Privacy Policy

1. The Short Version#

• We only collect what we need to help you find and apply for benefits.
• We never sell your information, use it for ads, or use it to train AI.
• If you ask us to, we send your application to the county. We don't give your information to insurance companies, insurance agents or data brokers.
• You can download your records or delete your account yourself at unihealth.one/me/records. For anything else, email hello@unihealth.one.

2. Who We Are#

unihealth.one is run by UniHealth Technologies, Inc., a Delaware public benefit corporation. We help people in California, starting with Santa Clara County, find and apply for benefits such as Medi-Cal, CalFresh, Medicare Savings Programs and Extra Help. We do not sell insurance on this website. This policy covers the website and the services behind it.

3. If You Use the Free Check#

You can check what you might qualify for without an account. Your answers, such as your age, ZIP code, household size, income and current coverage, are sent to our servers to work out your results. They are not saved to a record about you.

• Your own words. If you describe your situation in a sentence, a computer program on our own machines turns it into answers you can check.
• Photos and PDFs of letters or cards. A PDF is turned into pictures in your browser. Each picture is read by a program on our own machines to fill in answers. We don't keep the picture. What the program read is kept in memory for up to one hour, so the same picture isn't read twice, and is then discarded.
• Application worksheets. If you ask for a worksheet and add your name, address or phone, we use them to fill in the worksheet and don't save them. The file stays wherever you save it.
• Searches. What you type to look up a doctor, program or place is used to answer the search and isn't saved to a record about you. It is part of the page address, so it can appear in our server logs (see Visiting Our Website).
• Messages to us. If you use the contact form, we receive your name, email address and message by email so we can reply.

4. If You Have an Account#

When we help you apply, you have an account with us. Accounts are open by invitation during the pilot. We keep:

• your email address, so you can sign in;
• the answers you give about you and your household, such as income, health coverage and care needs, and their history;
• documents you upload, such as ID cards, letters and pay stubs, and the facts we read from them;
• the applications we prepare, your permission for us to act for you, and what you signed;
• updates about your applications, and letters from the county that you share with us;
• a record of who opened or changed your case, and when.

Sensitive details, such as Social Security numbers, are locked with strong encryption when we save them. Uploaded documents are kept in encrypted storage.

5. How We Use It#

• To find programs you may qualify for.
• To fill out and file the applications you ask for, and to follow up on them.
• To send you a short email when something in your case needs you, and a sign-in link when you ask for one. These emails never include your case details; you sign in to see them.
• To answer messages you send us, and to send county or state updates you asked for.
• To keep the service safe and working.

6. Computer Reading (AI)#

We use a computer program to read documents you upload and to turn your own words into answers. It runs on computers UniHealth operates, not at an outside AI company. If our computers can't do the reading, the request fails instead of going anywhere else. The program can make mistakes, so you see what it filled in and can change it, and a person on our team checks important facts with you before anything is filed. We do not use your information to train AI.

7. Who Else Sees Your Information#

• The county and state, only when you ask us to file an application for you. We file through BenefitsCal, and the county then handles your application under its own rules.
• Companies that run parts of our service, only to do that job:
  • Vercel runs our website.
  • Cloudflare connects our servers to the internet and stores uploaded documents.
  • Amazon Web Services stores our encrypted backups.
  • Resend sends our emails: sign-in links, short case notices and messages from our contact form.
  • Google hosts our email inbox.
  • Tailscale runs the encrypted private network between our own computers. It cannot read what passes through it.
  • Mapbox draws our maps. It receives your browser's internet address and public addresses of offices, never your answers or documents.
  They handle information for us under data-protection terms and may not use it for their own purposes.
• When the law requires it, for example a valid court order, or to protect someone from serious harm.

We do not sell or share your information for advertising. We don't give it to insurance companies, insurance agents or data brokers.

8. Who at UniHealth Can See It#

Only UniHealth staff who are helping with your case, and only after you give permission. Staff must sign in with a passkey, a device-based key that can't be phished, and every time someone opens your case it is logged.

9. How Long We Keep It#

• Uploaded documents: 90 days after the county decides the application they support. If no application is filed within 90 days of the upload, 90 days after the upload. We keep the facts we read from them with your case.
• Applications we filed for you: as long as the law requires, and at least 3 years after the last application we filed, in case you need proof of what was filed. Then we delete the whole case.
• A case with nothing filed: while your account is open. If your account is closed because it wasn't used, we delete the case 3 years later.
• Your account: until you delete it. If you don't sign in for 24 months, we close it and delete your email address from it. We email you 30 days before we do.
• Sign-in links: they work once and expire after 20 minutes. The record of the link holds your email address and a scrambled (hashed) form of the internet address that asked for it, used only to stop someone flooding an inbox with links. It is deleted 30 days later.
• Records of the emails we sent you: 13 months. They hold internal ID numbers, not your address or the message.
• The record of who opened or changed a case: 3 years. It holds internal ID numbers, not your name or answers.
• Your privacy requests: 3 years, so we can show what we did.
• Backups: information we delete can stay in our encrypted backups for up to 35 days.
• Messages you send us: as long as we need to answer and follow up.
• Waitlist email: until you unsubscribe or ask us to remove it.

If there is an appeal, a complaint or a legal requirement to keep records, we may keep the related case until it is resolved, then the schedule above resumes.

10. Download, Correct or Delete#

You can:

• download your records at any time at unihealth.one/me/records;
• delete your account and records yourself on the same page;
• ask us to correct anything, or to stop acting for you, by emailing hello@unihealth.one.

When you delete your account, we close it, remove your email address, and right away delete your answers, what we read from your documents, the applications we prepared, the emails we queued for you, and your uploaded documents. If we already filed an application for you, we keep that case's record for the time in How Long We Keep It, but still delete your uploaded documents now. If a legal hold applies, we keep the case until it ends. The page tells you what we deleted, what we kept and until when.

If you live in California, you have the right to know what we collect, to have it deleted or corrected, and not to be treated differently for asking. Email hello@unihealth.one. We check that the request comes from you using your account email, and we answer within 45 days. We honor Global Privacy Control; we don't sell or share information in any case.

11. Expansion Waitlist#

If you ask to be told when UniHealth opens in another county or state, we store your normalized email address, the signup purpose and version, and the time you joined. We do not attach health answers, an IP address, or browser information to the waitlist record.

• We use the address only for UniHealth county or state availability updates.
• We do not share the expansion waitlist with program agencies, insurance companies or data brokers.
• You can unsubscribe from an update or ask us to remove the address at any time.

12. Visiting Our Website#

• Our servers and hosting companies record basic visit information, such as the internet address, the page and the time, for security and troubleshooting. These logs are kept for a limited time.
• We count visits to broad page types with analytics we host ourselves. It sets no cookies, stores no internet addresses, and respects Do Not Track and Global Privacy Control.
• If you sign in, we set one secure cookie to keep you signed in, for up to 8 hours. We use no advertising or tracking cookies. Your browser may also remember a few settings, such as a tip you closed.
• Adding a PDF loads a PDF reader from Cloudflare's code library into your browser.

13. HIPAA#

UniHealth helps people apply for benefits. We are not a doctor, hospital or health plan, so we are not a "covered entity" under the federal HIPAA law. We still protect your health information as this policy describes.

14. Security#

Connections use HTTPS. Sensitive details are encrypted when saved, documents and backups are kept in encrypted storage, and access to a case needs your permission. No system is perfectly secure. If we learn your information was exposed, we will tell you as the law requires.

15. Children#

This service is for adults and the people helping them. We do not knowingly collect information from children under 16.

16. Changes to This Policy#

When this policy changes, we update the date at the top. If we make a big change, we will email account holders before it takes effect.

17. Contact Us#

Questions and requests: hello@unihealth.one or the contact page.

UniHealth Technologies, Inc.