Privacy, in plain words

A medical bill is health information. Here is exactly what we keep, who sees it, and how to delete it.

Updated October 26, 2026

What we keep

The files you upload: your bill and, if you add it, your insurance statement.
What we read from them: the scan results, such as the provider, dates, the bill lines we flag, and our notes about them.
Your answers to the optional questions (how you paid, emergency care, network, Good Faith Estimate, household size and income), if you give them.
Your email address, so we can send you your private link.
The name and address you confirm for your letters, and the letters themselves, if you buy the full review.
A one-way scrambled version of your IP address (a hash) for 2 days, only to limit free scans to 3 a day. It isn't linked to your case.

For how long

Everything above is deleted 30 days after you upload your bill. Your files expire on their own, and the rest of your case is removed with them.

You can delete it all sooner: open your case and press Delete everything now. Your files, scan and letters are deleted right away, and your link stops working.

Stripe keeps its own record of a payment, as payment processors must. It holds your email, the amount and a case number, never your bill.

Who processes it

Cloudflare hosts Billcheck and stores your files and case.
Anthropic runs the AI that reads your bill and writes your letters. Under Anthropic's commercial terms, data sent through its API is not used to train its models.
Resend sends our emails: your private link, and a receipt link if you pay.
Stripe handles payment. We never see your card number.

We don't sell or share your information with anyone else, and we don't use it for advertising.

No trackers

Billcheck has no analytics, no ads, no tracking pixels and no third-party scripts. Our fonts are served from our own site. We use your browser's local storage only for small conveniences on your own device, such as remembering your recent case link and which checklist items you ticked.

Your private link

There are no accounts. Your case lives at a long, random link that we email to you. Anyone with the link can open your case, so treat it like a password and don't post it publicly.

Health information and the law

Billcheck is not a health care provider or health plan, so HIPAA does not cover us. The FTC Health Breach Notification Rule does: if your health information were ever accessed without authorization in a breach, we would notify you, the Federal Trade Commission and, where required, the media.

We protect your information with encryption in transit, short retention, private links that can't be guessed, and access limited to the systems listed above.

Questions or requests

Email hello@cooli.ai. If you lost your link and want your case deleted, tell us the email you used and we will delete it.

Billcheck is run by Cooli AI.