Legal

Privacy policy

Last updated 26 July 2026

This policy describes what we collect, why we collect it, who we share it with, and how to get it deleted. We have tried to write it in plain English rather than in the language of a liability shield.

What we collect

Addresses you look up. When you check an address we store the address, the report we generated for it, and the government data that report was built from. This is what lets a report you paid for stay fixed rather than shifting under you, and it is how we tell you when something changes.

Your email address. Collected when you unlock the free category breakdown. We use it to sign you in, to deliver reports you buy, and to send alerts for addresses you have chosen to monitor. We do not sell it.

Payment details. We never see or store your card. Payments are processed by Stripe, which handles the card details directly. We store only the fact of a purchase, its amount, and which address it unlocked.

Basic technical data. Standard server logs, including IP address and browser type, kept for security and debugging.

What we do not do

• We do not sell or rent your personal information.
• We do not publish the addresses you look up, or link any address to you publicly.
• We do not use advertising trackers or third-party analytics that build a profile of you across other websites.
• We do not run credit checks, and we do not use your searches to make decisions about you.

Sharing a report is your choice

A report is private to your account unless you create a share link for it. If you do, anyone with that link can see the score and the category breakdown for that address — but not the detailed findings, negotiation questions, or mitigation costs, and never your email or any other address in your account. You can ask us to revoke a share link at any time.

Who we share data with

Only the service providers we need to operate: Supabase (database hosting), Stripe (payments), Resend (email delivery), and our hosting provider. Each receives only what it needs to do its job. We may also disclose information where we are legally required to.

Separately, when you check an address, that address is sent to the government data sources we query on your behalf — the EPA, CDC, FEMA, U.S. Census and others — and to the geocoding services that turn it into coordinates. Those queries are how the product works, and those agencies have their own privacy practices we do not control.

How long we keep it

Report snapshots are kept so purchased reports remain reproducible and so we can detect changes for monitored addresses. If you delete your account we remove your email, your saved addresses, and the link between you and any report. Purchase records may be retained where we are required to keep them for tax or accounting purposes.

Your choices

• Turn monitoring off for any address at any time, from the report or your account.
• Remove a saved address from your account whenever you like.
• Ask for a copy of your data, or ask us to delete it, via the contact form. Depending on where you live you may have additional rights — including under the GDPR or the CCPA — and we will honour them regardless of where you live.

Cookies

We use one cookie: a signed session cookie that keeps you logged in. It is not used for advertising or tracking, and there is no third-party cookie on the site.

Children

HealthDeed is not directed at children under 13, and we do not knowingly collect their data.

Changes and contact

If we change this policy materially we will update the date above and, for changes that affect how we use your data, tell you by email. For questions, requests, or complaints — including a request to see or delete your data — use the contact form and we will reply to the address you give us.