Privacy Policy
Last updated: May 30, 2026
Plain English summary: You upload sensitive insurance documents. We use them only to generate your analysis. We never sell your data. Documents are encrypted. You can request deletion anytime.
1. What Data We Collect
When you use ClaimBack, we collect:
- Account information: Your email address (used for login via OTP)
- Documents you upload: Rejection letters, health insurance policy documents, hospital bills, discharge summaries, or other claim-related documents
- Claim details: Insurer name, claim amount, rejection reason, and other details you enter in the form
- Payment information: Payment is processed by Razorpay. We do not store your card or bank details — only a transaction reference
- Usage data: Basic app usage logs (screens visited, errors) for product improvement. No personally identifiable information in logs.
2. How We Use Your Data
We use your data solely to:
- Generate your AI-powered claim analysis and appeal letter
- Store your case history so you can access it later
- Send you case status updates (if you opt in)
- Process your payment and issue receipts
- Improve our AI analysis quality (using anonymised, aggregated patterns only)
We do not use your documents to train AI models directly. Your documents are processed by Anthropic's Claude API under Anthropic's data privacy commitments — API inputs are not used to train Anthropic's models per their API usage policy.
3. Who We Share Data With
We share data only with the following service providers, strictly for operating ClaimBack:
- Anthropic (Claude API): Your documents are sent to Anthropic's API for AI analysis. Anthropic does not use API data for model training. See Anthropic's Privacy Policy.
- Supabase: Our database and file storage provider. Data is stored encrypted in AWS Mumbai (ap-south-1) region.
- Razorpay: Payment processing. Subject to Razorpay's privacy policy.
We never sell your data. We never share it with insurance companies, TPAs, or any third party not listed above.
4. Data Storage and Security
- All data is stored in India (AWS ap-south-1, Mumbai)
- Documents are encrypted at rest and in transit (TLS 1.2+)
- Access is restricted — only you can view your own cases
- We retain your documents for 12 months after your last case, then delete them automatically
5. Your Rights
You have the right to:
- Access: Request a copy of all data we hold about you
- Deletion: Request deletion of your account and all associated documents
- Correction: Request correction of any inaccurate data
- Portability: Request your case data in a machine-readable format
To exercise any of these rights, email support@claimback.co.in. We will respond within 7 business days.
6. Cookies
The ClaimBack mobile app does not use tracking cookies. Our website uses only essential session cookies required for login. No advertising or analytics cookies are used.
7. Children's Privacy
ClaimBack is not intended for use by persons under 18 years of age. We do not knowingly collect data from minors.
8. Changes to This Policy
We may update this Privacy Policy. We will notify you of significant changes via email or an in-app notice. Continued use of ClaimBack after changes constitutes acceptance.
9. Contact
For privacy questions or data requests: support@claimback.co.in