Who operates BillProof Mobile
Thorsen Digital operates BillProof Mobile. This policy covers the consumer mobile app and related public support pages. It does not replace the terms or privacy materials that may apply to a separate independent advocacy engagement or a commercial advocate workspace.
Information we collect
We collect information needed to create and operate your account, such as your name, email address, account settings, and authentication information. Passwords are stored as password hashes, not readable passwords.
Documents you choose to submit can include sensitive personal or health-related information. That can include patient names, addresses, insurance or account identifiers, provider details, dates, charges, procedure codes, EOB decisions, and visit notes. We also retain extracted information and analysis results to provide your selected bill history.
If you ask to explore advocacy help, we collect the contact details, case context, selected documents, and messages you choose to provide for that request. Device and notification-token information helps operate the app. Operational analytics and diagnostic reporting are limited to necessary service metadata rather than document contents.
- Account and authentication information
- Documents, extracted text, and analysis results you choose to submit or save
- Optional advocacy-request information and selected case messages
- Device, notification, and limited operational diagnostic information
How we use information
We use information to operate your account, read and analyze documents you ask us to process, identify possible billing issues, prepare self-help materials such as appeal drafts when available, provide saved results, send enabled account or case notifications, and support the service.
Consumer analysis and self-help features are free. Analysis is informational and can be incomplete or wrong. A calculation-verified discrepancy does not establish that a charge is improper or that money will be recovered. Clinical context, insurer decisions, provider review, and your own verification may still be needed.
AI and OCR processing
BillProof Mobile uses configured Google Cloud Vision OCR and Gemini AI through Manus infrastructure to read and analyze documents for the processing you request. Uploaded documents and extracted text may be sent to those configured OCR and AI services.
We request account-scoped, versioned consent before a document picker, upload, or new OCR or AI processing request. That consent is separate from permission to use your camera or photo library. Cloud hosting and storage providers operate service infrastructure, and configured email and notification providers deliver communications you request or enable.
Provider handling, retention, and any model-training restrictions depend on the applicable provider terms and configuration. We do not promise that every provider immediately deletes all data or that every copy is never used for training. Google privacy information is available at policies.google.com/privacy.
Optional independent advocacy sharing
Advocacy is optional. Sharing selected case information with an assigned independent advocacy team requires separate referral consent. Declining does not remove access to BillProof Mobile self-help features.
After you separately consent, the selected bill, analysis snapshot, referral reason, contact details, chosen evidence, and case messages may be shared with the assigned independent advocacy team. Unrelated bills are not included automatically. A case referral, receipt, or acceptance does not mean that the bill will be resolved.
You may withdraw referral consent for future sharing controlled by BillProof Mobile. Withdrawal cannot retrieve information that an advocacy team has already received, and that team may retain records under its own policies and applicable obligations. We may also disclose information when required by law or in a business transfer subject to applicable privacy obligations.
Retention and deletion
Bills and results follow the retention period you select: 72 hours or 30 days. Documents linked to an active advocacy case may remain while that case is active. Account information remains while your account is active, and limited security records may remain to protect the account. Some records may also remain where a lawful retention obligation applies.
Profile and Settings include controls to delete bill history or delete your account. Deletion removes applicable BillProof Mobile database records and application file references. It does not promise immediate physical erasure from provider storage, previously issued links, external advocacy records, or backups, which have separate lifecycles.
Your choices and requests
You can review or withdraw processing consent in Profile and Settings, withdraw referral consent in the relevant case, change notification permissions, and use the in-app bill-history or account-deletion controls.
Withdrawing processing consent stops new OCR or AI requests and controlled queued work that has not started. It does not retract information already sent to a provider and does not delete saved results. Use the deletion controls for saved app records. Depending on where you live, you may have additional rights to access, correct, delete, restrict processing of, or obtain a copy of your personal information.
Security and notifications
We use server-side authorization, owner-scoped document access, protected session handling, and encrypted HTTPS transport for production service requests. These measures reduce risk but do not eliminate it. We do not describe BillProof Mobile as HIPAA-certified or guarantee provider encryption at rest without separately verified arrangements.
Operational logs and configured error reporting exclude document contents, direct user identity, session tokens, and signed document URLs. Bill-analysis notification previews use generic wording, and detailed results are available after you open the authenticated app. You control device notification permissions.
Children
BillProof Mobile is not intended for children under 13. If we learn that a child under 13 provided personal information, we will take appropriate steps to remove applicable records. Please contact us if you believe this has occurred.
Policy changes
We may update this policy when our practices change and will revise the date above. A material change to OCR or AI processing disclosures requires a new consent version when required; continued use alone does not replace required processing or referral consent.
Contact
For privacy questions, retained-data questions, or requests not handled in the app, contact Thorsen Digital at john@thorsendigital.com.
Privacy question? Email john@thorsendigital.com.