Privacy Policy

When you select a medical bill (or Explanation of Benefits) on the Check my itemized bill page, that file is never uploaded, transmitted, or sent to Aequo's servers or any third party. Reading the file and checking it for possible repeated charges both happen entirely on your device, in your browser's memory, for as long as that page is open. The file, the text read from it, and the result of checking it are all discarded when you remove the file, close the tab, or navigate away.

This version of Aequo does not perform OCR (recognizing text in scanned images) or human review of your document, and does not collect an email address or any other identifying information as part of reviewing a file. Document content, filenames, extracted text, line-item data, and results are not intentionally transmitted to Aequo by the reviewer feature — see "Website analytics" below for the separate, limited product-usage information we do collect.

Because we do not collect your medical documents, the text read from them, or an email address, there is currently no document-related information for us to use.

We do not sell personal information, and we do not use it for advertising.

We use Vercel Web Analytics, a cookieless analytics tool built into our hosting provider, to understand in aggregate how many people visit Aequo and use the bill reviewer — for example, whether a visit results in a file being selected. It does not use cookies and does not create a persistent identifier that links your visits together or to you.

It records ordinary page visits, plus a fixed, limited set of product events:

• that a file was selected
• that local analysis started
• that local analysis finished, and a broad outcome category (for example, "candidates found," "no candidates," "inconclusive," "unsupported document," or "error")
• that a document was removed / reset
• that the itemized-bill guide's link back to the reviewer was used

These events never include the document itself, its filename, any extracted text, line items, billing codes, service dates, charges or amounts, or anything else that could identify or reconstruct your bill. Like any web request, the analytics script necessarily causes your browser to send ordinary technical request information (such as IP address, browser/device type, and the page requested) to our hosting provider in the process — the same information any website request carries — but no document-derived data is ever included.

Because this analytics approach does not use cookies or other persistent tracking technology, we have not added a cookie-consent banner. This is our current assessment based on the tool's configuration, not a definitive legal determination; we will revisit it if that configuration changes.

Keeping your document on your device, rather than uploading it, is a deliberate design choice to reduce where your sensitive information can end up. That said, no method of local storage, in-browser handling, or device use is completely risk-free — for example, someone else with access to your device could potentially still find a file you've opened. Avoid selecting sensitive medical documents on a shared or public computer.

If we become aware of a security issue affecting information we do hold (such as this website's own infrastructure), we will respond and notify affected users as required by applicable law.

We use Vercel to host this website and for the website analytics described above; as with any website, that necessarily involves Vercel receiving ordinary technical request information (such as IP address and request timestamps) to serve pages and process analytics events. We do not currently transmit your medical documents to Supabase, or to any other service provider — earlier infrastructure built for that purpose is dormant and unused in this version of the product (see our technical documentation for details).

Because we do not currently collect your medical documents, the text read from them, the results of reviewing them, or an email address, there is nothing document-related for us to retain. Aggregate analytics events (described above) are retained by our analytics provider to compute usage trends; we do not maintain a per-visitor history tied back to an individual. We will update this section if and when that changes in a future version of the product.

If you have questions about this policy, or believe we hold information about you that shouldn't exist under the description above, contact privacy@tryaequo.com. We will respond to verified requests within a reasonable time.

Aequo is not directed at, and is not intended for use by, anyone under the age of 18. We do not knowingly collect information from children.

We may update this Privacy Policy as the product changes. If we make material changes, we will update the effective date above.

Questions about this policy? Email us at privacy@tryaequo.com. For general questions, reach us at support@tryaequo.com.