflare (bot protection on public booking pages). Each processes data under contract and only as needed to provide the service. Data may be stored or processed outside the Philippines by these providers, subject to the safeguards in our agreements with them.
The Perla AI Dental CRM apps for iOS and Android are for staff of clinics that already use Perla; they require an existing clinic account and sell nothing. The apps request the microphone only when you tap Record in Perla Scribe (after giving AI permission), and the camera or photo library only when you choose to attach a photo to a patient record. The apps do not track you across other apps or websites.
Account data is kept while your account exists. Clinic records are retained for as long as the clinic maintains the patient relationship or as Philippine law requires licensed dental practices to keep clinical records; the clinic, as controller, sets those periods. Call recordings and transcripts are retained only as long as needed for the purposes above and then deleted, unless a longer period is required by law.
Staff and dentists can delete their own login from inside the app (Account → Delete my account). Clinic owners can schedule deletion of the whole clinic from Settings. You can also request deletion by email; see perla-ai.app/delete-account.html for the exact steps and what must be retained by law.
Under the Data Privacy Act you have the right to be informed, to access, to object, to rectify, to erasure or blocking, to data portability, to damages, and to lodge a complaint with the National Privacy Commission (privacy.gov.ph). To exercise these rights, contact the clinic (the controller) or email us and we will assist the clinic in responding.
We use access controls, encryption in transit, and tenant isolation so each clinic can see only its own data. No method is perfectly secure, but we protect your information with reasonable organizational and technical measures.
We will post any changes to this policy on this page and update the date above. Material changes that affect the mobile apps will also be noted in the app stores’ release notes.
R & R Newtech Dental Corp. — privacy questions and requests: jockosantoss@gmail.com. For concerns we cannot resolve, you may contact the National Privacy Commission.