Consumer health data privacy policy
Effective October 11, 2026. This policy covers “consumer health data” under Washington's My Health My Data Act, Nevada law (SB 370), Connecticut law and similar state laws. It adds to our main privacy policy and will be finalized with counsel before general launch.
What health data we collect
Only what is in the documents you choose to add, or that you type in: medical bills and statements, insurance explanations of benefits and denial letters, records you request, and notes about your case. These can show the care or services you got, dates of service, providers, diagnosis or billing codes, insurance and coverage details, and what you were charged or paid.
We don't collect precise location, we don't use geofencing, and we don't collect health data from other sources about you.
Why we collect it
Only to provide the service you asked for: reading your documents, finding errors and rights that apply, writing letters, tracking deadlines and reminders, keeping your case file, and sending mail or faxes when you ask us to. We ask for your consent before your first scan and won't use the data for any other purpose without asking again.
Who we share it with
We don't sell health data, and we don't share it for advertising. It goes only to:
- Service providers that run the app for us and may use it only to do that: our AI provider (to read documents and draft letters, under terms that don't allow training on it), our database and file storage provider, and our hosting provider.
- Mail and fax providers, only for a letter you ask us to send, and only that letter.
- People you invite as helpers on a case.
- Anyone else only if the law requires it, such as a valid court order.
If we ever wanted to share it with anyone else, we would ask for your separate consent first.
Your rights
- See it: download everything we hold about you from the You page in the app.
- Delete it: delete a single case and its files, or your whole account, from the app. We also tell our service providers to delete their copies.
- Take back consent: email us and we'll stop collecting new health data; you can keep or delete what's there.
- Know who got it: ask us for the list of third parties and service providers your data went to.
- Appeal: if we turn down a request, reply to our answer to appeal. If we deny the appeal, you can contact your state attorney general.
To use any of these rights, email privacy@takeitback.app from the address on your account. We answer within 45 days and don't charge for requests. We won't treat you differently for using them.
How we protect it
Your files are stored privately and only open for you and helpers you invite. Access is encrypted in transit, and we don't put advertising or tracking pixels on signed-in pages.
Contact
Take it back · privacy@takeitback.app