Privacy Policy

Last updated: April 3, 2026

CrushMedBills ("we", "our", "us") operates the website crushmedbills.store. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

Account Information: When you create an account, we collect your name, email address, and password (stored as a secure hash). If you sign in with Google, we receive your name, email, and Google account ID.

Medical Bills: When you upload a medical bill for analysis, we temporarily process the document to extract billing data. The original file is deleted immediately after processing. We store the extracted data (charges, CPT codes, provider names) to provide our service.

Usage Data: We collect basic usage information such as bills analyzed, disputes generated, and feature usage to improve our service.

2. How We Use Your Information

To analyze your medical bills and identify potential errors
To generate dispute letters and negotiation scripts
To provide Medicare price comparison data
To maintain your account and bill history
To process payments (via Stripe — we never store your payment card details)

3. Data Processing and AI

We use AI services (Anthropic Claude) to extract data from uploaded bills and generate dispute letters. Bill images are sent to Anthropic's API for processing. Anthropic's data retention policies apply to this processing. We recommend reviewing Anthropic's privacy policy.

4. Data Retention

Uploaded files: Deleted immediately after data extraction
Extracted bill data: Retained while your account is active
Account data: Retained until you request deletion
Generated letters: Retained while your account is active

5. Data Security

We implement industry-standard security measures including:

Encrypted data transmission (HTTPS/TLS)
Password hashing (bcrypt with salt)
Secure authentication tokens (JWT)
Immediate deletion of uploaded bill images after processing

6. HIPAA Disclaimer

CrushMedBills is a consumer tool that helps you understand and dispute your own medical bills. We are not a covered entity or business associate under HIPAA. By uploading your medical bills, you are voluntarily sharing your own health information to receive our analysis service. We treat all health-related data with care and delete original documents immediately after processing.

7. Third-Party Services

Anthropic (Claude AI): Bill data extraction and letter generation
Stripe: Payment processing
Google: Authentication (Google Sign-In)
DigitalOcean: Hosting infrastructure

8. Your Rights

You have the right to:

Access your personal data
Request correction of inaccurate data
Request deletion of your account and all associated data
Export your data

To exercise these rights, contact us at bookmarkorganizerpro@duck.com.

9. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. Continued use of the service after changes constitutes acceptance.

11. Contact Us

For privacy-related questions or concerns:
Email: bookmarkorganizerpro@duck.com