Privacy Policy
Effective date: September 24, 2026
The short version
- We collect what's needed to run RepTrack: your name, email, login, and the work data your team enters.
- We do not sell or rent your information, and we do not use it for advertising.
- We share data only with the service providers that run the product (listed below).
- You can delete your account at any time from inside the RepTrack app, or by emailing us.
- RepTrack is not designed for patient health information. Please don't enter it.
1. Who we are
This policy covers the website at osteosolutionsllc.com and the RepTrack iPhone app and web portal (together, the "Services"), operated by OsteoSolutions LLC ("OsteoSolutions," "we," "us"). Questions? Email [email protected].
2. Information we collect
Information you give us
- Account information: name, email address, password (stored only in encrypted, hashed form by our authentication provider), your organization, team and role.
- Work data your team enters: case details (date, time, case type, surgeon name, facility, notes, estimated sales), implant and inventory records (reference and lot numbers, expiration dates, quantities), trays, bins and their locations, inventory requests, delivery addresses, and team office or storage locations.
- Files and photos you upload: for example hospital, tray and surgeon-preference photos or documents.
- Messages to us: anything you send when you email us.
Information collected when you use the Services
- Location (only when you use a location feature): when you save or scan a bin location, the app asks for permission to use your device's location to record where that bin is. We do not track your location in the background.
- Camera (only while scanning): the camera is used on your device to read barcodes and QR codes. Camera images are not stored or sent to us unless you choose to take and upload a photo.
- Push notification token: if you allow notifications, a device token so we can send you alerts (for example, when an inventory request is created or completed).
- Google Calendar (optional): if you connect Google Calendar, we store an authorization token so RepTrack can add, update and remove your case events. We only access the calendar events RepTrack creates.
- Technical data: our hosting and database providers automatically log basic technical information such as IP address, browser or device type, and request times, for security and troubleshooting.
- Browser storage: the web portal uses your browser's local storage to keep you signed in and to cache map results. We do not use advertising or tracking cookies, and we do not use third-party analytics.
3. How we use information
- To provide, operate and maintain the Services, including sign-in, team sharing, case calendars, inventory tracking and requests.
- To send service messages: invitations, password resets, inventory request emails and push notifications.
- To keep the Services secure, prevent abuse and fix problems.
- To respond to you and provide support.
- To comply with the law.
We do not sell personal information, share it for cross-context behavioral advertising, or use it to build advertising profiles.
4. Who can see your information
Your organization. RepTrack is a team tool. Information you enter is visible to other members of your organization according to their role (for example, teammates see team cases and inventory; logistics staff see requests; administrators can see all of the organization's data). Your organization controls who is invited and what roles they have.
Service providers. We use these companies to run the Services. They may process data only to provide their services to us:
| Provider | What they do |
|---|---|
| Supabase | Database, user accounts and authentication, file storage, server functions |
| Cloudflare | Website hosting, security, and email forwarding |
| Resend | Sending emails (invitations, password resets, request notifications) |
| Apple | Delivering push notifications to iPhones |
| Calendar sync, only if you connect your Google account | |
| OpenStreetMap (Nominatim) | Converting addresses and coordinates for the location map |
Legal and safety reasons. We may disclose information if required by law, subpoena or court order, or to protect the rights, property or safety of OsteoSolutions, our users or others.
Business transfers. If OsteoSolutions is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction, subject to this policy.
5. Patient health information
RepTrack is built to track implants, trays, bins and case logistics. It is not designed to store protected health information (PHI) such as patient names, dates of birth, medical record numbers or other patient identifiers, and we have not entered into HIPAA business associate agreements. Please do not enter patient information in case notes, requests or any other field. If you believe patient information was entered, contact us and we will help remove it.
6. How long we keep information
We keep account information while your account is active. When you delete your account, we delete your login, profile, team memberships, push tokens and Google Calendar connection. Shared team records you created (such as cases, inventory entries, requests and uploaded photos) belong to your organization's workspace and remain available to your team, but are no longer linked to your account. Your organization can ask us to delete its entire workspace. Backups and server logs held by our providers may persist for a limited period before they are automatically removed.
7. Your choices and rights
- Review and update: you can view and edit your profile in the app. Ask your organization administrator or email us to correct other information.
- Delete your account: in the RepTrack app, go to More → Delete Account, or email [email protected] from the email address on your account.
- Permissions: you can turn off location, camera and notification access at any time in your iPhone's Settings. You can disconnect Google Calendar in the app or in your Google account.
- Access or copy: you can request a copy of the personal information we hold about you by emailing us.
Depending on where you live, you may have additional rights under state law. We will honor applicable requests and will not discriminate against you for making them. We will respond within the time required by law.
8. Do Not Track
Some browsers send "Do Not Track" signals. Because we do not track you across other websites or use third-party advertising or analytics, our Services do not change their behavior in response to these signals.
9. Security
We use industry-standard safeguards, including encrypted connections (HTTPS/TLS), hashed passwords, role-based access controls and database security rules that limit each user to their own organization's data. No system is perfectly secure, so we cannot guarantee absolute security. If we learn of a breach affecting your personal information, we will notify you as required by law.
10. Children
The Services are business tools for adults and are not directed to children under 13 (or under 16 where applicable). We do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
11. Where data is stored
We are based in the United States, and our providers process data in the United States. If you use the Services from outside the U.S., your information will be transferred to and processed in the U.S.
12. Changes to this policy
We may update this policy from time to time. We will post the new version on this page with a new effective date, and for material changes we will notify you by email or in the app before they take effect.
13. Contact us
OsteoSolutions LLC
Email: [email protected]