Privacy Policy
Last updated: January 21, 2026
1. Introduction
HealthLedger ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our medical expense tracking application.
2. Information We Collect
Personal Information
- Email address and name when you create an account
- Payment information when you subscribe to a paid plan (processed securely by Stripe)
- Medical expense data you choose to enter, including dates, amounts, and categories
- Receipt images you upload
- Family member information you add to your account
Automatically Collected Information
- Device information and browser type
- IP address and general location
- Usage data and analytics
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve our services
- Process your transactions and manage your subscription
- Send you important notifications about your account
- Generate expense reports and summaries at your request
- Respond to your comments, questions, and support requests
- Detect, prevent, and address technical issues and security threats
4. Data Storage and Security
Your data is stored securely using industry-standard encryption. We use Supabase for database storage, which provides enterprise-grade security including:
- Encryption at rest and in transit (TLS 1.3)
- Regular security audits and monitoring
- Row-level security policies to ensure data isolation
- Secure, private storage for receipt images
5. Data Sharing
We do not sell your personal information. We may share your information only in the following circumstances:
- Service Providers: With third parties who assist us in operating our service (e.g., Stripe for payments, Supabase for data storage)
- Legal Requirements: When required by law or to protect our rights
- With Your Consent: When you explicitly authorize us to share your data
6. Your Rights
You have the right to:
- Access and download your data at any time
- Correct or update your personal information
- Delete your account and associated data
- Export your expense data in standard formats (CSV, PDF)
- Opt out of non-essential communications
7. Data Retention
We retain your data for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes.
8. Children's Privacy
Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
Email: support@healthledger.app