Last updated: October 2026. This policy explains what we collect, how we use it, how long we keep it, and the choices you have.
The Medical Bill Detective is a consumer tool that helps you read medical bills and Explanation of Benefits (EOB) documents in plain English. We are not a medical provider, insurer, law firm, or financial advisor, and we do not provide medical, legal, or financial advice.
Account information. When you create an account we collect your first and last name and email address. You may optionally add a phone number and ZIP code, and create patient profiles for family members (name, relationship, and optional date of birth).
Documents you upload. Medical bills, EOBs, denial letters, and related files you choose to upload, plus the information our system extracts from them (such as provider names, dates of service, amounts, and billing codes).
Case information. Notes, timeline entries, statuses, and messages you create or generate inside a case.
Usage information. Non-sensitive product events such as "account created", "analysis completed", or "message generated". These events never include the content of your documents.
What we never ask for. We never ask for Social Security numbers, driver's licence or passport details, or payment card numbers. Payments, when available, are handled by a third-party payment provider; we never see or store card data. Please do not upload documents containing this information.
Uploaded files are stored in private, access-controlled storage. Files are only reachable through short-lived links issued to your signed-in account, and database access rules (row-level security) prevent any other account from reading your records. Our team does not browse user documents; administrative views show aggregate counts only, never document contents.
Documents are transmitted over encrypted connections and stored encrypted at rest. Even so, no system can guarantee absolute security, so please only upload information you are comfortable storing.
To extract and explain information, the documents you upload are sent from our server to an AI model provider for processing. This happens only when you request an analysis. Documents are not sent to analytics tools or advertisers, and AI providers are not permitted to use your documents to train their models.
Analysis results are clearly separated into facts extracted from your documents and AI-generated interpretation. AI output can be wrong; always verify important details against your original documents and with your provider or insurer.
We keep your account, cases, documents, and extracted data for as long as your account is active, so your case history remains available to you.
You can delete individual documents or entire cases at any time from within the app. Deleting a case removes the stored files, extracted records, findings, notes, timeline entries, and generated messages associated with it. Deletion is permanent and cannot be undone.
If you delete your account, we delete your profile, patient profiles, cases, documents, and associated records. Residual copies may remain in encrypted backups for a limited period before being overwritten, and we may retain minimal records where required by law (for example, payment transaction records held by our payment provider).
Non-sensitive usage events (such as "analysis completed") may be retained in aggregate, de-identified form to help us understand and improve the product.
Our public landing page may display ads served by Google AdSense. Google and its partners may use cookies or similar technologies to serve ads based on your prior visits to this and other websites, and to measure ad performance.
These advertising cookies are set by Google, not by us. They are limited to the public landing page and are never used inside the signed-in application. They do not include, and have no access to, your medical documents, uploaded files, extracted data, or case information.
You can opt out of personalized advertising through Google Ad Settings or through AboutAds. You can also control cookies through your browser settings. Where required by law, advertising cookies are only set after you consent.
We share information only with the service providers needed to operate the product:
We do not sell your personal information, and we never share your medical documents or case data with advertisers. We may disclose information if required by law or to protect the rights and safety of our users.
You can access, correct, export, or delete your information from within the app at any time. You may also contact us to request a copy of your data or to delete your account. Depending on where you live, you may have additional rights under local privacy laws, and we will honor applicable requests.
The Medical Bill Detective is intended for adults managing their own or their family's medical bills. Patient profiles for children are created and managed by the adult account holder. We do not knowingly collect accounts from children under 13.
We describe our controls plainly and make no HIPAA compliance claim. The Medical Bill Detective is a consumer tool, not a covered entity or business associate under HIPAA.
If we change this policy, we will update the date at the top and, for material changes, notify you in the app or by email before the change takes effect.
Questions about this policy or your data? Contact us through the support option in the app settings.
The Medical Bill Detective provides informational assistance based on the documents you provide. It does not provide medical, legal, insurance, or financial advice and does not determine whether a bill is legally valid, fraudulent, or incorrect. Potential discrepancies should be verified with your healthcare provider and/or insurance company.