Privacy Policy
This app holds medical and insurance information, which is about as private as information gets. This page explains, in plain language, what is stored, where it goes, and how to get rid of it. No legal jargon, because you should not need a lawyer to understand what happens to your own medical records.
- Your information is stored in your own private account. Nobody else can see it unless you invite them.
- Nothing is ever sold, rented, or used for advertising. There are no ads and no tracking in this app.
- When you photograph a card, bill, or medicine label to be read automatically, that image is sent to an AI service to be read. Details below.
- You can delete everything, permanently, at any time.
What is stored
Only what you type in or upload:
- Your email address, used to sign in.
- Family member details — names, dates of birth, and notes you add.
- Health information — medicines, doses, schedules, appointments, doctors, visit notes, conditions and allergies.
- Insurance and money — plan and card details, coverage notes, bills and statements you record.
- Files you upload — photographs and PDFs of insurance cards, benefit booklets, medication sheets, bills and Explanations of Benefits.
- Reminder settings — if you turn on reminders, the app stores an address for your device, your time zone, and any quiet hours.
The app does not collect your location, your contacts, your browsing, or any advertising identifier. There is no analytics service, no tracking pixel, and no third-party advertising code anywhere in it.
Where it is stored
Your information is held in a private database and private file storage operated by Supabase, on servers in the United States. It is protected by security rules that tie every record to your account, and it travels over an encrypted connection. The website itself is delivered by Vercel.
Uploaded files are kept in a private storage area. They are not publicly reachable: viewing one produces a temporary link that expires after about thirty minutes.
Reading documents automatically
This is the most important thing on this page.
Several features can read a document for you — an insurance card, a benefits booklet, a medication sheet, or a medical bill. When you use one of these, the image or PDF you chose is sent over an encrypted connection to Anthropic's Claude API, which reads the text and sends back a structured result. There is no way to do this on the phone alone.
What this means in practice:
- It only happens when you actively choose to have a document read. Nothing is sent in the background, and files you simply store are never sent anywhere.
- Under Anthropic's commercial API terms, material sent this way is not used to train their models, and is deleted from their systems within thirty days. Content flagged for safety review may be kept longer. Their current terms are published at anthropic.com/legal/commercial-terms.
- If you would rather no document ever leave your phone, do not use the automatic reading features. You can type the same information in by hand, and everything else in the app works normally.
Reminders
If you turn on reminders, notifications are delivered through the push service belonging to your phone's maker — Apple for iPhone and iPad, Google for Android. To do that, the app stores a delivery address for your device. A reminder contains the person's name, the medicine or appointment, and the time. Those services handle the delivery and can see the message content in transit, so they behave like any other notification on your phone.
You can turn reminders off at any time in Settings, which removes the stored address for that device.
Who else can see your information
Nobody, unless you choose it. If you share an invitation code with a family member, they can see and edit everything in that shared wallet. Give a code only to someone you intend to have full access. Everyone with access can add, change, and remove information.
Your information is never sold, rented, traded, or handed to advertisers, data brokers, insurers, or employers. It may be disclosed only if the law requires it, such as a valid court order.
Other services the app relies on
Loading the app contacts a few technical services, which necessarily see the internet address your phone is connecting from. They receive no health information:
- Cloudflare CDN and jsDelivr — deliver the software libraries the app is built from.
- Google Fonts — delivers the typeface.
Deleting your information
You can delete individual items — a medicine, an appointment, an uploaded file — at any time, and they are removed permanently.
To delete your entire account and everything in it, email WeShouldDoThis507@gmail.com from the address you signed up with, and ask for your account to be deleted. Everything is erased within thirty days: the account, the stored records, the uploaded files, and any reminder settings. Deletion is permanent and cannot be reversed, so export a backup first if you want to keep a copy.
How long it is kept
Your information is kept for as long as you keep your account, because that is the point of a wallet — the records are still there when you need them next year. It is erased when you ask for the account to be deleted.
Children
The app is meant for adults managing their own or their family's health information, and an adult may of course record details about their child. Accounts are not intended for children to create or use on their own.
Security, honestly stated
Information travels encrypted, is stored in a private database with per-account access rules, and uploaded files are not publicly reachable. But no system is perfectly secure, and it would be wrong to promise otherwise. Use a strong, unique password, and do not share your sign-in details with anyone you would not want reading your medical records.
Changes to this policy
If what the app does with your information changes, this page will be updated and the date at the top will change with it.
Contact
Questions, or a request to delete your account: WeShouldDoThis507@gmail.com