Privacy Policy

MedExpenseHero (“the Service”) handles information that is sensitive by nature: medical expense records and financial details for you and your family. This policy explains what we collect, why, and the rights you have over it. It is written to align with the Personal Information Protection and Electronic Documents Act (PIPEDA) and its ten fair information principles.

1. What we collect

• Account information: your name, email address, date of birth, province/territory, and a hash of your password (we never store the password itself).
• Tax-calculation inputs: net income figures (Line 23600) for you and any family members you add, relationship types, dates of birth, Canadian residency and disability certificate (T2201) status, and dates of death where you record them.
• Medical expense records: dates, amounts, reimbursements, providers, categories, prescription reference numbers, notes, and any receipt images or PDFs you upload. This is personal health information and we treat it accordingly.
• Consent record: the date and time you accepted the Terms of Service and this policy.

We collect only what you type or upload. The Service has no advertising or analytics trackers and does not collect browsing or device profiles.

2. Why we collect it (purposes)

Your information is used exclusively to:

• operate your account and authenticate you;
• calculate the estimates the Service exists to provide (thresholds, claim periods, claimant comparisons, credit estimates);
• generate the exports you request (PDF, CSV, JSON);
• store your receipts so you can retrieve them.

We do not sell, rent, or share your information with third parties for marketing. We do not use your data to train machine-learning models. We do not send marketing email.

3. Consent

You provide consent when you create an account and accept this policy. Entering information about family members is your representation that you are authorized to do so. You may withdraw consent at any time by deleting your account (see section 7); the Service cannot be provided without the data it needs, so withdrawal ends the Service.

4. Cookies

The Service uses a single, strictly necessary session cookie to keep you signed in. It contains a signed session token, expires after 7 days, and is not used for tracking, advertising or analytics. No third-party cookies are set.

5. Safeguards

• Passwords are stored only as bcrypt hashes.
• Sessions use signed, HTTP-only cookies.
• All data is scoped to your account: expenses, family members and receipts are only retrievable by the signed-in account that created them.
• Receipt files are stored in per-account storage and served only to their owner.
• The Service is intended to be deployed exclusively over HTTPS (TLS) with encrypted storage at the hosting layer.

No system is perfectly secure. If we become aware of a breach of security safeguards involving your personal information that creates a real risk of significant harm, we will notify you and report to the Office of the Privacy Commissioner of Canada as required by PIPEDA.

6. Retention

We retain your data for as long as your account exists, because the Service’s purpose is multi-year record-keeping (the CRA can request supporting receipts for several years after filing — commonly cited as 6–7 years). You decide when that purpose ends: deleting individual records or your entire account removes them.

7. Your rights: access, correction, portability, deletion

• Access & correction: everything you have entered is visible and editable in the app itself.
• Portability: you can export your complete data (profile, family members, all expenses, claim periods) at any time from the Account page, in JSON format, plus filing exports in PDF/CSV.
• Deletion: the Account page includes self-serve deletion of your entire account — profile, family members, expenses, claim periods and uploaded receipts are permanently removed immediately. If the deployment maintains backups, backup copies age out within the backup retention window (no longer than 30 days).

8. Disclosure

We disclose personal information only: (a) back to you, through the app and its exports; or (b) if required by law, such as a court order — in which case we will disclose the minimum required and, where lawful, notify you.

9. Children

The Service is for adults (age of majority). Information about minors (for example, a child’s dental expenses) is entered and controlled by the account-holding parent or guardian for tax-credit record-keeping purposes only.

10. Accountability and complaints

Privacy inquiries, access requests and complaints can be directed to privacy@medexpensehero.example. We will respond to written requests within 30 days. If you are not satisfied with our response, you have the right to complain to the Office of the Privacy Commissioner of Canada. Residents of provinces with substantially similar private-sector privacy laws (such as Quebec, British Columbia and Alberta) may also contact their provincial privacy commissioner.

11. Changes to this policy

If this policy changes materially, the effective date above will be updated and the change will be noted in the application before it takes effect. Continued use after the effective date constitutes acceptance; you can always export your data and delete your account instead.