Privacy Policy

A parent’s Medicare and benefits notices (an Annual Notice of Change, plan letters, benefit statements, and the coverage details inside them) are among the most sensitive things a family handles. This Privacy Policy explains what NoticeOfChange (“we,” “us,” or “our,” operated by Understand My Policy, Inc.) collects, how we use and protect it, and the choices you have. It applies to noticeofchange.com and the related services, tools, and features (the “Service”).

We built this Service on three promises, and we lead with them because they are the point:

The rest of this policy explains those promises in detail.

1. Information we collect

Documents you upload (“Your Content”). The notices and related documents you provide, such as a Medicare Annual Notice of Change, plan letters, a summary of benefits, an Explanation of Benefits, insurance change notices, and similar records, along with what the Service extracts from them to explain what changed and to track deadlines.

Sensitive information inside those documents. These notices necessarily contain sensitive details: the plan and coverage a person has, plan or member identifiers, prescriptions and health-related information, and names and addresses of your parent or family member. We treat all of it as part of Your Content: we use it only to provide the Service to you (Section 2), we never sell it, and we never use it to train AI models (Section 4). We do not use it for advertising or profiling of any kind.

Questions and answers. The questions you ask about a notice and the plain-language answers we return, and any details you enter to track a deadline.

Account information. If you create an account, your name, email address, and login credentials, handled through our authentication provider.

Payment information. When you make a purchase, our payment processor collects and handles your payment details. We do not store your full card number. We keep a record of what you purchased and your subscription status.

Usage and device data. Standard analytics, pages visited, features used, general device and browser information, and product events (for example, that a notice was uploaded or a summary was saved), collected to operate and improve the Service.

Communications. Messages you send us, including support requests and feedback.

2. How we use your information

We use your information to:

• Provide the Service: decode the notice you upload, explain what changed in plain language, cite it to the source, and track the benefits deadlines you have enabled;
• Send transactional and account emails: receipts, account notices, your saved summary, and, where you have opted in, deadline reminders and change alerts;
• Process payments and manage any subscription;
• Operate, secure, and improve the Service: including monitoring for abuse, debugging, and understanding which features help;
• Provide support and respond to you;
• Comply with law and enforce our Terms.

We do not sell your personal information, and we do not use your documents or the information in them to train AI models. (See Section 4.)

3. How AI processing works

To read your documents and questions, we may send their contents to AI service providers that generate the extractions and explanations. These providers process your content only to return a result to us so we can serve you, under contractual terms that prohibit them from using your content to train their models. Your documents are inputs to a one-time reading task, not training data.

4. Our promise on training and selling data

We never use your documents, your questions, or the personal information in them, including health-related, Medicare, plan, or financial information, to train AI models, ours or anyone else’s. We never sell your personal information.

We may produce and use de-identified, aggregated statistics (for example, how often a particular kind of plan change appears) to operate, improve, and describe the Service. Before any information is used this way, it is stripped of identifiers and combined so that it does not identify you, your family member, or your specific documents, and it is separated from your identity. Aggregated, de-identified statistics are not personal information and are not “your documents.” Your private, raw documents are never sold and never used for model training, full stop.

5. We are not affiliated with Medicare, and we are never in your accounts

NoticeOfChange is not affiliated with, endorsed by, or connected to Medicare, the Centers for Medicare & Medicaid Services, the Social Security Administration, or any government agency, and we are not an insurance agent or advisor. We never file or enroll for you, we never ask for your login credentials, and you should never give us the credentials for Medicare.gov, a plan or insurer portal, SSA, or any other account. If you ever find a field in the Service asking for portal credentials, something is wrong: report it to us immediately.

6. How we protect your information

• Encryption. Your documents are encrypted in transit and at rest.
• Access controls. Access to your content is restricted to your account, enforced in our application and backed by database-level security rules as an additional safeguard.
• Minimization. We collect what the Service needs to work and no more.
• Vendors under contract. The third parties who help us run the Service are bound to protect your information and to use it only to provide their service to us.

No system is perfectly secure, and we cannot guarantee absolute security. But protecting these documents is central to what we do, and we treat it that way. A note on HIPAA: NoticeOfChange is a consumer tool that you choose to use, not a healthcare provider or health plan, so we are not a HIPAA-covered entity and we do not claim to be “HIPAA compliant.” We describe how we actually handle your data here, plainly, rather than relying on a label.

7. A note on what to upload

Upload only the notice you want explained. We recommend redacting information the Service does not need before uploading, such as full Social Security or Medicare numbers, since the decode does not need them. We also recommend that you do not upload attorney communications or other privileged material. If you choose to upload such material, you do so at your own discretion.

8. Service providers we rely on

We share information only with the vendors that make the Service work, and only as needed for them to perform their function:

• Authentication: to manage sign-in and accounts.
• Hosting and database: to run the Service and store your data securely.
• AI providers: to read documents and generate explanations, under no-training terms (Section 3).
• Payment processing: to handle purchases; they receive payment details, not your documents.
• Email delivery: to send receipts, account notices, and reminders you enabled.
• Analytics: to understand product usage and improve the Service.

We do not authorize any of these providers to use your information for their own independent purposes. We do not share your information with Medicare, CMS, any plan, or any insurer.

9. When we may disclose information

We may disclose information if required by law, subpoena, or valid legal process; to protect the rights, safety, or property of our users, the public, or us; to investigate or prevent fraud or abuse; or in connection with a merger, acquisition, or sale of assets, in which case any acquirer remains bound by the commitments in this policy, including the promises in Section 4, and you will be notified of any change in ownership or material change in how your information is handled.

10. Your choices and rights

• Deletion. You can ask us to delete your documents and account information at any time by emailing support@noticeofchange.com, and we will delete them from our active systems, and from backups within our normal backup-rotation cycle. De-identified, aggregated statistics that no longer identify you are not affected.
• Access. You can ask us what personal information we hold about you and request a copy of your documents.
• Correction. You can ask us to correct your account information.
• Email preferences. You can opt out of non-essential emails, including deadline reminders and change alerts; we will still send essential transactional messages (like receipts and account notices) while you have an account with us.

Depending on where you live, you may have additional rights, such as the right to know what personal information we hold, to request its correction or deletion, and not to be discriminated against for exercising these rights. Florida residents have rights under the Florida Digital Bill of Rights, and residents of other states and regions may have comparable rights. To exercise any of these, contact support@noticeofchange.com. We do not sell personal information or share it for cross-context behavioral advertising.

11. Data retention

We keep your documents and account information for as long as needed to provide the Service (including through the tracking you have enabled) and then delete or de-identify them, unless a longer period is required by law (for example, retaining transaction records for tax and accounting purposes). You can ask us to delete your documents at any time (Section 10).

12. Reviewing a family member’s notice

Many people use NoticeOfChange to review a parent’s or family member’s notice. Where your documents include information about another person, you confirm you have the right and permission to upload them and to review this information on their behalf.

13. Children

The Service is intended for adults (18+) and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

14. International users

We operate in the United States, and your information is processed and stored here. If you access the Service from outside the U.S., you consent to processing in the U.S., where privacy laws may differ from those where you live.

15. Changes to this policy

We may update this Privacy Policy. When we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice. We will not reduce the core promises in Section 4 (no training on your documents, no selling your personal information) without clear, prominent notice.

16. Contact

Questions, requests, or concerns about your privacy? Contact us at support@noticeofchange.com.

Your documents are private, never used to train AI models, and deletable anytime. We are not affiliated with Medicare or CMS, we never touch your Medicare or plan account, and we never sell your information.