Privacy
What Recount keeps, who sees it, and how to delete it. In plain words.
What we store
In our database (Convex): the bill photo or PDF you upload, what we read from it (hospital, charges, account number, and the patient's name and address if they're printed), your answers to the questions (household size, yearly income, insurance, medical costs), the letters, the steps the app took, a record of each AI call (which service and model, how long, how many words; never the content), your questions to Lupa, and any photo or PDF you attach in the chat with Lupa. Long numbers that look like Social Security or account numbers are removed from Lupa messages before they're stored.
Who helps process it
To read your bill, write your letters and answer your questions, the bill image, the facts about your bill, and any photo or PDF you attach in the chat with Lupa are sent to Anthropic's Claude API. Anthropic handles that data under its own commercial terms and retention policy. To look up a hospital's prices, our Apify Actor receives only the hospital's name, website and the billing codes on the bill. Never your name, account number or income. The web app is hosted on Vercel.
Who can see it
Accounts are optional. Without one, a bill opens only with its private link, which holds a secret key kept on your phone. With an account, you can also open your own bills by signing in. The small Recount team can see the database to run and fix the service.
Accounts (optional)
If you make an account, we store your email, a hashed password (never the password itself) or your Google sign-in, and, if you add them, your name, address, phone and date of birth to fill in letters. There's no email verification and no password reset by email.
What we never do
We don't sell your information. We only share it with the services above that run the app. We don't send anything to the hospital: you send your own letters. We never ask for payment, a Social Security number or bank details.
How long we keep it
Until you delete it. The one exception: a photo or PDF you attach in the chat with Lupa is deleted 30 days after you send it.
How to delete it
Open the bill and tap "Delete this bill". It removes the bill, the photo, the steps, the AI call records and its Lupa chat, with any files you attached there, from our database right away. To delete your account, go to Your account and tap "Delete my account": it removes your email, password hash, profile and sign-in records, and, if you choose, all your bills. Copies the AI and safety services may hold follow their own policies, not ours.
These facts match how the app works today.
Back to Recount