Plain language
Privacy
The short version: we store the answer, not the person, and we never ask for the identifiers that would make this data dangerous.
What we never collect
Not "collect and protect". Do not ask for, do not accept, do not store:
- Social Security numbers
- Medicare, Medi-Cal or other insurance numbers
- VA file numbers or claim numbers
- Bank account or payment details
- Medical records or diagnoses
- Passwords or agency login details
No screening tool needs any of it. Holding it would create a target and buy nothing.
What we do collect
- Answers you give the check. Ranges and categories, not figures: an age band rather than a birth date, an income band rather than an amount.
- The result. Which programs came back, with which outcome, and the version of the engine that produced it. This is what lets us show our working if an answer is ever questioned.
- County level geography. ZIP resolved to a county.
- An email address, only if you ask for a saved link. Stored against the plan, not against your answers.
- Narrow usage events. Which pages and steps get used, with a random per-visit identifier. No IP address, no user agent string, no fingerprinting, no advertising trackers.
Saved plans
A saved plan lives behind a long random link. That link is the only credential, so treat it like a key. We email the link and never the contents, because a mail account is not a safe place for a household's circumstances.
Plans expire. The expiry date is stored on the record itself rather than left to a promise in a policy document, and the page is served with headers instructing search engines not to index it.
Deletion
Email [email protected] with the plan link, or the email address you used, and we will delete it. You do not have to give a reason and we will not ask for one.
We do not sell, rent, share or broker personal information. There is no advertising network on this site.