Health data
Consumer health data policy
Some of the mail people scan is about their health: Medicare notices, explanations of benefits, pharmacy and hospital bills. This page says what Postal Buddy does with that information. It sits beside our privacy page and follows Washington's My Health My Data Act and similar state laws. A lawyer is reviewing it before Postal Buddy opens.
What health information we collect
Only what is printed on the letters you choose to scan: who sent the letter, a short plain summary of it, an amount and a due date if there is one, and the last 4 digits of an account number. Full Medicare, Social Security, account and card numbers are cut to the last 4 digits before anything is saved. The photos of the pages are locked (encrypted) before they are stored.
Why we collect it
To do what you asked when you scanned the letter: tell you what it is, what to do about it, and where to file the paper. Nothing else. We never use it for advertising, and we never sell it.
Where it comes from
From the letters you, or a family member you said yes to, scan in the app. We do not buy or receive health information from anyone else.
Who we share it with
- Family members you choose. Only after you say yes, on your own phone, to each person. The screen where you say yes tells you they will see your letters, health letters included. You can remove anyone at any time, and they stop seeing your mail right away.
- The company that reads the photo. Each photo is read by an AI service (today Cloudflare Workers AI) whose terms say it does not keep the photo or use it to train its models. It acts only on our instructions.
- Our hosting. Cloudflare stores the encrypted data for us, under contract.
Nobody else. No advertisers, no data brokers.
How long we keep it
In the app, page photos: 30 days on the free plan, up to 2 years on Plus. The free scam check on this website keeps no photo at all. Letter summaries: until you delete the letter or the household. Deleting the household removes everything within 30 days.
Your rights
- See what we hold about you, and who we shared it with.
- Take back your consent to sharing: remove the family member in the app.
- Delete it: delete a letter, or use Account, then Delete all my mail. We confirm within 45 days.
You do not need an account to ask. Write to us from the app (Settings, then Privacy) and we answer within 45 days. If we say no, you can ask us to look again, and then go to the Washington State Attorney General.
Last updated September 2026. Questions go to hello@postalbuddy.lunarwerx.com.