BillGuard is published by an independent iOS developer (Apple Developer Team ID ZM8LF8494F). For any privacy-related question, write to captainlongevity@gmail.com.
We do not collect, transmit, store on a server, sell, share, or analyze:
All case data you enter is stored locally on your iOS device using Apple's SwiftData framework. This data may be included in your iCloud or iTunes device backup if you have device backup enabled. We do not have access to your device backups.
Device-backup contents and recovery depend on your system settings, a successfully completed usable backup and Apple’s restoration process; enabling backup alone does not guarantee recovery of every record or original file. We cannot retrieve or restore your device backups.
BillGuard does not request, store, or use your insurance carrier login credentials. The app does not connect to any insurance carrier API, portal, or claims system. All bill, EOB, denial, and payment information is entered by you (typed or photographed). This is by design — many of our users are mid-fight with the carrier they would otherwise be asked to log into.
The app does not run any artificial-intelligence or machine-learning model on your bills, EOBs, denial letters, or call notes. There is no OCR, no document parsing, no automatic categorization. You read the documents; you enter the values. We make no decisions about your case.
The following features process data locally; the Terms distinguish free controls from paid reports:
BillGuard uses Apple StoreKit for a monthly subscription and a one-time non-consumable Lifetime purchase. Loading products, checking offer eligibility, purchasing, restoring and verifying access communicate with Apple. The app reads verified product and entitlement information, including expiration or revocation status where applicable, and keeps local access state. Apple processes payment; BillGuard does not receive your payment-card details or Apple Account password. Current and supported historical purchase access depend on verified transactions. See the BillGuard terms for the available plans and subscription handling.
You can revoke any of these permissions at any time in iOS Settings > BillGuard.
BillGuard is not directed to children under 13. The app has no child account or developer-operated record collection. Contact support if a child has sent personal information to us. The app's age rating reflects this.
Deleting a family member also deletes that member's bills and the bills' linked payment, call, denial and payment-plan records after a successful save. Deleting a bill removes that bill's linked history. There is no Recently Deleted or full-database restore; CSV and PDF exports preserve only their supported readable fields.
Removing the App normally removes its local container, not independently kept original media, exported files, recipient copies or older backups. Manage those copies separately. Device-backup recovery requires a usable completed backup; the developer has no record archive to retrieve.
The App does not route records through a developer-operated record server. Apple services, legal-page hosting, support correspondence and any sharing destination you choose may process information outside your country under their own policies. Those services are separate from the App’s local record storage. The app is published in English and is primarily marketed in North America.
BillGuard is a personal documentation tool. The Patient Rights guide and any in-app text about appeal deadlines, denial reasons, or insurance procedures is general information only. It is not legal, financial, medical, or insurance advice. Consult a licensed advisor for your specific case.
If we ever change how the app handles data — for example, if a future version adds an opt-in cloud backup feature — we will update this policy and surface the change in the app before you can use that feature. The "Last updated" date at the top of this page reflects the most recent revision.
BillGuard's widget displays locally prepared summaries of app records. The app and its widget exchange the relevant summary and preferences through an on-device shared container; this is not a developer-operated record upload. Information displayed by a widget can be visible to people able to view the Home Screen or Lock Screen where it is placed. Use the widget and device display settings to control that visibility. Screenshots and independent copies remain separate from the records you later edit or delete.
Privacy questions: captainlongevity@gmail.com
These BillGuard legal pages are served by Vercel. Opening a page sends ordinary request information, such as IP address, browser information and the requested URL, to the host for delivery and security; see Vercel's Privacy Notice. These pages contain no advertising or analytics scripts. If you email support, we receive the address and information you choose to send to answer your request. Avoid including sensitive records that are not needed for that request.
CSV export and per-bill Markdown summaries are available without Pro. These readable, unencrypted files contain supported record fields rather than original bill/EOB/denial photos or a complete copy of App settings. Sharing sends the selected file to your chosen destination. There is no full-database CSV import or Recently Deleted recovery. Deleting local records does not erase original Photos, exports, recipient copies or older device backups. Restore Purchases restores eligible access, not medical-billing records.