Your information belongs to you, and we keep it safe.

Medical bills contain some of your most personal details. Here’s exactly how we handle them.

Respect is in the details.

Never sold.

We don’t sell your medical information or share it for advertising. We only work with trusted service providers when necessary to operate Rekupr, and safeguards are in place to protect your information.

Carefully protected.

Encrypted connections, encrypted storage, and restricted access help protect the sensitive information you share.

Yours to manage.

Download your data. Delete your account permanently. Ask us a question before you share anything.

Here’s what happens to your information at every step.

Your upload and the analysis we create have different lifetimes. You deserve to know what happens to both.

The original files

3days

Until the original file is deleted after analysis

You upload
We analyze
Original deleted

We delete your upload
once it has done its job.

Your original uploaded documents are deleted automatically within 3 days of analysis. If a document can’t be analyzed, its original file is deleted within 90 days. The analysis we create from them stays, so you can come back to it.

Our storage provider holds a deleted file in a protected area for 7 more days, used only to guard against accidental loss, before it is gone for good.

Good to know

If you connect a hospital portal, the raw copy of those records is deleted 90 days after we receive it, or as soon as you disconnect, whichever comes first.

Good care goes
beyond your bill.

You should feel confident about the people looking after your information. Here’s how we put that responsibility into practice.

There’s a person
behind every document.

That’s who we’re building for. Your information deserves the same care and respect we’d want for our own families.

We use technology to make medical bills easier to understand, with clear limits on how information is accessed and used.

Meet the people behind Rekupr

Protection built in.

Your documents are encrypted when they’re sent to Rekupr and remain encrypted while they’re stored. This helps protect your information from unauthorized access both in transit and at rest.

Accountable access.

Your files are protected with strict access controls and are only accessible to authorized personnel when necessary to operate, support, or secure Rekupr. Every access is recorded.

A purpose you understand.

Your documents support your bill analysis and appeal. Product improvement uses only aggregated, de-identified data.

We work with service providers to deliver this care. Our privacy policy explains who they are and how information is shared.

We answer the questions people actually ask.

These are reasonable questions. You deserve useful answers.

Manage your account data

Ask a privacy question

What information do you collect?

The documents you upload, such as medical bills, EOBs and insurance documents, any medical records you choose to connect from a provider’s patient portal, and the plan details, claims and EOBs we retrieve if you choose to connect your insurance account. We never store your insurer password. If you create an account, we keep your name, email and sign-in method, plus any optional profile details you add. We also store chat conversations with the assistant, payment confirmations from Stripe (never your card number), and basic usage data such as pages visited and device type.

How do you use AI with my documents?

We use Google Cloud’s Vertex AI, through its US-only endpoint, to read the text and figures in your documents and check them for billing issues. Google processes this content under our Business Associate Agreement and is prohibited from using it for any purpose other than providing these services. We use only aggregated, de-identified data to improve the product.

Can anyone on the team see my information?

Other users can never see your documents. Your files are protected with strict access controls and are only accessible to authorized personnel when necessary to operate, support, or secure Rekupr. Every access is recorded.

Does deleting a report erase everything?

Deleting a report permanently erases that analysis within 2 days. Original uploads are already deleted within 3 days of analysis. Audit records of account activity follow their own schedule and never hold the contents of your bills. To remove everything, use the email-confirmed account deletion in your account settings. If you need help with a particular document, contact support@rekupr.co.

What about cookies and tracking?

Essential cookies keep you signed in and protect forms. On public pages, and only before you sign in, Google Analytics records pages visited, device and browser details, and approximate location. It is never loaded once you sign in or where you upload or view a bill. Product analytics run only if you accept them in the cookie banner. We use no advertising cookies or tracking pixels.

Built to HIPAA standards

HIPAA sets federal standards for protecting medical information. Rekupr was built with those standards in mind, including how we store, transmit, and dispose of your data. Read our security practices.

Is anything kept after I delete my account?

A small amount. We keep an audit record of the deletion for 6 years, holding hashed identifiers and counts, never your name, email or health information. Records of consents and agreements you signed are kept too, including any medical record connection consent, which the law requires us to hold for 6 years. Our storage provider holds deleted files for 7 days before they are gone for good, and Stripe keeps its own payment records.

Trust starts with
being able to ask.

If something is unclear, tell us. There are people behind Rekupr, and we’re here to help you understand.

Talk to us about your information