← Back to Helen

Privacy Policy

For Helen LLC · Last updated October 16, 2026

The short version: Helen is designed to be stateless. Helen has no saved card history. Vercel and Anthropic process uploads and explanations under their retention policies. Closing Helen does not delete provider records or copies you save.

1. Introduction

For Helen LLC (“Helen,” “we,” “us,” or “our”) operates the insurance card scanner service at forhelen.com (“Site” or “Service”). This Privacy Policy explains how we handle information when you use our Service.

2. Information We Process

Information You Provide During a Session

When you use Helen, you upload or photograph an insurance card. This card may contain insurance company name and plan details, member name and member ID, group number, copay, deductible, and coinsurance amounts, provider network information, and other benefit details printed on the card.

Helen processes uploads to provide explanations. The application has no database of cards or saved scan history. Vercel hosts the service and Anthropic processes images and text. Their retention policies also apply.

Information We Do NOT Collect

  • We do not require an account or a separate name or email field. Your uploads may contain names and other identifying information
  • We do not use cookies for tracking or analytics
  • We do not use advertising trackers or pixels
  • The application does not use browser analytics or advertising identifiers. Hosting and security providers process technical request information, which can include IP addresses
  • We do not build user profiles
  • Your browser stores your language preference locally
  • The Helen application does not save card images to a database

3. How Your Information Is Processed

When you scan a card:

  1. Your browser captures or uploads the card image.
  2. The card image is sent to our service for processing during your session.
  3. The card image and extracted text are sent to Anthropic’s Claude API (our AI processing provider) to generate a plain-English explanation of your benefits.
  4. The explanation is returned to you in your browser.
  5. Helen does not save a card history. Closing your session does not delete records held by service providers or copies you save, download, or add to Wallet.

Optional photos, screenshots and PDFs of insurance benefits, bills, explanations of benefits and denial notices follow the same processing path through Vercel and Anthropic. Helen does not store these documents or their explanations. Provider retention policies apply. PDF explanations include page references. Photo explanations cite machine-read text, which can contain reading errors; check it against the original image. These explanations do not verify current coverage, an amount currently owed, or an appeal outcome.

4. Third-Party AI Processing

Helen uses the Anthropic Claude API to process insurance card images and text and generate plain-English explanations. When this data is sent to Anthropic for processing:

  • Anthropic’s data handling and privacy practices apply to that processing
  • Anthropic’s API usage policy is available at anthropic.com/policies
  • Model training and data retention are different. Helen does not promise zero retention at Anthropic. Its standard API policy provides for deletion within 30 days, with exceptions for agreed terms, policy enforcement, legal requirements, and certain features. See Anthropic’s retention policy.

5. Data Retention

No saved card history in Helen. The application does not write uploaded images or explanations to a database, and application logs exclude card contents. Service providers may retain processing data or operational records under their own policies. Vercel hosts requests and provides traffic and security services. See Vercel’s privacy policy.

Copies you save or share, including Wallet passes, remain under your control and the policies of the apps and services you choose.

6. Data Security

We take reasonable measures to protect it during your active session:

  • Data is transmitted using HTTPS encryption
  • Session processing uses secure, isolated environments
  • We follow industry-standard security practices for web applications

7. Children’s Privacy

The Service is not directed at children under 13. We do not knowingly process information from children under 13. We do not require an account or verify a user’s age.

8. Your Rights

Contact us with access, deletion, correction, or other privacy requests. Helen has no saved card history to retrieve. Provider records and copies saved to your device may require separate steps; stateless processing does not remove your privacy rights.

State Consumer Health Data Laws

Certain states, including Washington (My Health My Data Act), Connecticut, and Nevada, have enacted consumer health data privacy laws that can apply to consumer health services outside HIPAA. Applicability and rights depend on the law and circumstances. These rights can include:

  • Right to know what consumer health data is collected and how it is used
  • Right to withdraw consent for the collection or processing of your health data
  • Right to deletion of your consumer health data
  • Right to be free from discrimination for exercising your privacy rights

To stop future uploads, stop using the scanning features. Contact us about data already processed or privacy requests. Closing a session does not itself delete provider records.

Other Jurisdictions

If you are a resident of California, the European Economic Area, or another jurisdiction with specific privacy rights, please note that you can contact us to exercise applicable privacy rights. We will explain what records we can access and any provider-specific steps.

9. Do Not Track

Helen does not track users across sessions or across websites. We honor Do Not Track signals by default because we do not engage in tracking.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new “Last Updated” date. We will obtain additional consent when required before using information for a new purpose.

11. HIPAA Notice

Helen is designed as a consumer tool that helps individuals understand their own insurance cards. Do not treat this service as a HIPAA-compliant clinical system. Uploads are processed by third-party providers as described above.

For institutional or enterprise use cases, separate compliance arrangements would be required. Contact us for more information.

12. Contact Us

If you have questions about this Privacy Policy, contact us at:

For Helen LLC
Email: legal@forhelen.com
Website: forhelen.com

13. Governing Law

This Privacy Policy is governed by the laws of the Commonwealth of Pennsylvania.

Terms of Service →Try Helen →