Privacy Policy

Last updated: July 6, 2026

ClaimHelper (getmyyes.com) helps you turn a health-insurance denial into appeal paperwork. The documents you upload are sensitive — this policy explains exactly what we collect, why, where it goes, and how to remove it.

The short version: your files are processed only to draft your appeal, never to train AI. Unsaved uploads auto-delete after 24 hours. Saved cases stay until you delete them. Payments are handled by Stripe — we never see your card number. You can delete everything, any time, from Settings.

1. What we collect

Data	When	Why
Documents you upload (denial letters, EOBs, prior-auth denials) and the facts extracted from them — which may include health information	When you upload them	To draft your preview and appeal packet
Your answers to the guided questions	When you answer them	To tailor the appeal to your situation
Account email and password (password stored as a hash by Firebase Authentication)	When you create an account	Sign-in, saving cases, purchase receipts
Purchase records (amount, date, case reference, email; not card numbers)	When you buy a packet	Delivering what you paid for, receipts, tax records
Basic technical logs (IP, timestamps, errors)	Automatically	Security and keeping the Service working

We do not run analytics on the contents of your documents, and we do not sell your personal information or share it for cross-context behavioral advertising.

2. How your documents are processed

Files are encrypted in transit (TLS) and at rest (Google Cloud default encryption).
To draft your documents, the relevant content is sent to OpenAI's API with retention disabled for the request ("store: false"). OpenAI API data is not used to train models.
Guest uploads auto-delete after 24 hours. Saved or purchased cases are kept until you delete them.
PDF export renders on your device; the exported file itself is not uploaded to us.

3. Who processes your data

Google Firebase / Google Cloud — hosting, authentication, database, file storage (United States).
OpenAI — AI drafting of your preview and packet, retention disabled.
Stripe — payment processing; your card details go directly to Stripe and never touch our servers.

These providers act as our processors and may not use your data for their own purposes beyond what their agreements allow.

4. HIPAA note

ClaimHelper is a consumer self-help tool. We are not a healthcare provider, health plan, or clearinghouse, and not a HIPAA covered entity or business associate. HIPAA generally does not cover copies of records you upload yourself. We protect them under this policy and applicable consumer-privacy law instead.

5. Emails we send

We send transactional email only: purchase confirmations/receipts and messages about your account or cases. We do not send marketing email unless you separately opt in (there is currently no marketing list).

6. Retention

Unsaved (guest) uploads: deleted automatically after 24 hours.
Saved cases and packets: until you delete them or your account.
Purchase records: kept as long as required for accounting and tax law.
Backups and logs: purged on a rolling basis.

7. Your rights & controls

Delete: Settings → "Delete all data" removes every case and uploaded file permanently; you can also delete individual cases.
Access / export: your packet is exportable as a PDF; for a copy of other data, email us.
State privacy rights (California CCPA/CPRA and similar): you may request access, deletion, or correction, and you won't be discriminated against for exercising rights. We don't sell or share personal information as those laws define it.
Contact for any request: support@getmyyes.com. We may need to verify you control the account first.

8. Children

The Service is for adults 18+. We do not knowingly collect information from children under 13; if you believe a child has used the Service, contact us and we will delete the data.

9. Security

Encryption in transit and at rest, uid-scoped storage rules so only your account can access your files, server-side entitlement checks, and secrets kept out of the client. No system is perfectly secure — if a breach affects you, we will notify you as required by law.

10. Changes

We'll post any changes here with a new "Last updated" date. Material changes will be highlighted in the app.