DenialKit

Privacy policy

Last updated September 30, 2026

This policy explains what DenialKit collects, why, and who helps us run the site. The short version: we collect as little as possible, we never want patient information, and we don't sell your data.

No patient information

DenialKit is not meant for patient health information, and you must not enter any. The AI appeal letter writer checks what you type and blocks anything that looks like patient details (such as names, dates of birth, member IDs, or phone numbers) before it is sent anywhere. Templates and saved letters contain placeholders only.

What we collect

  • Email signups. If you sign up for the checklist or our emails, we keep your email address and which list you joined.
  • Your account. If you log in, we keep your email address, your plan (Free or Pro), and when you joined. There are no passwords: we email you a sign-in link.
  • Payments. Payments are handled by Stripe. We never see or store your card number. We keep your Stripe customer ID so we can show your plan and let you manage billing, and Stripe sends us the email address used at checkout.
  • AI appeal letters. We store the letters you generate (with the denial code and payer name) so you can find them in your account, plus a count of how many you've written, to apply plan limits. The service description and note you type are sent to our AI provider to write the letter.
  • NPI lookups. NPI searches are sent to the public NPPES registry run by CMS. We don't store your searches or the results. For the bulk NPI check, your file is read in your browser: only the NPI numbers are sent to us, and any names in your file never leave your computer.
  • Technical data. Like any website, our hosting provider processes your IP address and basic request details to deliver pages, block abuse, and apply rate limits.

Cookies

We use only the cookies needed to run the site: sign-in cookies that keep you logged in, and a small cookie that tells the page header you're signed in. We don't use advertising or tracking cookies.

Who helps us run the site

We share information only with the services that power the site, only for that purpose:

  • Cloudflare: hosting, security, and file storage
  • Supabase: accounts and saved letters
  • Stripe: payments and billing
  • Kit: our email list
  • Anthropic: generating AI appeal letters

We don't sell or rent your personal information, and we don't share it for advertising.

Emails

If you join our email list, you can unsubscribe with the link at the bottom of any email. We'll still send emails you need, like sign-in links and receipts.

How long we keep it

We keep your account and saved letters until you ask us to delete them. Payment records are kept as long as tax and accounting rules require.

Your choices

You can ask us for a copy of your information, to correct it, or to delete your account and saved letters.

Children

DenialKit is a tool for working professionals and isn't meant for children.

Changes

If we change this policy, we'll update the date at the top. For significant changes, we'll also let account holders know by email.