Privacy Policy
Haggle helps you check bills for possible billing errors and dispute them, appeal insurance denials, claim travel refunds, and learn your rights. This policy explains what we collect, why, who processes it, and the choices you have.
What we collect
- Account details: your name, email address, and a password handled by Firebase Authentication. We never see your password.
- Bills and documents: photos you upload (bills, insurance denials, travel receipts), the line items and claim details we read from them (such as insurer, claim or member number, flight number, or booking reference), the flags we raise, and fair-price results for your line items. These can contain medical, financial, and account information.
- Cases: dispute and appeal letters you approve, the recipient address you enter, call requests, provider phone numbers, case timelines, and the outcome of each AI-assisted call (a short summary, amount saved, reference number, representative’s name, and next steps).
- Your phone number for calls: if you give a call-back number, it is sent to our calling providers so Harvey can connect you if the provider needs to verify the account holder. We store only its last four digits on our servers; the full number stays on your device until you sign out.
- Voice (Rights Coach): when you talk to the Rights Coach, your microphone audio is streamed to ElevenLabs to transcribe and answer you in real time. The audio is not recorded.
- Questions and locations you type or say: your rights questions, the location you enter (such as a city or state), and hospital names you search for charity-care programs.
- Scam checks: the message, sender and screenshot you submit to Scam Shield are sent to Google Gemini to be judged and are not stored. We keep only the verdict, the type of scam, the organization it impersonated, and any call-back number the message told you to ring.
- Scam Trap calls: when you send Scam Trap to a flagged number, we store the character you chose, the last four digits of that number, and how the call went (its length, who the caller claimed to be, what they asked for, and a one-line highlight).
- Scam Shield letters: the company or collector name and email you enter, and the facts you give about the calls or the debt, used to write your letter and saved with its case.
- Provider replies and outcomes: when you add a provider’s reply to a case, the text you paste or the photo you take (a statement, email or letter), what our AI read in it (the kind of reply, a short quote, any amount, date or requested items), and what you confirm. We also store the outcome you log (approved or received, the amount, its kind, and whether you attached a document), with any corrections you make.
- Purchases: whether you have Haggle Plus. Payment is handled entirely by Apple or Google; we never receive your card details.
- Usage and app events: how long each AI call ran and whether an email Haggle sent for you went out (to apply your plan and measure what the service costs to run), and a short record of key steps you take in the app, such as an audit finishing, a reply being added, or a reminder being opened, with the app version. These records never include your bills, letters, replies, email address or call transcripts. They stay with Haggle (no analytics company receives them) and are deleted with your account.
- Device data: basic technical information needed to run the app (device model, operating system, language, and time zone), and a push notification token if you allow notifications, so we can tell you how your cases and calls are going.
- Crash reports: when the app crashes, technical details (device model, OS version, app version, and the error) linked to a random account ID. Crash reports never include your bills, letters, name, or email.
Some things never leave your phone: the income you enter for a charity-care check, and the location you set for the Rights Coach (it is sent only with a question you ask, and cleared when you sign out). We don’t use your device’s GPS location.
How we use it
- To read your bill or document and flag possible overcharges or claim problems.
- To compare your charges with typical prices, and to find a hospital’s financial-assistance program.
- To draft dispute and appeal letters and, only when you approve, send an email or place an AI-assisted call for you.
- To answer your questions about consumer rules where you are.
- To check whether a call, text, email or voicemail is a scam, write robocall and debt-collector letters, and, only when you ask, call a scammer’s number back to keep them busy.
- To keep your cases in sync across your devices.
- To send notifications and in-app messages about your cases: when a representative picks up, when a call ends, and reminders about disputes still waiting on a reply.
- To prevent abuse, such as rate-limiting emails and calls.
We do not sell your data, use it for advertising, or use your bills, documents, or conversations to train AI models.
Who processes it
- Google Firebase / Google Cloud: accounts, storage, database, and server functions.
- Google Gemini API: reads your bills, documents and the provider replies you add, drafts letters and follow-ups, checks typical prices, looks up charity-care programs, and answers rights questions. Some requests use Google Search to find current public sources; for those, only the question, location, hospital name, or line-item descriptions, codes, and amounts are sent, not your name or email. We use Google’s paid API service, under which Google does not use your content to train its models.
- Resend: delivers dispute emails you ask Haggle to send.
- ElevenLabs and Twilio: place AI-assisted calls you approve, and run the voice Rights Coach. For calls, they receive your first name, the provider’s number, your negotiation plan (the charges you dispute and why), and your call-back number if you gave one. For the Rights Coach, they receive your voice, your first name, the location you entered, and a one-line summary of your latest scan. The assistant always says it is an AI. Call and coach audio is not recorded. ElevenLabs transcribes conversations as they happen so the assistant can respond, and keeps transcripts for up to 30 days. We delete call transcripts sooner if you delete your account.
- Scam Trap (ElevenLabs and Twilio): receive the flagged call-back number, the character you chose, and the type of scam. They never receive your name, number, or account details. Scam Trap characters don’t announce that they are an AI, but say so if asked. Call audio is not recorded; transcripts are kept by ElevenLabs for up to 30 days.
- RevenueCat, Apple, and Google: manage Haggle Plus purchases.
- OneSignal and Expo: deliver push notifications and in-app messages about your cases. OneSignal receives your random account ID (not your name or email), your device’s push token and device data, and a few facts used to time reminders: the amount found on your latest bill, when your latest dispute went out, the amount you’ve recovered, and when you send a dispute, start a call, or log a refund. It also carries the text of each alert, which can name the company a case is with and a deadline printed on your document. It never receives your bills or letters. Scheduled reminders are cancelled when you log an outcome, and your OneSignal profile is deleted when you delete your account.
- Sentry: receives crash reports so we can fix bugs.
How long we keep it
- Bill and document images, including photos of provider replies, are deleted automatically 30 days after upload.
- Audit results, claim details, fair-price results, cases, and call outcomes are kept until you delete your account.
- Rights questions and charity-care searches are not stored on our servers, only a daily usage count.
- Scam check messages and screenshots are never stored. Scam check verdicts and Scam Trap results are kept until you delete your account.
- Transcripts held by ElevenLabs are deleted after 30 days. A copy of each AI call’s transcript is saved with your case so you can read what was said, and is deleted automatically 30 days after the call. Call transcripts are deleted sooner when you delete your account.
- You can delete your account, bills, images, cases, and call transcripts at any time in Settings › Delete account. Deletion is permanent. Purchase records are kept by Google Play, Apple, and RevenueCat under their own policies.
Your choices and rights
You can review your cases in the app, delete your account in the app, turn off reminders in your device settings, and use every feature except the voice Rights Coach without granting microphone access. Depending on where you live, you may have rights to access, correct, export, or delete your data. Email us to use them.
Security
Data is encrypted in transit and at rest by our cloud providers. Access to your bills and cases is limited to your signed-in account.
Children
Haggle is not intended for anyone under 18.
Not legal advice
Haggle is not a law firm and does not provide legal advice. Citations in letters and Rights Coach answers are informational and may not apply to your situation.
Contact
Questions or requests: support@spacenos.com