Privacy

EOB Reader is a portfolio project. Use fictional documents only. Do not upload real patient information. This page describes what the code does today. It is not a HIPAA notice and not a Business Associate Agreement.

Account

• Sign-in is Google only. This app does not collect or store a password.
• Practice name and preferred practice-management system, if you save them.
• There is no checkout and no payment processor in this app.

Documents

• The PDF you upload, in a private storage bucket under your account.
• The text taken from that PDF, and the fields the model returns (payer, patient, claim, check, and line items).
• That text is sent to Google Gemini, then Groq, then OpenRouter, skipping any provider whose API key is not set. If AI_PROVIDER=ollama, it goes to a local Ollama server instead. No zero-retention setting is applied in this code.
• Feedback text you submit from Settings.
• The public demo is fictional and stays in the browser. It is not written to your account.

What is not true of this project

• It is not HIPAA compliant, and it does not sign BAAs.
• Files are not auto-deleted on a timer.
• Access is not written to an audit log.
• Extraction is not guaranteed, and model output can be wrong.

How long data stays

Until you delete a batch, or until the rows are removed from the database. There is no self-serve “delete my account” button. Email shanifadhil33@gmail.com if you want an account removed.