Privacy Policy

Last updated: 14 November 2026

Who we are

3DDoctor (3ddoctor.org) is run by Ajmal Tech, a company based in the Netherlands. Ajmal Tech is the data controller for your personal data. Contact us through the contact form.

What we collect

• Account data: name, email, profile, height, target weight.
• Health data you enter or create: body weight, scan results, lab values, notes, workout and diet plans, before and after photos.
• Photos and messages sent to Aria or the AI scanners.
• Technical data: device type, browser, basic usage logs.

Camera and live video

Live body, face and pulse tracking runs on your device. Live video is not uploaded or recorded. Only photos you choose to analyse are sent to our AI provider, and we do not keep them on our server after the answer is returned.

Why we use it, and our legal basis

To give you scans, reports and progress tracking. Health data is special category data under GDPR Article 9. We process it only with your explicit consent, which you give by ticking the consent box before a scan, upload or sign-up. You can withdraw consent at any time. Account and security data is processed to perform our contract with you and for our legitimate interest in keeping the service safe.

Who receives your data

We use a small number of trusted service providers for website hosting, sign-in, secure data storage and AI analysis. They act as processors under agreements with us. We do not sell your data or use it for advertising. If a provider is outside the EEA, we rely on safeguards such as standard contractual clauses.

How long we keep it

Account data stays until you delete your account. Without an account, results stay only in your browser. Backups are removed within 30 days of deletion.

Your rights

You can access, correct, export or delete your data (My Progress has export and delete buttons), object to processing, restrict it, and withdraw consent. Send a request through the contact form and we reply within one month. You can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

Cookies

We use only essential storage (sign-in, settings, saved results). We set no advertising or tracking cookies. If we add analytics, we will ask first.

Children

3DDoctor is not for children under 16 without a parent or guardian.

Security

All traffic uses HTTPS. Account requests are checked on the server so people can only open their own data.

Changes

We will post changes here and update the date above.