AppealIQ

Privacy Policy

Effective date: September 12, 2026 · applies to appealiq.company (web) and the AppealIQ iOS app

AppealIQ helps you draft dispute and appeal letters for denied health insurance claims, auto insurance disputes, and phone/internet billing disputes. The short version: your documents are read on your device — only extracted text is sent to our servers — and we never sell your data.

1. Information we process

  • Account information. Your email address (and name/avatar if you sign in with Google) is stored in our database to operate your account.
  • Documents you upload. PDFs with a text layer are processed in your browser using on-device text extraction — the file itself is never uploaded. Photos of documents are sent over encrypted HTTPS to the Anthropic API to transcribe the text; the image is used only to read the text and is not stored on our servers.
  • Extracted text and appeal details.The text extracted from your documents and the details you type are sent over encrypted HTTPS to our servers and to the Anthropic API (api.anthropic.com), which drafts your analysis or letter. Anthropic's privacy policy governs its processing.
  • Generated letters and appeal records. On the web, these are stored in our database so you can access, regenerate, and export them, and you can delete them at any time. In the iOS app, letters are stored only on your device — we keep no copy. Deleting the app deletes them.
  • Photographs of documents (iOS app). When you photograph a denial letter or bill in the iOS app, the text is read on your iPhoneusing Apple's on-device text recognition. The photograph itself never leaves your device and is never uploaded. Only the extracted text is sent, and only when you ask for a letter to be written.
  • Extracted text and appeal details are not retained (iOS app). The document text and the details you enter are sent over encrypted HTTPS to our servers and on to the Anthropic API, which drafts your letter. We do not store either one. What we keep per generation is limited to: the category, the AI model used, token counts and cost, your plan, your IP address, and the time. No letter text, no document text, no form contents.
  • Sign in with Apple (iOS app).We store the stable identifier Apple gives us for your account, and your email address. If you use Apple's Hide My Email, we only ever see the private relay address — never your real one. We also store the token Apple issues so that deleting your account can revoke your Sign in with Apple grant, which Apple requires.
  • In-app purchases (iOS app). Purchases are processed entirely by Apple. We never see your card details. When you buy credits, the app gives Apple a random identifier for your AppealIQ account — it contains no name, email, or payment details — and Apple returns a signed confirmation carrying it back. From that confirmation we store the transaction identifier, which product you bought, and when, so a purchase can only ever be credited once. Your credits are held on your account rather than on your device, which is how they follow you when you sign in on another one.
  • Payments.Handled entirely by Stripe. We never see or store your card number. Stripe's privacy policy applies.
  • Usage metadata. We log letter-generation events (token counts, category, plan) to operate fair-use limits and monitor costs. The free analyzer logs an IP-based daily counter to prevent abuse.

2. What we do NOT do

  • No selling, renting, or sharing of your data with data brokers or advertisers.
  • No advertising trackers.
  • Your uploaded document files never touch our servers — extraction is client-side.

3. Retention & deletion

Your appeals and letters are retained until you delete them or your account. Account deletion removes your appeals, letters, and personal data from our database. Billing records required for accounting are retained by Stripe per its policies.

Mobile generations are not retained. When the iOS app asks for a letter, the document text and your form details are used to produce it and are not written to our database. We keep only non-content metadata for each generation: category, model, token counts and cost, plan, IP address, and time.

To delete your account on the web, use the Account page. In the iOS app, useAccount → Delete account. Deletion is permanent and immediate: it removes your account, your devices, any unused letter credits, and any stored appeal data, and cannot be undone. If you signed in with Apple, deletion also revokes that sign-in — and if the revocation cannot be completed we delete nothing and ask you to try again, so your account is never left half-removed. You can also email privacy@appealiq.company.

4. Security

All traffic is encrypted in transit (HTTPS). Data at rest is stored in managed, encrypted databases. Sessions are database-backed and can be revoked by signing out.

5. Contact

privacy@appealiq.company

AppealIQ is not a law firm and does not provide legal advice.