We believe privacy is a right, not a feature.

MyBill Decoder helps you read and understand medical bills using AI. This policy explains exactly what data leaves your device, where it goes, and who processes it. We do not require an account, and we do not sell your data.

The app is operated by Aigility Digital. By using MyBill Decoder you agree to the practices described here. If you do not agree, please stop using the app and uninstall it.

Data We Collect

2a — Stored only on your device (never transmitted)

None of the above is ever transmitted to us or any third party. It lives in your phone's sandboxed local storage and is permanently deleted when you use Settings › Delete Local Data or uninstall the app.

2b — Transmitted when you tap Analyze

ℹ️

This data is transmitted only when you explicitly tap Analyze. Nothing is sent in the background or during browsing.

2c — Subscription & purchase data

When you purchase or restore MyBill Pro, Apple App Store or Google Play handles the transaction. RevenueCat (our subscription management provider) receives a purchase receipt and entitlement token to verify your access. RevenueCat does not receive your bill images or any analysis content.

2d — Rewarded-ad data

If you choose rewarded-ad access instead of subscribing, Google AdMob serves the ad and sends a server-to-server callback to our edge server to verify the reward. The callback contains an ad-unit identifier, a reward token, and a timestamp — it does not contain any bill content.

How We Use Your Data

The table below lists every data category we collect and its complete, exhaustive list of uses. We do not use data for any purpose not listed here.

Data How It Is Used Used for Ads or Model Training?
Bill image (JPEG) Sent to AI provider solely to generate your analysis result. Not stored after the response is delivered. No
On-device OCR text Sent alongside the image to improve AI accuracy. Not stored after the response is delivered. No
Preferred language, detected currency & region Sent as optional hints to help the AI format the result in your language and local currency. Not stored after the response is delivered. No
Saved analyses (on-device) Displayed in your in-app history. Never transmitted to any server. No — never leaves your device
App settings (on-device) Used to personalise app behaviour (language, display, dark mode). Never transmitted to any server. No — never leaves your device
Purchase receipt & entitlement token Sent to RevenueCat solely to verify and restore your Pro subscription status. No
Ad reward token & timestamp Sent from Google AdMob to our server solely to verify rewarded ad completion and unlock one analysis. Governed by Google AdMob's own policies

We do not use any data for advertising targeting, user profiling, behavioural analytics, or AI model training. Bill content has exactly one purpose: producing the analysis result shown to you.

How Your Bill Data Flows

Every analysis follows these four steps in order.

1
On-device OCR — nothing leaves your phone yet

When you select a bill image, text recognition runs entirely on your phone using on-device machine learning (Apple Vision / ML Kit). No data leaves your device at this stage.

2
You tap Analyze — transmission begins

Your bill image and the locally extracted OCR text are sent over HTTPS to our Cloudflare Worker (edge compute server at bill-decoder-api.artcreator329.workers.dev). The worker acts as a secure relay — it does not log or store your bill content.

3
AI model processing via OpenRouter

The worker forwards your request to OpenRouter (openrouter.ai), an AI routing service. OpenRouter selects one of the following model providers to process the request:

Only one provider processes any single request. All listed providers commit to not using API request data to train their models under their enterprise/API terms.

4
Result returned to you

The analysis result travels back through the Cloudflare Worker to your device. The worker does not retain any bill content after delivering the response. The result is then saved locally on your phone only.

Third-Party Services

The table below lists every third-party service that receives data in connection with MyBill Decoder. We confirm that all listed services are bound by privacy terms that provide protection equivalent to or greater than the protections in this policy.

Service What They Receive Purpose Privacy Policy
Cloudflare Bill image & OCR text (in transit, not stored) Edge relay cloudflare.com/privacypolicy
OpenRouter Bill image & OCR text AI routing openrouter.ai/privacy
OpenAI Bill image & OCR text (when selected) AI analysis openai.com/policies/privacy-policy
Google AI Bill image & OCR text (when selected) AI analysis policies.google.com/privacy
Anthropic Bill image & OCR text (when selected) AI analysis anthropic.com/privacy
RevenueCat Purchase receipt & entitlement token Subscriptions revenuecat.com/privacy
Google AdMob Ad interaction data, reward verification token Rewarded ads policies.google.com/privacy
Apple App Store Transaction data Payment (iOS) apple.com/legal/privacy
Google Play Store Transaction data Payment (Android) policies.google.com/privacy

Sensitive Health Data

Medical bills often contain health-related information — diagnoses, procedure codes, medication names, patient identifiers, and insurance details. We treat all bill content as strictly sensitive.

Data Retention

📱
On-device data
Retained until you delete it via Settings › Delete Local Data, or until you uninstall the app. Fully under your control.
🔁
Analysis requests
Not stored by us or our Cloudflare Worker after the response is delivered. The relay is stateless.
🤖
AI provider processing
Governed by the respective provider's terms. Under standard API usage, providers do not retain prompt or image data beyond the immediate request.
💳
Subscription records
RevenueCat retains purchase receipts as required to manage your active subscription and support restores.
📣
Ad interaction logs
Google AdMob retains ad interaction data per its standard advertising policies. No bill content is included.

Your Rights

Depending on your location you may have the following rights over your personal data. Because we do not operate user accounts and do not store bill content after analysis, most data remains on your device under your direct control.

Access
Request a copy of data we hold about you.
Deletion
Request erasure of personal data. On-device data: delete via Settings.
Correction
Request that inaccurate data be corrected.
Portability
Request your data in a portable, machine-readable format.
Objection
Object to certain types of processing, including profiling.
Restriction
Request that processing be restricted under certain conditions.
ℹ️

To exercise rights regarding data held by third-party providers, contact those providers directly using the links in Section 4. For any privacy request to us, email privacy@aigility.digital.

Children's Privacy

MyBill Decoder is not directed at children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal data from children. If you believe a child has submitted data through the app, contact us immediately at privacy@aigility.digital.

Security

Changes to This Policy

We may update this policy when our practices change. We will update the Last updated date at the top of this page. For material changes we will update the version shown inside the app. Continued use of the app after an update constitutes acceptance of the revised policy.

Contact Us

For privacy questions, data requests, or concerns, reach us at:

Company
Aigility Digital
Privacy email
Website