Privacy policy

Who we are

Arik Health ("Arik") helps you find lower prices for prescriptions and work through medical bills and insurance denials. Questions about this policy or your data: admin@arikhealth.com.

Arik is a consumer app you sign up for yourself. It is not your doctor, your pharmacy or your insurance plan.

Arik is for adults 18 and over.

Your OK comes first

Before Arik collects any health information, it asks for your consent in plain words, separate from everything else. Washington State law calls this consumer health data consent; Arik asks everyone, wherever they live. Your answer is recorded with the date, the version of the words you saw and a fingerprint of those words.

If you say no, you can still ask general questions about drug prices. Arik answers them without starting a case and without saving what you typed.

You can turn this consent off at any time in your privacy center. From that moment Arik collects nothing new: it does not start cases, save chat in your cases, take documents or record what you paid.

What Arik collects

What you tell Arik in chat about your situation: the medicines you ask about or take, your coverage type, your state and zip code, and other facts you choose to share. Arik turns these into facts on your profile or case, and asks you before it changes a fact you already gave.

Documents you add (bills, explanations of benefits, denial letters, receipts) and what Arik reads from them.

Letters Arik drafts for you, what you sent, replies you add, and deadlines for your cases.

What you paid at the pharmacy, when you choose to tell Arik after a fill.

Identity details only when a form needs them (name, date of birth, address). These are encrypted, and shown to you masked. Your insurance member ID and group number, savings card numbers, and your household size and income are each kept only after a separate yes from you, encrypted, and deleted at once if you turn that yes off.

A record of your privacy choices and an activity log (what was downloaded or sent, and when). Never the contents.

A count of the AI used to answer you: which model ran, how many tokens it processed, which case it was for, and what it cost. This never includes what you or Arik wrote. In general mode, it is not tied to you.

What Arik never keeps

Your Social Security number, immigration status, full card or bank numbers, guesses about your mood or personality, or anything for advertising. Questions about citizenship or immigration status on a program form are left blank for you to answer on paper.

How Arik uses it

Only to help you: to find prices and programs for your situation, check bills and denials, prepare the letters and forms you ask for, and keep your cases organized.

What patients paid at the pharmacy is also used, with no name or case attached, to show how often a price source turned out to be right.

Arik does not sell your data, does not use it for advertising, and does not share it with drug makers, pharmacy benefit managers or discount card companies. Arik is not paid by any of them, including through affiliate or referral links.

AI services

To write chat replies, what you type in chat is sent to an AI service (today OpenRouter, which routes to Anthropic Claude models, or Amazon Bedrock when Arik is set up to use it). To read a document you add, its text or image is sent to the same kind of service. Your name, date of birth and address from your identity details are not sent to write chat replies.

The AI writes explanations only. Prices, program choices, safety rules, the sources list under each answer and deadlines are decided by Arik's own code, and a check in code rejects any figure the AI states that is not in Arik's sourced data.

Who else handles your data

Service providers that run Arik for us: Supabase (database, sign-in and file storage), Vercel (hosting) and the AI services above. They handle your data only to run Arik.

A program, pharmacy or office receives your information only when you approve that specific send or form. Nothing leaves Arik without your approval each time.

How long Arik keeps it

The original file of a document you add is marked for removal 48 hours after you add it. What Arik read from it stays with the case.

A case and everything in it (chat, documents, letters, deadlines, what you paid) is kept while the case is open and deleted 90 days after the case closes. A short summary of how it turned out (dates, amounts, result) is kept until you delete your account. If you help someone and chose longer keeping for their cases, their closed cases are kept until you turn that off.

When a closed case is deleted, what you paid is deleted with it. Before that, two counts for that price source go up: how many fills there were and how many matched the quote. The counts have no name, case, pharmacy, amount or date and are not linked to you, so they stay after your account is gone. If you delete your account while the case still exists, your fills are deleted without being counted.

Your profile facts, medicines, identity details, privacy choices and activity log are kept until you change or remove them or delete your account.

Saved answers to general drug price questions, which contain no personal information, expire after 7 days and are deleted by the daily cleanup.

AI usage counts are kept for 13 months, then deleted. Deleting everything removes yours right away.

Sample patients in the demo are fictional and are deleted after 60 minutes without use.

A one-time code to fill a program page lasts 5 minutes. Rate-limit counters, which hold a scrambled form of your network address and never the address itself, are deleted after 2 days.

Your choices and rights

In your privacy center you can see what Arik keeps, download all of it, turn off any permission you gave, and delete everything. Deleting everything removes your cases, chats, documents, letters, profile, identity details, privacy choices and activity log.

You can also write to admin@arikhealth.com to ask what Arik has, to correct it or to delete it. Arik answers without charging you.

Security and breaches

Identity details, insurance IDs, savings card numbers, income and form answers are encrypted before they are stored. Access to your cases is checked on every request, and people you do not manage cannot see them.

If a breach of your health information happens, Arik will tell you as the FTC Health Breach Notification Rule requires, and will tell the FTC and, when the rule requires it, the media.

Changes

When this policy changes, the version and date at the top change. If the change affects how Arik uses health information, Arik asks for your consent again before collecting more. Consent version in use: mhmda-2026-11-04.