Privacy Policy

Who we are

AuraCode by Health Journey is a patient navigation and education platform ("AuraCode," "we," "us"). This policy explains what information we collect through aurahealthjourney.com, how we use it, and the choices you have.

Information we collect

We collect information in a few different ways:

• Account information. If you create an account, we collect your name and email address.
• Appeal letter requests. If you use the AI Appeal Letter Generator, we collect your email address and the details you provide about your claim or denial in order to generate the letter.
• Plan and location information. To route you to the correct regulator or resource, we may ask (or infer from your IP address) which state you're in and how your health plan is funded (fully insured, self-funded/ASO, Medicare, Medicaid, etc.). Location detection uses a third-party IP geolocation service; see "Third parties" below.
• Payment information. If you subscribe to a paid plan, payment is processed by Stripe. We do not store your full card number — Stripe handles that directly. Our own records keep only what we need to service your account, such as your plan tier, subscription status, and renewal date.
• Usage information. Our hosting platform records basic, aggregated traffic data (such as page views, referrers, and approximate region) so we can understand which resources are useful. This is not used to build advertising profiles.

What we don't do

AuraCode is an educational and navigation tool. We do not make coverage decisions on behalf of any insurer, and we are not a healthcare provider. We are not a HIPAA-covered entity or business associate, because we do not provide, bill for, or coordinate treatment on behalf of a healthcare provider or health plan. That said, we still treat information you share with us — particularly anything related to a specific claim, denial, or health condition — with care, and we do not sell your personal information.

How we use your information

• To operate your account and remember your plan/state so you don't re-enter it
• To generate appeal letters and other documents you request
• To process payments for paid subscription tiers
• To communicate with you about your account, or respond if you contact support

Third parties we work with

We use a small number of service providers to operate AuraCode. Each only receives the information it needs to perform its function:

• Our cloud database and authentication provider — account authentication, subscription status, and purchase records.
• Stripe — payment processing for paid subscriptions.
• ipwho.is — IP-based geolocation, used only to suggest your state; you can always override this manually.
• AI model providers — accessed through our platform's AI gateway to draft appeal letters from the details you submit. Your inputs are used to produce your document, not to train third-party models.

Data retention

We keep your account information for as long as your account is active. If you delete your account, we retain it for up to 30 days so you can reinstate it, after which it is permanently deleted. Appeal letter details you enter are held only in your browser session while you complete the draft, and the generated letter is returned to you without being saved to our database — download or copy any letter you want to keep.

Your choices

• You can access, correct, or delete your account information by emailing us at support@aurahealthjourney.com.
• Plan and state details you enter are also stored locally in your browser. You can remove them at any time by clearing your browser's site data for this site.
• We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

State privacy rights

Depending on where you live, you may have some or all of the following rights regarding the personal information we hold about you:

• The right to know what personal information we collect and how we use it
• The right to access a copy of that information
• The right to correct inaccurate information
• The right to request deletion of your information
• The right to opt out of the sale or sharing of personal information, and of targeted advertising — we do not engage in any of these
• The right not to be discriminated against for exercising these rights

These rights are provided by laws including the California Consumer Privacy Act, the Colorado Privacy Act, the Virginia Consumer Data Protection Act, the Connecticut Data Privacy Act, the Texas Data Privacy and Security Act, and similar laws in other states. To exercise any of them, email support@aurahealthjourney.com from the address associated with your account. We will verify your request and respond within the time required by the law that applies to you, generally 45 days. If we deny a request, you may appeal by replying to our response, and we will explain the outcome. An authorized agent may submit a request on your behalf with written permission.

Consumer health information

Some of what you share with us — a procedure code, a denial reason, a diagnosis you type into an appeal draft — describes your health. Laws such as Washington's My Health My Data Act and Nevada's SB 370 give residents of those states specific rights over that kind of information. We collect it only to deliver the feature you asked for, we do not sell it, and we do not use it for advertising. You can ask us to delete consumer health information we hold by emailing support@aurahealthjourney.com. Details you enter into the appeal builder and cost estimator stay in your browser unless you tell us to generate a document from them.

Children's privacy

AuraCode is not directed at, and is not intended for use by, anyone under the age of 18.

Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the "last updated" date above and, where appropriate, notify active account holders by email.

Contact us

Questions about this policy or your data can be sent to support@aurahealthjourney.com.