BillWitness Privacy Policy

Effective date: 2026-05-16 · Last updated: 2026-05-16

Short version: BillWitness stores all of your medical billing records — bills, EOBs, line items, communications, document scans, notes — only on your device. We have no servers, no analytics, and no AI. We never see your records. The only network communication the app performs is with Apple's StoreKit servers to verify your subscription status.

1. Who we are

BillWitness is published by an independent iOS developer (Apple Developer Team ID ZM8LF8494F). For any privacy-related question, write to captainlongevity@gmail.com.

2. Information we do not collect

We do not collect, transmit, store on a server, sell, share, or analyze:

Your bills, EOBs, line items, CPT/HCPCS codes, modifiers, error flags, disputed amounts, or any billing data
Your provider names, NPIs, TINs, addresses, billing department contacts, or insurance plan details
Your member ID (only the last four digits are stored on-device by the app at your option)
Your scanned documents, photos, or audio recordings of provider calls
Your name, email, phone, or any account identifier
Device identifiers (IDFA, IDFV) for advertising or tracking
Location data
Crash reports or analytics events sent to any third party

3. Information stored on your device

All records you enter are stored locally on your iOS device using Apple's SwiftData framework. This data is included in your iCloud or iTunes device backup if you have device backup enabled. We do not have access to your device backups; only Apple does, under their published privacy terms.

4. On-device processing

Several features process data locally on your device only:

Document scanning (Pro) uses Apple's VisionKit framework on-device. Scanned images and any extracted text are never transmitted off-device.
Three-way reconciliation (Pro) is rule-based arithmetic that runs entirely on your device. No AI, no machine learning, no cloud processing.
Cross-bill duplicate-charge detection (Pro) is rule-based grouping by CPT code that runs entirely on your device.
CPT/HCPCS verification uses a bundled reference catalog of code descriptions packaged with the app. No network lookups occur during entry.
NSA IDR deadline tracking (Pro) uses Apple's UserNotifications framework. Notifications fire locally on your device; no remote push servers are involved.
App Lock (Pro) uses Apple's LocalAuthentication framework. Your Face ID or Touch ID biometric data never leaves Apple's Secure Enclave; the app only receives a success or failure signal.

BillWitness does not use any artificial intelligence, machine learning model, or remote analysis service on any of your medical billing data.

5. Subscriptions and StoreKit

BillWitness offers an optional Pro subscription (Annual or Monthly) and a non-consumable Lifetime in-app purchase via Apple's StoreKit 2. When you subscribe, purchase Lifetime, restore a purchase, or when the app verifies your entitlement, your device communicates directly with Apple's servers. BillWitness receives only the entitlement status (active or inactive) and a purchase identifier. We do not see your Apple ID, payment method, billing address, or transaction history. Apple's handling of subscription information is governed by Apple's Privacy Policy.

5a. Device backup is your archive's lifeline

BillWitness has no cloud sync and no remote copy of your records. If you lose your device without a backup, your archive is gone. We strongly recommend keeping iCloud Backup or iTunes / Finder device backup on for the iPhone you use this app on. As a separate safety net, Pro subscribers can use Settings > Privacy & Backup > Export Archive to generate a JSON archive backup file that you can save anywhere (Files, AirDrop to another device, email to yourself, USB drive). Restore from Backup imports a previously exported archive.

6. Permissions the app requests

Camera — only when you tap a scanner entry point in the Pro Document Vault.
Photo Library — only when you import a bill, EOB, or receipt photo from your library.
Face ID — only after you enable App Lock in Settings (Pro).
Notifications — only after you enable IDR deadline or backup-reminder notifications.

You can revoke any of these permissions at any time in iOS Settings > BillWitness.

7. Children's privacy

BillWitness is not directed to children under 13. We do not knowingly collect any information from anyone, including children. The app's age rating reflects this.

8. Data retention and deletion

Because all data is stored only on your device, you control retention completely. To delete all records, delete the app from your device. There is no remote copy for us to delete.

9. International users

The app does not transfer your data internationally because it does not transfer your data anywhere. The app is published in English and is primarily marketed in the United States.

10. HIPAA and regulated use

BillWitness is a personal records organizer used by patients on their own behalf. It is not a HIPAA-covered platform, not a medical billing service, not a medical coding service, and not a legal service. Because the app stores your records only on your device and we receive no copy, we are not a HIPAA-covered entity with respect to your records.

11. Changes to this policy

If we ever change how the app handles data, we will update this policy and surface the change in the app before the change takes effect. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

Privacy questions: captainlongevity@gmail.com