Consumer Health Data Privacy Policy

Effective Date: 11-07-2026 (revision 2) · Version 2026-11-07.2

QuoteChecker.ai LLC, Boise, Idaho, provides medical-bill analysis and related project tools. This notice supplements our Privacy Policy for consumer health information, including information protected by Washington's My Health My Data Act. It applies to the health information described here, whether or not a record is protected by HIPAA.

Information and sources

We receive health information you choose to submit: medical bills and explanations of benefits, facility and provider information, procedure or billing codes, dates, amounts, coverage and financial-assistance context, related files, and messages. We create audit findings, case records, summaries, and research or document drafts from that information. You may provide information about someone else only with authority to do so. We do not obtain your medical records from a healthcare provider merely because you run an audit.

Why we process it

We use this information to perform the analysis you request, keep the history or project records you choose to save, generate related drafts, respond to your requests, protect the service, and comply with applicable law. Requested analysis is separate from optional benchmark contributions. Medical contributions are off unless you opt in; the contribution is limited to a price-comparison abstraction, not the document or your identity. You can withdraw that choice in Pro Settings.

Recipients

Hosting, storage, document-reading, AI analysis and research providers process the information needed for the requested feature. The provider list identifies them. Saved application records are hosted in the United States; document reading by OCR.space takes place in the European Union, and other provider processing may occur in the locations described in the Privacy Policy. Our service operator and authorized personnel may access information when necessary for support, security, or legal obligations. Information you explicitly choose to share can reach your selected recipients; anyone holding an active share link can view the shared content. We disclose information when legally required, subject to applicable restrictions.

We do not sell consumer health data, share it for behavioral advertising, or use it to train models. We do not use geofencing to identify or target people seeking healthcare. A policy update does not create permission for a new health-data use. We obtain separate consent or authorization where required.

Retention and deletion

Free medical audits are processed in memory. Pro retains sanitized results and related case or project records until you delete them. Raw bill text held for research is purged when research completes or fails and no later than 24 hours after submission. Files intentionally saved to a project remain with that project. The general Privacy Policy describes separate billing and legal records, provider processing, and backups.

For an authenticated health-data deletion request, we delete covered health information from our systems and direct applicable processors and recipients to delete it. Where the law permits delayed deletion from archived or backup systems, we complete it within six months of authentication. We preserve only information covered by a lawful exception and explain any applicable refusal.

Your requests and appeals

You may ask whether we process your health data, access it, request a list of recipients as provided by law, withdraw consent, or request deletion. Use Pro Settings or the contact form with “Privacy or health-data request,” or email contact@quotechecker.ai. We verify requests using information appropriate to the request; please do not send a medical bill or government ID just to make a request.

For Washington requests, we respond within 45 days. If a permitted extension is necessary, we explain it within that period and may take up to 45 additional days. If we decline a request, you may appeal by replying to our decision or using the same contact channel with “Privacy appeal.” We decide appeals in writing within 45 days, explain the result, and provide a route to the Washington Attorney General if the appeal is denied. We do not discriminate for exercising these rights.

Review the general Privacy Policy for other applicable rights and contact details. This prospective revision clarifies processing locations and does not waive rights under earlier notices or authorize a new use of previously collected health information.