Privacy Policy for INJEKT
Last Updated: July 4, 2026
INJEKT is a professional software service operated by White Bulbul Solutions ("INJEKT," "we," "us," or "our"). INJEKT helps licensed estheticians and aesthetic practitioners document consultations, manage patient records, store treatment photographs, compare before-and-after images, perform facial proportion reference analysis, and use arithmetic reference tools for treatment documentation.
This Privacy Policy explains what information we collect, how we use it, where it is stored, how long it is retained, and how users may request deletion.
1. Important Roles and Patient Consent
INJEKT operates as a service provider and data processor for professional practitioners. Practitioners remain responsible for the patient information they enter into INJEKT and for obtaining valid patient consent before collecting, uploading, storing, or analyzing patient information or patient photographs.
Practitioners must use INJEKT only in compliance with applicable professional, medical, privacy, and patient-consent laws in their jurisdiction.
2. Information We Collect
INJEKT may collect and process the following categories of information:
Account and Practitioner Information
We collect information needed to create and manage practitioner accounts, including name, email address, phone number, authentication identifiers, subscription status, and support communications.
Patient Data Entered by Practitioners
Practitioners may enter patient information into INJEKT, including patient name, date of birth, gender, contact details, notes, consultation history, treatment documentation, injection location records, volume/unit records.
Clinical Photographs and Face Data
Practitioners may capture or upload patient clinical photographs, including front, profile, and oblique facial photographs. These photographs may contain face data. INJEKT may also process facial landmark points generated from those photographs when the practitioner uses facial analysis features.
Payment and Subscription Information
If subscriptions or payments are used, payment processing may be handled by an app store or payment provider. INJEKT does not store full payment card numbers. We may receive payment status, subscription status, transaction identifiers, and billing-related metadata needed to manage the service.
3. Face Data and Facial Analysis
INJEKT collects and processes face data only when a practitioner captures, uploads, stores, or analyzes patient clinical photographs as part of treatment documentation.
For purposes of this Privacy Policy, "face data" means patient facial photographs, facial landmark points, and derived facial proportion measurements generated from those photographs.
INJEKT uses face data only to:
- display patient clinical photographs inside the practitioner's private account;
- support before-and-after treatment documentation and comparison;
- generate facial proportion measurements and visual reference analysis for practitioner documentation;
- maintain consultation history selected by the practitioner; and
- provide technical support when the practitioner explicitly requests support involving that content.
INJEKT does not use face data for identity verification, facial recognition, biometric identification, emotion recognition, advertising, marketing, user profiling, or training third-party artificial intelligence models.
Clinical photographs selected by the practitioner for saving are stored in INJEKT's secure cloud storage environment. Related patient records and image references may be stored in INJEKT's database if saved by the practitioner as part of a patient record or consultation. Facial landmark points and measurements that are generated only for temporary display and not saved.
Face data is not sold, rented, traded, or shared with advertisers, data brokers, or unauthorized third parties. Face data may be processed by infrastructure providers used to operate INJEKT, such as hosting, database, object storage, authentication, monitoring, and diagnostics providers. These providers are permitted to process information only as necessary to provide infrastructure and support services to INJEKT.
Face data is retained until the practitioner deletes the related photograph, consultation, patient record, or account, unless a longer retention period is required by law. After a verified account termination request, associated patient records and face data are deleted from active systems within 90 days, subject to backup, security, fraud-prevention, and legal-retention requirements.
4. How We Use Information
We use collected information to:
- create, authenticate, and manage practitioner accounts;
- provide patient management and consultation documentation features;
- store and display patient records and clinical photographs;
- support before-and-after image comparison;
- provide facial proportion reference analysis;
- operate arithmetic reference tools based on practitioner-entered values;
- provide customer support;
- maintain security and prevent unauthorized access;
- debug, monitor, and improve app reliability; and
- comply with legal and regulatory obligations.
INJEKT does not sell patient data, practitioner data, clinical photographs, or face data.
5. Third-Party Service Providers
INJEKT may use third-party service providers to operate the service, including cloud hosting, database, object storage, authentication, monitoring, diagnostics, email, customer support, and payment/subscription services.
These providers may process limited information only as needed to provide services to INJEKT. They are expected to provide protections consistent with this Privacy Policy and applicable law. INJEKT does not authorize these providers to use patient data, face data, or clinical photographs for advertising, marketing, data brokerage, or unrelated profiling.
6. Data Storage and Security
INJEKT uses administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure.
Data transmitted between the app and INJEKT services is protected using HTTPS/TLS. Patient records and clinical visual assets are stored in secure cloud infrastructure with access controls. Access to production systems is restricted to authorized personnel and service providers who need access to operate, secure, or support the service.
No method of transmission or storage is completely secure. Practitioners are responsible for protecting their login credentials, securing their devices, and preventing unauthorized access to patient data on their own devices.
7. User Controls, Access, and Deletion
Practitioners may modify or delete individual patient records, notes, consultation records, and photographs through available app features.
Practitioners may request account deletion or complete account termination through the app, or by contacting us at contact@white-bulbul-solutions.com. After a verified account termination request, associated patient records, clinical photographs, face data, and account data are deleted from active systems within 90 days, subject to backup, security, fraud-prevention, dispute-resolution, and legal-retention requirements.
If a practitioner needs assistance accessing, correcting, exporting, or deleting information, they may contact us using the email below.
8. Legal Compliance and International Use
Practitioners are responsible for determining whether their use of INJEKT complies with laws applicable to their practice, including patient consent, medical record, health privacy, professional licensing, and data protection laws.
Where required by applicable law, practitioners must obtain explicit patient consent before entering patient data, uploading patient photographs, or using facial analysis features.
9. Children's Privacy
INJEKT is intended for professional practitioners and is not directed to children. Practitioners must not use INJEKT to collect, store, or process information about minors unless they have obtained all legally required consents from the appropriate parent, guardian, or authorized representative.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date and may notify users through the app, or email.
11. Contact Us
If you have questions about this Privacy Policy, data protection, patient data, face data, or deletion requests, contact us at: