Privacy Policy

Last updated: March 7, 2026

Taven Health ("Taven," "we," "us," or "our") operates the website tavenhealth.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Information You Provide

When you create an account or use our services, we may collect:

• Account information: Name, email address, and profile picture when you sign in with Google or Apple
• Healthcare information: Medical bills, insurance details, and procedure searches you choose to save to your account
• Communications: Any messages or feedback you send to us through our contact form

Information Collected Automatically

When you access the Service, we may automatically collect:

• Usage data: Pages visited, features used, search queries, and time spent on the Service
• Device information: Browser type, operating system, device type, and screen resolution
• Log data: IP address, access times, and referring website addresses
• Cookies: We use essential cookies to maintain your session and preferences. See Section 6 for details.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Create and manage your account
• Save your searches, bill reviews, and insurance information for a personalized experience
• Send you important updates about the Service (you can opt out at any time)
• Analyze usage patterns to improve our tools and content
• Detect, prevent, and address technical issues or abuse
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share information only in the following circumstances:

• Service providers: We use third-party services (such as Supabase for authentication and data storage, and Vercel for hosting) that may process your data on our behalf. These providers are contractually obligated to protect your information.
• Legal requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With your consent: We may share information for any other purpose with your explicit consent.

4. Data Security

We take the security of your data seriously and implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication via OAuth 2.0 (Google, Apple)
• Row-level security policies on our database
• Regular security reviews

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

6. Cookies and Tracking

We use the following types of cookies:

• Essential cookies: Required for authentication and basic site functionality. These cannot be disabled.
• Analytics cookies: Help us understand how visitors use our site so we can improve it. These are optional.

You can control cookies through your browser settings. Note that disabling essential cookies may affect the functionality of the Service.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data
• Portability: Request a copy of your data in a machine-readable format
• Opt-out: Opt out of non-essential communications at any time

To exercise any of these rights, please contact us at the address below.

8. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of your personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

9. Children's Privacy

The Service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13, we will take steps to delete that information.

10. Healthcare Data Disclaimer

Taven provides healthcare pricing information based on publicly available hospital transparency data. We are not a covered entity under HIPAA. The healthcare pricing data we display is derived from public sources mandated by federal regulations and does not contain protected health information (PHI).

Any personal healthcare information you voluntarily upload (such as medical bills) is stored securely and is only accessible to you. We do not share your uploaded healthcare documents with third parties.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

• Website: tavenhealth.com/contact
• Email: privacy@tavenhealth.com