Klaer plans doctor-prescribed clear-aligner cases for licensed dental and orthodontic providers, on CBCT + IOS. This policy explains how we handle personal data, why, and the choices available to providers and the patients they treat.
1. Who we are
Klaer is a clinician-led clear-aligner planning, manufacturing and aftercare service operated by aiHealth Group in Sharjah, United Arab Emirates, on the kyour.ai and xaen.ae platforms. References to "Klaer", "we", "us" or "our" mean the operating entity behind klaer.ae. We operate within the applicable UAE health-authority framework (MOH / DHA).
For any privacy question, or to exercise your rights, contact our data protection contact at privacy@klaer.ae (or hello@klaer.ae), Klaer, aiHealth Group, Sharjah, United Arab Emirates.
2. Scope & roles
This Policy explains how we handle personal data for:
- Website visitors and people who contact us or apply to become a provider;
- Orthodontists, dental professionals and their staff ("Providers") who use Klaer; and
- Patients whose clinical data is processed through Klaer at the instruction of a treating Provider.
For patient clinical data, the treating Provider is the controller and Klaer acts as a processor handling that data under the Provider's documented instructions and applicable UAE health-data law. For our website, marketing and provider-application data, Klaer is the controller.
3. The data we collect
a. Website, marketing & enquiries
- Name, email, organisation, role, message content, and basic analytics/technical data (e.g., device/browser type, approximate location, pages viewed).
- Correspondence you send to addresses such as hello@klaer.ae or providers@klaer.ae.
b. Provider applications
- Professional details you submit to join Klaer: name, clinic/organisation, emirate, role/speciality, licence/registration details (e.g., MOH/DHA/DOH licence number), contact details, and any message.
c. Patient clinical data (processed for Providers)
This is sensitive personal/health data, and may include: CBCT scans, intra-oral scans (IOS), photographs, treatment plans and 3D simulations, appliance/manufacturing records, weekly home-imaging captures, consent records, and progress data submitted through the patient application.
Orthodontic care frequently involves minors. Patient data relating to a minor is processed only on the basis of consent or authorisation given by the patient's parent/legal guardian and the treating Provider (see section 9).
4. Why we use it, and our lawful basis
We process personal data to: respond to enquiries and provider applications; provide and operate the Klaer platform (planning, AI-assisted verification, simulation, manufacturing, logistics and follow-up) for Providers and their patients; secure and improve the service; and comply with legal, regulatory and clinical-record obligations.
Our lawful bases under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, "PDPL") include your consent; performance of a contract; our legitimate interests in operating and securing the service; and compliance with a legal obligation. Sensitive/health data is processed on the basis of explicit consent and/or as permitted for the provision of healthcare and as instructed by the treating Provider.
5. AI-assisted processing
Klaer uses AI to stage tooth/root movement and to verify case biomechanics; a qualified orthodontist designs and signs off every case, and a clinician verification step applies before manufacturing. Klaer does not make solely-automated decisions that produce legal or similarly significant effects on a patient without human clinical review. You may request human review of, and object to, automated processing as described in section 10.
6. Health data & storage in the UAE
Patient health data is handled in line with UAE health-data law, including Federal Law No. 2 of 2019 on the Use of Information and Communication Technology in the Health Fields and, where applicable, Dubai Health Data Law No. 11 of 2018 and DHA/NABIDH requirements. Consistent with these laws, patient health data generated in the UAE is stored and processed within the UAE and is not transferred or stored outside the UAE except where the law expressly permits and the required authorisation is obtained. Aligners are manufactured in the UAE.
7. Who we share data with
We share personal data only as needed: with service providers/processors that operate the platform on our behalf (e.g., hosting, the kyour.ai/xaen.ae platform layer, manufacturing and logistics partners), under contracts requiring confidentiality and PDPL-compliant handling; with the treating Provider (for patient data); with competent authorities, regulators or health information exchanges (e.g., NABIDH) where required by law; and in connection with a corporate transaction, subject to this Policy. We do not sell personal data.
8. International transfers
Where any non-health personal data is transferred outside the UAE, we do so only in accordance with the PDPL — i.e., to jurisdictions recognised as providing an adequate level of protection, or under appropriate safeguards (such as standard contractual clauses), your explicit consent, or another lawful basis. Patient health data is kept within the UAE as described in section 6.
9. Children & guardians
Klaer's website and services are directed at dental professionals, not children. Where a patient is a minor, their data is processed only with the consent/authorisation of a parent or legal guardian, obtained through the treating Provider. A guardian may exercise the patient's rights on the minor's behalf.
10. Your rights
Subject to the PDPL and applicable health-data law, you have the right to: access your data; correct inaccurate data; request erasure or restriction; object to certain processing; request portability; withdraw consent (without affecting prior processing); and request human review of and object to automated processing. To exercise any right, contact privacy@klaer.ae. We will respond within the period required by law. You also have the right to lodge a complaint with the UAE Data Office. For patient clinical data, requests are directed to, or coordinated with, your treating Provider as controller.
11. Data security
We apply technical and organisational measures appropriate to the sensitivity of the data, including encryption in transit and at rest, access controls and least-privilege, audit logging, and breach-response procedures. No system is perfectly secure, but we work to protect your data and to notify the relevant parties and authorities of a personal-data breach as required by law.
12. Retention
We keep personal data only as long as necessary for the purposes above, including to provide the service, meet clinical-record-keeping and other legal obligations, and resolve disputes. Clinical records are retained for the minimum periods required by UAE health regulations. When no longer needed, data is securely deleted or anonymised.
13. Cookies & analytics
We use only the cookies/technologies necessary to run the site and to understand, in aggregate, how it is used. Where required, we ask for your consent and you can decline non-essential cookies.
14. Changes to this Policy
We may update this Policy from time to time. We will post the updated version here and change the "Last updated" date; material changes will be communicated as required by law.
15. Contact
Klaer, aiHealth Group — privacy@klaer.ae · hello@klaer.ae · Sharjah, United Arab Emirates. MOH and DHA licences reserved.