Privacy Policy

Last updated: June 28, 2026

MedBillAI ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application and website.

1. Information We Collect

Account information: Name, email address, and password when you create an account
Medical bill data: Text, images, or PDFs of medical bills you submit for analysis
Usage data: How you interact with the app, scan history, and analysis results
Device information: Device type, OS version, and device ID for fraud prevention
Payment information: Processed securely through Apple App Store — we never store payment card details

2. How We Use Your Information

To analyze your medical bills and detect billing errors
To generate dispute letters based on errors found
To maintain your bill history and account
To send analysis completion notifications
To improve our AI models and error detection accuracy
To prevent fraud and abuse of our free tier

3. Third-Party Services

Amazon Web Services (AWS Bedrock): Processes your bill content through AI for analysis. AWS is HIPAA-eligible and covered under a signed Business Associate Agreement (BAA).
RevenueCat: Manages in-app subscriptions and purchase verification
Meta (Facebook): We use the Facebook SDK to log anonymized app events for analytics and advertising. We do not share health information with Meta.
Railway: Hosts our backend servers and database in a secure environment

4. HIPAA Compliance

MedBillAI is designed to be HIPAA compliant. We have signed a Business Associate Agreement with AWS. All data is encrypted with AES-256 in transit and at rest. We implement strict access controls and audit logging as required by HIPAA.

5. Data Sharing

We do not sell, rent, or share your personal or medical bill data with:

Your insurance company
Your employer
Hospitals or healthcare providers
Advertisers or data brokers

6. Data Retention

We retain your account data and bill history for as long as your account is active. You may delete individual bills or your entire account at any time from the Settings screen in the app.

7. Your Rights

Access your personal data
Correct inaccurate data
Delete your data (see below)
Export your data
Opt out of analytics tracking

8. Data Deletion

You have the right to request deletion of all your personal data and medical bill information from MedBillAI at any time.

🗑️ How to Delete Your Data

Option 1 — In-app deletion (instant):
Open MedBillAI → Settings → Account → Delete Account
This immediately deletes your account and all associated data including bill history, analysis results, and personal information.

Option 2 — Email request:
Send a deletion request to [email protected] with the subject line "Data Deletion Request" and include your registered email address. We will process your request within 30 days and send confirmation.

What gets deleted:

Your account and profile information
All medical bill data and images
Analysis results and dispute letters
Bill scan history
Device fingerprint records

Note: Deletion is permanent and cannot be undone. Some anonymized, non-identifiable aggregate data may be retained for service improvement purposes.

Request Data Deletion →

9. Facebook Data Deletion

If you connected your Facebook account or used Facebook Login, you can request deletion of your Facebook-connected data by:

Going to Facebook Settings → Apps and Websites → MedBillAI → Remove
Or emailing us at [email protected]

We will delete all data associated with your Facebook connection within 30 days.

10. Children's Privacy

MedBillAI is not intended for children under 13. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: [email protected]
Website: medbillai.health