App privacy policy

This page matches the privacy policy shown in the Viswell app: November 2026 (v22), and, for a practice that shares charts across its iPads, November 2026 (v23, chart sharing). Paragraphs that apply only to chart sharing are marked.

Who holds your data

Viswell makes software used by aesthetic clinicians during consultations. The clinic where you are being seen holds your record and decides what happens to it. This page describes what the app itself does with it. By default, the app keeps your record on the clinic's device and does not transmit it to Viswell. If your clinic shares charts across its iPads, Viswell also holds your record on its servers for the clinic, and if your clinic uses follow-up messages or online booking, Viswell's follow-up service holds your first name, contact details, appointments and message history on the clinic's behalf (both described below).

The Viswell app is operated by Lee Software L.L.C. d/b/a Viswell, a Maryland limited liability company. Lee Software L.L.C. d/b/a Viswell is the company responsible for this app and for answering the data requests described below. Your clinic's own privacy notice governs what the clinic does, and your clinic is who you contact to see, correct or delete your record.

Your practice's Notice of Privacy Practices describes how it uses and shares your health information; ask the practice for a copy.

What the app collects

• Chart information your clinic enters: your name, date of birth, contact details and address, documents it uploads, and, if your clinic scans an ID at intake, a photograph of that ID
• Photographs taken during the visit (front and profile photos and clinical photographs), and the marks made on them during your consultation
• Notes the clinician types, and documents you sign in the app
• 3D face geometry from the device's TrueDepth camera, used only while a face scan is being taken, to guide consistent photos and set where guide lines start on your photos, and not kept afterwards; captured only after you, or a parent or guardian, sign the Face Scan Consent in the app
• Skin-visualization overlays, if your practice uses them and you sign that separate consent

The app does not produce measurements of your face. When the clinician places angle guides on a photo, the app shows the angle between those lines in whole degrees; that is arithmetic on lines the clinician drew, not a measurement the app takes. If your practice offers skin visualization and you consent, the skin-analysis service returns its own relative scores and an estimated skin age alongside the overlays. These are the service's estimates, not measurements and not a diagnosis.

The app also reads the clinic device's calendar and reminders, if the clinic connects them, to show upcoming appointments. Those are displayed only: never stored in the app, never exported, never transmitted.

How your data is used

Face geometry is used only while the scan is being taken, to guide consistent photos and to set where guide lines start on your photos; it is not kept. Photographs, marks and notes are used by your practice for your consultation and your record. Viswell does not use your information for its own advertising, does not sell it, and does not use it to train software. A skin photo goes to Perfect Corp. only with your separate consent, as described below. When the practice shares a PDF or an export, it goes to recipients the practice chooses; that is the practice's action, not an automatic transmission by Viswell.

Where it goes

By default: on the clinic's device

Your record is kept in the app on the clinic's device. It is not synced to Apple iCloud, it is always left out of iCloud and computer backups of the device, and it is not transmitted to Viswell or to Apple. Your face geometry never leaves the device: it is not kept after the scan. Patient information leaves the device only in the ways below.

Because no copy of your chart is kept on any server, a record on a lost, reset, or damaged device cannot be recovered by Viswell unless the practice made an encrypted backup.

If your practice shares charts across its iPads

If you sign the separate skin-visualization consent

One cropped photograph of your face, with no name, chart or camera metadata, is sent to Perfect Corp. for analysis, through an account Viswell manages for your clinic, and appearance overlays are returned. The photo shows your face and can identify you. To place the overlays, Perfect Corp.'s software maps points on your face (face geometry), which some state laws treat as a biometric identifier. It is used only to produce the overlays and is not used to identify you. Perfect Corp. may use it only to produce the analysis, not to train its software, and deletes the photo and its results within about 30 minutes of the analysis, or within 30 days if the analysis does not complete.

Signing is optional, it changes nothing about your care, and you can withdraw it at any time. It covers future visits until you withdraw it.

If you pay a deposit

If your practice takes a deposit or payment through the app, the payment itself is handled by Payroc on a Payroc-hosted page that you open on your own phone, on the practice's own Payroc account. Your card details never pass through the app or Viswell.

To create that page the app sends Viswell's payment service only the amount, the currency, a fixed payment category such as "Consultation deposit", an identifier for the practice's device, and random reference numbers that match the payment to the practice's own records. It never sends your name, your record, or what was performed. Viswell keeps a ledger of those amounts for the practice's account. Payroc's own privacy policy governs the payment.

If your clinic uses follow-up messages or online booking

Your clinic may send you follow-up emails (care check-ins, reminders to book your next visit, and requests to rate your visit), and occasional promotional emails about its own services. Follow-up emails are sent unless you tell your clinic not to or unsubscribe; if your clinic is in, or you live in, Washington, Nevada, Connecticut or Vermont, or your email address is a mobile carrier's text-message address, follow-up emails are sent only if you agree. Promotional emails go only to patients who agreed to them — by saying yes to news and offers when the clinic records their contact choices, ticking "Email me news and offers" when booking online, or telling the clinic — and stop when you unsubscribe or ask. Promotional emails are marked as advertisements, are never paid for by another company, and are never chosen using your scans, photographs, skin results or treatments. Your clinic texts you only about your appointments, and only if you agree to texts; texts are never turned on from imported records, and are never promotional.

If your clinic offers online booking, you can book appointments through its booking page, which Viswell hosts for the clinic. If you reach that page from a link your clinic labelled (for example one in its own advertisement), the page keeps that label in a cookie on that page only and records it with your booking, so your clinic can count which of its links bring bookings; nothing is sent to advertisers, and no advertising pixel is used.

To do this, Viswell's follow-up service, which Viswell provides to your clinic as its business associate, holds only:

Email and text messages are delivered through Amazon Web Services. This information is encrypted in transit and encrypted at rest in the service's database. It is kept until your clinic deletes you as a patient or ends its subscription. To see or delete it, ask your clinic; Viswell assists the clinic.

If you sign your clinic's consent in the app, your email and text choices are recorded with your signature.

To opt out: the unsubscribe link in every email stops marketing and follow-up emails (emails about appointments you book still arrive; ask your clinic to stop those too). Replying STOP to any text, or asking your clinic, stops texts. Opting out of one does not stop the other. Your clinic can also withdraw your enrollment on request. Text message terms: viswellhq.com/app/sms-terms.

Anything your clinic chooses to share

A PDF visit record, an export, an email or a calendar entry goes where the clinic sends it. Exported files are removed from the device when the share sheet closes.

What never happens

• Your data is never sold.
• Viswell never uses it to train software.
• Viswell never uses it for its own advertising, marketing or profiling. Apart from appointment and follow-up messages, the only other emails you can receive are your clinic's occasional promotional emails, which go only to patients who agreed to them and stop when you unsubscribe.
• It is never shared except as described above.
• Mobile numbers and text-message consent are never shared with third parties or affiliates for marketing or promotional purposes.
• Text-message opt-in data and consent are never shared with any third party.
• No analytics, telemetry or crash-reporting service receives anything about you.
• The app does not track you across other apps or websites.
• Face geometry is never used to identify or authenticate anyone. It is not Face ID and it is not facial recognition.

Companies that receive patient information

Each company that receives patient information from the app (Amazon Web Services; Payroc for deposits; Perfect Corp. for skin visualization) is bound by contract, or in Payroc's case by its own terms, to protect it at least as well as this policy describes.

Breach

If patient information the follow-up service holds is improperly disclosed, Viswell notifies your practice as its business associate agreement requires, and the practice notifies you as the law requires.

How long it is kept, and how to delete it

Your record is stored on the clinic's device. Face geometry (the 3D map of your face) is used only while the scan is being taken and is not kept: it is deleted before the scan is saved. Your photographs stay with your record. The rest of your record is kept until someone deletes it: the practice, or you on request. The practice keeps your photographs and other records under the law that applies to it — ask them what their schedule is.

To have your data deleted, ask your clinic. A clinician deletes your record — scans, photographs, documents and notes together — from the Patients list using Delete patient and all records. No copy of your chart is held on a server or in iCloud, so deleting a record removes the app's copy. It does not reach copies the practice already exported or backed up, or Perfect Corp.'s copy of a skin photo, which is deleted within about 30 minutes of the analysis, or within 30 days if the analysis does not complete. You can withdraw your Face Scan Consent at any time by telling the practice.

If you were enrolled in follow-up messages or booked online, deleting your record in the app also deletes your record on Viswell's follow-up service; the only thing kept is an opt-out entry (your email address or mobile number, with no name) so that your opt-out is still honored if you are ever added again. Deleted records may remain in the follow-up service's encrypted backups for up to 14 days.

Biometric information

When your practice uses the app for a face scan, the app captures face geometry on the practice's device, which some state laws treat as a biometric identifier. Viswell does not receive it. It is captured only after you, or a parent or guardian, sign the Face Scan Consent in the app.

That face geometry (the 3D map from the device's TrueDepth camera) is used only while the scan is being taken, to guide consistent photos and to set where guide lines start on your photos. It is not kept: it is deleted before the scan is saved, so it is never stored, sold or disclosed to anyone. The only thing kept from it is where the guide lines start on your photos.

A photograph of your face may also count as biometric information under those same laws. Photographs stay on the clinic's device unless you sign the separate consent for skin-photograph analysis, which names the company a photograph would be sent to, says that its software maps points on your face to place the overlays, and says how long that company keeps it. Signing it is optional, it changes nothing about your care, and you can withdraw it at any time.

Photographs and any other biometric information in your record are destroyed when they are deleted — by the practice, or at your request. Written consent to the face scan is the Face Scan Consent you sign, and you can withdraw it at any time by telling the practice.

Notes

Notes the clinician types during your visit are stored with your record on the practice's device. If the practice shares a visit record with you or anyone else, those notes may appear in it.

Your choices

You can ask to see, correct or delete your information. Your practice holds your chart — scans, photographs, documents and notes — on its own device (and, if it shares charts across its iPads, on Viswell's servers for the practice, as described above). If you are enrolled in follow-up messages or booked online, Viswell's follow-up service also holds, on the practice's behalf, the information listed above. Send requests for access, correction or deletion to the practice; Viswell assists the practice in answering them, including for the information the follow-up service holds. If you contact hello@viswellhq.com, we will help direct your request to your practice.

• The face scan requires your signed consent before the first one. You may decline, and the clinic can take ordinary photos instead.
• Skin visualization is separate and optional. Decline or withdraw at any time without affecting your care.
• Deletion: ask your clinic at any time.
• A copy of your record: ask your clinic, which can export it as PDFs, photos, signed documents, CSV logs and a summary; Viswell will help the clinic provide the follow-up service's part. Viswell does not charge for exports.

Security

Everything the app stores is protected by iOS Data Protection, which encrypts it at rest with hardware-backed keys. The app runs only on a device that has its own passcode, which that encryption needs, and it requires a passcode set by the practice before it opens. It can also unlock with Face ID or Touch ID, and locks itself again after it has been in the background for a short time. Files the practice exports are written with complete file protection and deleted from the device when the share sheet closes. Backups the practice makes in the app are encrypted with AES-256-GCM under a passphrase the practice chooses; Viswell never sees or stores it, so we cannot open a backup or recover a lost passphrase. The app connects to outside services only over HTTPS.

Washington consumer health data

For Washington State residents: the consumer health data the app handles for your practice is your photographs, face geometry used during the scan (not kept afterwards), the marks and notes from your consultation, documents you sign, skin-visualization overlays if you consent to them, and your contact details. It is used for your consultation and your visit record. It is shared only with Perfect Corp. for skin visualization, if you consent; with the payment service if you pay a deposit; and, if you agree to follow-up messages, your practice adds you from its existing patient records, or you book online, your name, contact details and appointments with Viswell's follow-up service. It is never sold. Your practice is the regulated entity for your data: you can confirm whether it holds your data, withdraw consent and request deletion through the practice, which can delete your record from the Patients list. For questions about the app itself, contact hello@viswellhq.com.

Children

Viswell is a professional tool for licensed clinicians and is not directed at children. Before first use, the person holding the device attests that they are a licensed clinician or authorized clinic staff. Where the person being scanned is a minor, a parent or guardian can sign the app's consent forms, and the practice is responsible for obtaining any parental or guardian consent that the law applying to it requires before a scan is taken.

Changes to this policy

If this policy changes, the date and version shown at the end of it in the app change, the date at the top of this page changes, and the app asks the practice to accept the new version — unless the practice has already accepted a version that says everything the new one does (the version that describes sharing charts between the practice's iPads says everything the version without it does).

Contact

For privacy questions or data requests: Lee Software L.L.C. d/b/a Viswell, hello@viswellhq.com

In the app: November 2026 (v22) · with chart sharing: November 2026 (v23, chart sharing)

Viswell is consultation and documentation software for licensed practitioners. Not intended to diagnose or treat any condition; not FDA cleared.