Privacy

The short version

• We keep the bills you enter and what we found on them, so you can come back to them. You can delete them any time.
• You can check a bill before you give us an email. If you never save it, we delete it after 7 days.
• What you tell us about a visit is used to check the bill. It isn't saved on its own, but what we found can mention it.
• We never sell your information, show you ads, or take a cut of what you save.
• We use an AI service to read your bill. It gets what it needs to do that, and nothing else about you.

What we keep

• Your email address. It's how you sign in. We don't use passwords. You can check a bill without one; we ask for it when you save the bill.
• The bills you enter. The provider, the date of the visit, each charge and its amounts, and anything optional you add: whose bill it is, the due date, whether it's paid, your plan details, and the provider's public contact details if you link them.
• What we found. The result of each check: the plain-English explanations, which charges are worth a question and why, and the phone script and letter. These are written using what you told us about the visit, so they can repeat details from it, like the reason you went in.
• Your free script and letter. A note of which bill got the free phone script and letter, so it can only be used once. It stays if you delete your bills.
• Your disputes. Whether you've raised a charge, how you raised it, where it stands, any money you got back, and any notes you keep on it, like who you talked to.
• Reports you send us. If you tell us something on your results looks wrong, we keep what you wrote and which bill it was about, so we can look into it.

What we don't keep

• Your description of the visit. It's sent to be checked along with your bill, then discarded. We don't save it as its own record.
• The name you sign a letter with. The letter is made into a PDF on your own device. Your name isn't sent to us.
• Anything from tracking or advertising tools. We don't use any.

Who else handles it

A few services run parts of the product for us. Each gets only what its part needs.

• Supabase stores your account and your bills.
• Resend delivers the emails we send you, like your sign-in code. It receives your email address.
• Stripe takes payment if you subscribe. It receives your email address and your card details, which never pass through us, and it keeps the record of your subscription.
• Anthropic provides the AI that reads your bill. For each check it receives the provider, the date, the charges, your plan details if you added them, and what you told us about the visit. It does not receive your email address.
• The NPI Registry, a public directory run by the federal Centers for Medicare & Medicaid Services, receives the provider name and ZIP code when you search for your provider, and that provider's registry number when you check the bill, so we can get their phone and address from the registry itself.
• Vercel hosts the website and keeps routine technical logs, like when a page was loaded.

Cookies and your browser

We use cookies only to keep you signed in, or, before you've given an email, to connect the bill you checked to your browser. While you're filling in a bill, what you type is saved in your browser tab, so a reload doesn't lose it. That copy stays on your device, is deleted when a check finishes, and disappears when you close the tab.

How long we keep it

Your bills and what we found stay until you delete them. You can delete all your bills and disputes at any time on the Delete your data page. To close your account entirely, including your email address, write to support@itemizedhealth.com from that address and we'll delete it.

A bill you check without giving an email is deleted, with everything on it, 7 days after you started, unless you save it with your email first.

Keeping it safe

Everything travels over an encrypted connection. Each account can only reach its own bills: that rule is enforced by the database itself, not just by the app.

Health information

Itemized Health isn't a doctor, a hospital, or an insurance company. The information you give us isn't part of your medical record, and the federal law that protects medical records (HIPAA) may not apply to it the way it applies to your doctor. We treat it with the same care anyway, and some state laws give you extra rights over health information, including the right to have it deleted.

Bills for other people

You can enter a bill for someone in your household, like a child or a parent. Only add someone else's bill if you're responsible for it or have their permission.

Changes and questions

If we change what we keep or who handles it, we'll update this page and the date above. Questions about your information? Write to support@itemizedhealth.com.