Privacy Policy

1. Who We Are

Alzhan Group LLC ("we", "us", or "our") operates the MediBillAI mobile application ("App"). MediBillAI helps users understand their health insurance benefits, Explanations of Benefits (EOB), and medical bills using AI-powered analysis. If you have questions about this policy, contact us at hello@alzhangroupllc.com.

2. Information We Collect

a) Information You Provide

• First and last name
• Email address
• Subscription and payment information (processed by Apple App Store — we do not store card data)

b) Health & Insurance Data (via FHIR APIs)

If you choose to connect your insurance account, we retrieve the following data from your insurer using SMART on FHIR / OAuth 2.0 standards:

• Insurance benefits and coverage details
• Claims and Explanation of Benefits (EOB) records
• Clinical data such as diagnoses, procedures, and medications (where provided by your insurer)

This data is retrieved directly from your insurer on your behalf and is used solely to provide the features of the App. We do not sell or share this data with advertisers or data brokers.

c) Documents You Upload

You may upload medical bills or EOB documents for AI analysis. These documents are processed by Anthropic's Claude AI API and are not used to train AI models.

d) Usage Data

We collect basic usage data (app screens visited, feature interactions) to improve the App. This data is anonymized and not linked to your identity.

3. How We Use Your Information

• To provide and improve the features of MediBillAI
• To analyze your insurance benefits, claims, and medical bills using AI
• To process your subscription and manage your account
• To respond to your support requests
• To comply with applicable laws and regulations

We do not sell, rent, or share your personal or health information with third parties for marketing or advertising purposes.

4. Third-Party Services

We use the following third-party services to operate the App:

• Anthropic Claude API — AI processing of your insurance and medical document data
• Your Insurance Provider (e.g., Cigna, UnitedHealthcare, Humana) — FHIR data retrieval via OAuth 2.0
• CMS Blue Button API — Medicare claims data retrieval
• Vercel — Backend hosting (US-based servers)
• Apple App Store / Google Play — Subscription and payment processing
• RevenueCat — Subscription management and entitlement tracking

Each third-party service has its own privacy policy. We encourage you to review them.

5. Health Information

MediBillAI handles sensitive health and insurance information. We take the following measures to protect it:

• All data is transmitted over encrypted HTTPS connections
• OAuth 2.0 tokens are stored securely on your device
• We do not store your FHIR health data on our servers beyond what is necessary to serve your request
• You can disconnect your insurance account at any time from within the App

6. Data Retention

We retain your account information for as long as your account is active or as needed to provide services. Health and insurance data retrieved via FHIR APIs is not permanently stored on our servers. Uploaded documents are processed in real time and not retained after analysis is complete. You may request deletion of your account and associated data at any time.

7. Your Rights

• Access the personal data we hold about you
• Request correction or deletion of your personal data
• Disconnect your insurance accounts at any time within the App
• Cancel your subscription at any time through the Apple App Store or Google Play
• Opt out of any non-essential data collection

To exercise these rights, email hello@alzhangroupllc.com.

8. California Residents — CCPA / CPRA

If you are a California resident, you have the following rights under CCPA as amended by CPRA:

• Right to Know: Request disclosure of categories and specific pieces of personal information we have collected.
• Right to Delete: Request deletion of your personal information, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out: We do not sell or share your personal information. No opt-out action is required.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, email hello@alzhangroupllc.com with the subject line "CCPA Request".

9. California Residents — CalOPPA

• Users can visit the App anonymously where applicable
• This Privacy Policy is linked clearly within the App
• We will notify users of any material changes to this Privacy Policy
• Users can update their personal information by contacting us

10. Children's Privacy

MediBillAI is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at hello@alzhangroupllc.com.

11. Security

We implement industry-standard security measures including HTTPS encryption, secure token storage, and access controls. However, no method of electronic transmission or storage is 100% secure. We encourage you to use a strong password and keep your device secure.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page and, where appropriate, through a notice in the App. Continued use of the App after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us: