Privacy Policy
Last updated: May 26, 2026
1. Information we collect
My Policies collects only the policy metadata you enter (type, company, monthly amount, renewal date, optional memo) and policy photos or tax-deduction PDFs you choose to attach. Name and email are collected only when you opt into family sharing.
2. How we use your information
Collected data is used solely to store your records, sync them in read-only between family members, send renewal reminders, and detect premium hikes. We never sell your data, never serve ads, and never refer you to insurance agents.
3. Data storage region (EU)
Policy metadata and family-sharing data are stored encrypted in Supabase's EU region (Frankfurt). A local cache is also kept on your device for offline access. Under the EU General Data Protection Regulation (GDPR), you may request deletion and a JSON export of your data at any time.
4. HIPAA does not apply
We are not a healthcare provider and not a HIPAA-covered entity in the United States. If you choose to record a health-insurance ID in a memo field, that text is stored only on your device and in the encrypted backend.
5. OCR and AI processing
The Pro OCR feature extracts text from policy photos locally via Apple's Vision Framework, then sends only the extracted text (no image) to OpenAI gpt-4o-mini for structuring. We always show an explicit consent prompt before sending. We never send the image itself externally.
6. Notifications
We send push notifications for renewal reminders, premium-hike detection, monthly premium totals, and (Japan only) tax season reminders. You can turn notifications off any time from iOS Settings.
7. Analytics
We collect only anonymous launch statistics and crash reports. We never use your policy content or amounts for analytics.
8. Children
My Policies is not directed at children under 13. We do not knowingly collect personal information from children under 13.
9. Right to delete and export
You may request full account and data deletion, plus a JSON export, from inside the app's settings or by emailing info@nextcode.ltd. We respond within 30 days.
10. Contact
For privacy questions, email info@nextcode.ltd.