Privacy
What leaves your device, and what doesn't.
It happens on your device
You enter your name and date of birth for one reason: so we can find and remove them. The de-identification runs in your browser. Your identifiers never leave your device.
What the server sees
Only the de-identified text of your bill is sent to our server, and only to read the line items — a single call to Anthropic's Claude API. The full audit result is returned to your browser encrypted; the server has no way to connect it back to you.
No accounts
There is no login and no profile. We don't ask for, store, or sell personal data.
Payment recovery
So a closed tab can't lose a result you paid for, the encrypted, de-identified result is held on our server for 24 hours — keyed by a random hash — and then deleted. It contains no identifying information.
Payment
Card payment is handled entirely by Stripe. We never see or store your card number.
Referrals
When you share The Bill Check, we create a random, anonymous code and count how many visits and paid audits it drives. The code contains no personal information and is never derived from your bill.
This is a self-serve tool and not legal or medical advice.