The short version
- Checked on your phone first. Photo sharpness is checked on your device before anything is uploaded.
- Read, then forgotten. Bill photos are used only to read that bill and are not saved by us — unless you choose to share a bill.
- Your bills stay on your device. What we read from a bill, and anything you record about it later, is saved only in your browser until you delete it.
- No account. You never sign up, and we keep no user database.
- No personal information in our logs. Our system logs record things like success or failure, timing and error codes.
- We never sell your information or use it for advertising.
Who we are
BillCaddie is operated by [Company legal name], [Company mailing address] (“we,” “us”). This policy explains what information we collect through the BillCaddie website, how we use it, and the choices you have. It is intended for people in the United States.
Information we process
Bill photos and what they show. When you tap “Read this bill,” the photos you selected are sent over an encrypted connection to our server, which passes them to our AI service provider to read the text and numbers. Bills can include personal and health-related information such as your name, address, account number, provider, dates and the services you received. Our server holds the photos in memory only for that request and does not write them to storage. The numbers that come back are checked for charges worth asking about on your device; they are not sent to us again.
Test build notice: during this test we have not yet confirmed zero data retention with our AI service provider. Please use the sample bills and do not upload a real medical bill.
Bills saved on your device. After you confirm a bill's numbers, BillCaddie saves them, the explanations, and anything you record later (status, deadlines, notes, amounts saved) in your browser's storage on this device. This information is never uploaded to us, and we cannot see or recover it. You can export it, delete it at any time, or have it deleted automatically after 30 days. Anyone who can use this browser on this device can see it, so delete it if you share the device.
Bills you choose to share (optional). Only if you agree, we save the photos of a bill together with the numbers we read and the numbers you confirmed, to measure and improve accuracy.
Your email (optional). Only if you enter it, to tell you when the BillCaddie app launches.
Anonymous usage statistics (optional, off by default). If you turn them on, your browser creates a random ID stored only on your device and sends events such as “a bill was read” or “a question list was copied.” Amounts and counts are sent only as ranges (for example “$201–500”). We never collect your name, contact details, provider name, account or bill numbers, dates of service, photos or the text of your bill this way.
System records. For each bill read we record whether it succeeded, an error code if not, how long it took, the number of pages and the processing cost — with no device ID and no bill content. Our hosting provider may keep standard access logs (such as IP addresses) for security for a short period.
How we use information
- To read your bill and show you explanations and questions (the reason you use BillCaddie).
- To measure and improve accuracy — only with bills you choose to share.
- To email you once when the app launches — only if you leave your email.
- To understand, in aggregate, how the service is used and where it fails — only through the records above.
- To keep the service secure and comply with law.
We do not use your bills to train AI models, and we do not sell, rent or share personal information for advertising.
Consumer health data
Some states, including Washington and Nevada, protect “consumer health data.” We treat information from your bills as consumer health data. We collect it only to provide the service you ask for, or — for shared bills — with your separate consent. We do not sell it. You can withdraw consent and ask us to delete it at any time (see Your data & choices).
Service providers
We use these providers to run BillCaddie. They may process information only on our instructions:
- Vercel Inc. — Website hosting, and encrypted storage of shared bills, launch-notice emails and anonymous statistics (Vercel Blob, United States).
- Our AI service provider — Reads the text and numbers on bill photos you submit. Photos are sent for each request and are not used to train models.
We may also disclose information if required by law, or to protect the rights and safety of users or others.
How long we keep information
- Bill photos you submit for reading: not stored by us — held in memory for the request only.
- Bills saved on your device: until you delete them, or 30 days if you turn on auto-delete. We never receive them.
- Bills you choose to share: up to 24 months, or until you withdraw.
- Launch-notice email: until we send the launch notice and for up to 12 months after, or until you remove it.
- Anonymous usage statistics and system records: up to 180 days, then only aggregate totals.
Security
Information is encrypted in transit. Shared bills and emails are additionally encrypted by us (AES-256) before they are stored, and stored privately so they can't be opened by a link. No system is perfectly secure; if we learn of a breach affecting your information, we will notify you and authorities as required by law.
Cookies and local storage
We don't use advertising or tracking cookies. Your browser's storage holds your saved bills and settings on your device. If you turn on anonymous statistics, your choice, a random ID and a small queue of unsent events are also kept there until you turn statistics off.
Your choices and rights
You can export or delete the bills saved on your device, and turn auto-delete and anonymous statistics on or off, in the app's Privacy tab. You can withdraw a shared bill and remove your email on the Your data & choices page. Depending on where you live (for example California, Washington, Nevada, Colorado, Connecticut, Virginia or Texas), you may also have rights to know, access, correct or delete personal information, to withdraw consent, and to appeal our decision on a request. To make a request, email [privacy contact email]. We will not discriminate against you for exercising these rights.
Children
BillCaddie is intended for adults 18 and older. We do not knowingly collect information from children.
Changes and contact
If we change this policy we'll update the date above, and ask for your consent again where the law requires. Questions or requests: [privacy contact email], or [Company legal name], [Company mailing address].