Privacy Policy

The Short Version

1. What Information We Collect

We collect only what's necessary to provide the service:

• Account information — your email address and password (or Google account) when you sign up.
• Document content — the text extracted from your uploaded documents is processed for analysis and then immediately and permanently deleted. We store only the resulting analysis report, not your original document.
• Usage data — basic analytics like which pages you visit and when, used to improve the product.
• Payment information — processed securely by Lemon Squeezy. We never see or store your credit card number.

2. How We Use Your Information

We use your information solely to:

• Analyze your medical documents and generate your plain-English report
• Store your document history in your account so you can reference past analyses
• Send you transactional emails (account confirmation, subscription receipts)
• Improve the accuracy of our AI analysis over time

3. How We Protect Your Data

Your medical documents contain sensitive personal information and we treat them accordingly:

• Encryption in transit — all data is transmitted over HTTPS/TLS, the same standard used by banks.
• Encryption at rest — documents stored in our database are encrypted using AES-256.
• Immediate deletion — your original document is permanently deleted from our systems the moment analysis is complete. We never store your raw medical documents.
• Limited access — only essential systems can access your document data, not individual employees.
• Secure authentication — passwords are hashed and never stored in plain text. Google OAuth is available as an alternative.

4. Data Sharing

We share data with a minimal set of trusted service providers who help us operate MedClear:

• Anthropic — our AI provider processes your document text to generate the analysis report. Anthropic does not use your data to train their models.
• Supabase — our database and authentication provider stores your account and document history securely.
• Lemon Squeezy — our payment processor handles subscription billing. We never see your card details.
• Netlify — our hosting provider serves the MedClear website.

We do not share your data with insurance companies, healthcare providers, employers, advertisers, or data brokers.

5. Your Rights

You have full control over your data:

• Access — you can view all your analysis reports and results through your account portal.
• Deletion — you can request deletion of your account and all associated data at any time by emailing us.
• Export — you can request a copy of your account data by emailing us.
• Opt out — you can stop using MedClear at any time.

6. Cookies & Analytics

We use minimal cookies required for authentication (keeping you logged in) and basic analytics to understand how people use MedClear. We do not use advertising cookies or cross-site tracking cookies.

7. Children's Privacy

MedClear is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

8. Changes to This Policy

If we make significant changes to this privacy policy, we will notify you by email and update the "Last updated" date at the top of this page. Continued use of MedClear after changes constitutes acceptance of the updated policy.

9. A Note on HIPAA

MedClear is a consumer tool designed to help individuals understand their own medical bills. We are not a covered entity or business associate under HIPAA in the traditional sense, as you are voluntarily sharing your own documents with us as a consumer service.

However, we follow HIPAA-aligned security practices including encryption, access controls, and immediate document deletion because we believe your medical information deserves that level of protection regardless of legal requirements.