Privacy Policy

Last updated: July 26, 2026

CommonHealth ("we," "our," or "the App") helps a patient write an appeal after a health insurer denies coverage. Because the App necessarily handles sensitive health information, this policy is specific about exactly what happens to it. It applies to the CommonHealth application for iPhone.

1. What stays on your device

Everything that identifies you or describes your health is processed locally and stored locally:

• Photos of your documents — the denial letter, your medical records, and your insurance card.
• Text read from those photos, and the fields pulled out of it (insurer, plan type, the service or medication denied, the stated reason, your member ID, the filing deadline).
• The clinical facts the App finds in your records, and anything you type yourself.
• The appeal letter the App writes, and the appeals you save.

Reading your documents, understanding them, writing the letter and checking that letter are all done by AI models that run on your phone. This is the reason the App asks for a large one-time download: those models are on your device rather than on a server, so your documents never have to leave it.

2. How your saved appeals are protected

• Saved appeals are encrypted on the device (AES-256-GCM). The encryption key is held in the iOS Keychain and never leaves your phone.
• The App is protected by Face ID / Touch ID / your passcode when your device supports it.
• Your documents and saved appeals are excluded from iCloud and iTunes backups, so copies of them are not uploaded to Apple.
• Photos you import are copied into the App's private storage under non-identifying filenames, and the originals the scanner or file picker leaves behind are deleted.
• Deleting an appeal removes it. Deleting the App removes everything.

3. What does leave your device

We believe you should be able to see the complete list, so here it is.

• The one-time model download. The App downloads its AI models (about 5 GB) over HTTPS the first time you set it up. This is a plain file download — it contains nothing about you. Each file is verified against a known cryptographic fingerprint before it is used.
• Diagnostics from Google's text-recognition library. The App reads your documents using Google's ML Kit, which runs on your device — no image and no recognised text is ever uploaded by it. However, the library also reports anonymous usage and performance diagnostics to Google (such as a device identifier and app-interaction data), and it provides no way to switch that off. It carries none of your documents or health information. We disclose it here because it is the only thing in the App that reports anything to a third party, and Apple lists it on our App Store privacy label.
• An optional policy-freshness check. The App can check whether an insurance policy it cites is still current. If that feature is enabled, it sends only the identifier of the public policy document — never your name, your records, your letter, or any health information. It is not enabled in the current release.

There is no other network activity. The App has no server that stores your information.

4. What we do not do

• We do not collect personal information or health information.
• We do not have accounts, sign-in, or a user database.
• We do not use analytics or crash-reporting services of our own.
• We do not show advertisements and contain no advertising SDKs.
• We do not track you across apps or websites, and we do not use the Advertising Identifier (IDFA).
• We do not access your location, contacts, microphone, calendar, or Apple Health data.
• We do not sell, rent, or share your information — we do not have it.
• We cannot submit an appeal for you, so we never transmit your letter anywhere. You send it yourself.

5. Permissions the App asks for

• Camera — to photograph your denial letter, records, and insurance card. Used only while a scanning screen is open.
• Photos / Files — only if you choose to attach a document you already have.
• Face ID — to lock the App.
• Notifications — optional, to remind you before your filing deadline. Reminder text is deliberately generic ("your insurance appeal is due soon") so nothing sensitive appears on your lock screen.

6. Diagnostic logs

The App keeps a technical log on the device to help diagnose problems. It records events and error types — not your documents, not the letter, and not your clinical details, which are redacted. The log never leaves your phone unless you deliberately export and send it to us for support. If you do, please read it first.

7. Children

CommonHealth is intended for adults handling their own insurance appeals, or for someone helping a family member. It is not directed at children and we do not knowingly collect information from anyone.

8. Your rights

Because we never receive your information, there is nothing for us to give you a copy of, correct, or delete. You hold all of it. You can delete any saved appeal in the App, or remove everything by deleting the App.

9. A note on HIPAA

CommonHealth is a self-help tool you use directly. We are not your health plan, your provider, or a business associate of either, so HIPAA does not make us a custodian of your records — and, more to the point, we never hold them. The protections described above are technical facts about how the App is built, not a legal claim about your insurer's obligations.

10. Changes

If this policy changes, the date at the top changes and the current version is always published here. Material changes to what leaves your device will be called out in the App.

11. Contact

Questions about this policy: b2gaudio@gmail.com