Privacy Policy

• Your Google account email and name, so you can sign in.
• The files you upload: a photo or PDF of your bill and, optionally, your insurer's Explanation of Benefits.
• The line items, dates, codes and amounts we read from those files, or that you type in yourself, and any changes you make to them.

• Files are stored in a private Supabase storage bucket, in a folder that only your account can read, write or delete.
• Our upload form resizes photos and re-saves them as JPEG in your browser before they are uploaded, so the copy we store is normally smaller than the original and no longer carries its camera metadata. PDFs are uploaded as they are, and our upload form turns away PDFs over 4 MB. These steps happen in your browser, so our server does not enforce them: it accepts files up to the limit below and does not re-save images itself.
• We check each file's actual type, size (10 MB) and, for PDFs, page count (6) before storing it. Only JPEG, PNG, WebP and PDF files are accepted.
• We use your files only to read your bill. We do not use them to train models or for advertising.

To read the text on your bill, our server sends your uploaded files to Claude, an AI model made by Anthropic, through Anthropic's API. Anthropic processes the images to read them and returns the line items. The model only reads what is printed; it does not decide whether a charge is wrong. Those checks are run by fixed rules in our own code. Anthropic's published commercial terms say it may not train its models on customer content sent through its services, and its API data policy says that, by default, it automatically deletes API inputs and outputs from its systems within 30 days, except where content is flagged for violating its usage policy or the law requires it to keep it longer. Those are Anthropic's terms, not ours, and they can change; see Anthropic's retention policy. If you open “What is this?” on a line, only that line's billing code (for example, 99213) is sent for a general explanation, never your name, dates, or amounts. If you type your bill in instead of uploading it, what you type is not sent to Anthropic at all; it is saved to your account and checked by our own fixed rules. Our API key is kept on the server and never sent to your browser.

Your bills, line items and files are stored in Supabase (our database and file storage), and access is limited to your account by row-level security. There is no retention period and nothing expires on its own: we keep them until you delete them. We don't put bill contents in our logs.

• Language: if you choose a language with the EN | ES switch, we save that choice in a cookie named NEXT_LOCALE. It holds only “en” or “es” and lasts one year. If you never choose, no language cookie is set and pages follow your browser's language setting.
• Signing in: when you sign in, our sign-in provider, Supabase, sets session cookies on this site to keep you signed in. They last up to 400 days, and signing out removes them. Browsing without signing in sets no session cookies.
• Appearance: if you choose Light or Dark, we save that choice in your browser's local storage under the name unbundle-theme. Choosing System removes it. It stays in your browser.
• We do not use analytics, advertising or tracking cookies.

We never sell your information. We share it only with the services that process it for us: Anthropic, which reads your uploaded files as described above; Supabase, which stores your account, bills and files; Google, which handles sign-in; and our web hosting provider, which serves the site and runs our server code.

From Settings you can do two things. “Delete all my bills” permanently removes every bill you uploaded, the line items and EOB lines we stored for them, and your uploaded files from storage; your account stays. “Delete my account and data” does the same and then removes your sign-in account from our authentication system and signs you out, so the data tied to your account is removed from our database and storage. You can also delete a single bill from your dashboard or its review page. Findings are not stored: they are worked out from your line items each time you open a report, so there is nothing to delete for them. Deleting a bill leaves one thing behind: a record that a reading was attempted (your user ID and a timestamp, with no bill content), which we keep until you delete your account and use to apply hourly limits. Deleting does not recall copies Anthropic may keep under its own retention policy, and a PDF letter you already downloaded stays on your device.

Questions? Email rohankelkar2020@gmail.com.