Last updated: November 3, 2026
1. Purpose
We believe your benefits and health information belongs to you. Our goal is to make it easy for you to understand how we collect, use, and protect your information. Here are the most important things to know:
- We only collect information needed to provide our services.
- We only access your benefits, insurance or healthcare accounts after you give us permission.
- We do not sell your personal information or your health information.
- You decide who can access your information, including your employer, benefit providers, insurance companies and family members.
- We protect your information using encryption and other security safeguards.
- If we make important changes to this Privacy Policy, we will let you know before the changes take effect when required by law.
This Privacy Policy explains how Benni Inc. (“My Benni AI,” “Benni,” “we,” “our,” or “us”) collects, uses, stores, shares, and protects your information when you use our website, mobile applications, and related services (collectively, the “Services”).
My Benni AI helps individuals keep track of their benefits, coverage and deadlines, organize receipts, bills and insurance documents, submit and track claims and reimbursements, manage benefits for their family, and securely share information with employers, benefit providers, insurance companies and other people they choose.
This Privacy Policy applies to all users of our Services, including members, family members and authorized representatives, employers, benefit providers, insurance companies, and visitors to our website.
My Benni AI is a technology platform. We do not provide medical advice, legal, tax or financial advice, diagnosis, treatment, or emergency services, and we are not an insurance company or benefits plan administrator.
2. Information We Collect
The information we collect depends on how you use our Services. You may provide information such as:
- Name
- Email address
- Phone number
- Mailing address
- Date of birth
- Account username
- Profile information
- Employer name
- Family member information
- Support requests
- Messages you send us
- Payment information (if applicable)
Benefits and Health Information
If you choose to use our Services, you may provide, or authorize us to collect or receive:
- Benefit plan details and enrollment information
- Insurance cards and insurance information
- Coverage, deductible and balance information
- Claims and reimbursement information
- Receipts and medical bills
- Flexible Spending Account (FSA) and Health Savings Account (HSA) information
- Provider information
- Prescription information
- Appointment information
- Other benefits or healthcare information that you authorize us to access
We only collect this information when you ask us to or otherwise authorize us to do so.
Information From Healthcare Providers
With your authorization, we may receive information from hospitals, physicians, dentists, therapists, laboratories, pharmacies, or other healthcare organizations.
Information From Employers, Benefit Providers and Insurance Companies
If your employer, a benefit provider or an insurance company works with My Benni AI, or you connect an account you hold with them, we may receive information such as:
- Eligibility and enrollment information
- Plan and coverage details
- Claims, balance and reimbursement status
- Documents they provide about your benefits
These partners only receive information about you that you authorize us to share, or that is permitted by their agreement with Benni and applicable law.
Information Collected Automatically
When you use our Services, we automatically collect certain technical information. This may include IP address, browser type, device type, operating system, mobile device identifiers, app version, crash reports, pages visited, features used, date and time of access, or referral URLs. This information helps us improve the reliability, security, and performance of our Services.
Mobile Applications
When you use the My Benni AI mobile application, we may collect device type, operating system version, push notification token, app diagnostics, or mobile crash reports.
If you allow it, we may also access your:
- Camera (to scan receipts, bills or insurance cards)
- Photo library (to upload documents)
- Biometric authentication (to help secure your account)
We only access these features after you grant permission through your device.
Cookies and Similar Technologies
Our website uses cookies and similar technologies to improve your experience. Cookies help us keep you signed in, remember your preferences, understand how our website is used, improve website performance, and measure website traffic.
We may also use analytics services to better understand how users interact with our website and applications. You can control many cookies through your browser settings.
3. Why We Use Your Information
We use your information to:
- Create and manage your account
- Track your benefits, coverage, balances and deadlines
- Organize receipts, bills, insurance cards and benefit documents
- Help you submit and track claims and reimbursements
- Send reminders about enrollment periods and expiring benefits
- Verify insurance eligibility and benefits
- Help you manage benefits for your family members
- Allow you to share information with employers, benefit providers, insurance companies or others you authorize
- Respond to your questions and support requests
- Improve our Services and develop new features
- Protect against fraud and unauthorized access
- Maintain the security of our systems
- Comply with legal and regulatory requirements
We do not use your health information to make automated decisions that have legal or similarly significant effects.
4. How We Use Artificial Intelligence (AI)
Some My Benni AI features use artificial intelligence (AI) to help organize and review information more efficiently. AI may be used to:
- Read and extract details from receipts, bills and insurance cards
- Organize and categorize documents
- Match expenses against your coverage
- Summarize your benefits
- Suggest reminders and relevant information
- Improve document search
AI is designed to assist users. It is not intended to replace healthcare professionals, benefits administrators, or other qualified experts. AI does not diagnose medical conditions, recommend medical treatment, provide legal, tax or financial advice, decide whether a claim is covered or paid, make decisions on your behalf, or replace professional judgment.
5. When We Share Your Information
We share your information when it is needed to provide our Services, when you ask us to, or when the law allows or requires us to do so. We may share your information with:
Healthcare Providers
We may share information with doctors, dentists, hospitals, pharmacies, laboratories, therapists, and other healthcare providers when you authorize us to do so.
Employers, Benefit Providers and Insurance Companies
If you choose to, you may authorize My Benni AI to securely share information with your employer, a benefit provider or an insurance company, for example to submit a claim or confirm eligibility. You can change or remove these permissions at any time unless the law requires us to keep sharing information for another reason.
Family Members and Authorized Representatives
If you add family members or authorize another person to help manage your benefits, we share information with them as you direct.
Service Providers
We work with trusted companies that help us operate our Services. These companies may provide services such as cloud hosting, secure data storage, authentication, email delivery, text messaging, mobile application services, AI services, payment processing, product analytics, website analytics, or customer support.
These companies may only use your information to provide services for My Benni AI. If a service provider creates, receives, maintains, or transmits Protected Health Information (PHI) on our behalf, we require them, when applicable, to sign a Business Associate Agreement (BAA) and protect your information in accordance with HIPAA and other applicable laws.
Legal Requirements
We may disclose information when we believe it is necessary to comply with the law, respond to a subpoena or court order, respond to requests from government agencies, protect our rights, prevent fraud, protect the safety of our users, or investigate security incidents.
Business Transfers
If Benni Inc. is involved in a merger, acquisition, financing, corporate restructuring, or sale of assets, your information may be transferred as part of that transaction. If the transaction materially changes how your information is handled, we will provide at least 30 days’ advance notice whenever required by law. Notice may be provided by email, through the My Benni AI mobile application, or on our website.
Where permitted by law, you may request deletion of your information before the transfer takes place. Any company that acquires My Benni AI will be required to protect your information using privacy and security standards that are substantially equivalent to those described in this Privacy Policy.
6. Our Service Providers
Below are examples of the companies we use to help operate My Benni AI. This list may change as we improve our Services.
| Service Provider | Purpose |
|---|---|
| Amazon Web Services (AWS) | Cloud hosting, databases, backups, storage |
| Auth0 | Authentication and identity management |
| Firebase | Mobile application services and push notifications |
| Supabase | Backend services and database support |
| Twilio | SMS notifications |
| SendGrid | Transactional email delivery |
| Stripe | Payment processing |
| Mixpanel | Product analytics |
| Google Analytics | Website analytics |
7. How We Protect Your Information
Protecting your information is one of our highest priorities. We use administrative, technical, and physical safeguards designed to protect your personal information and Protected Health Information. Our safeguards include:
- Encryption during transmission using TLS 1.2 or higher
- Encryption of stored data
- Secure AWS-hosted infrastructure
- Role-based access controls
- Multi-factor authentication where appropriate
- Security monitoring
- Audit logging
- Regular security reviews
- Backup and disaster recovery procedures
Our mobile applications also use secure communication with our servers and application-level authentication to help protect your information. Although no system is completely secure, we continually improve our security practices to reduce risk and respond quickly to security events. Learn more on our Security page.
8. Data Retention
We keep your information only as long as needed to provide our Services and meet legal, regulatory, security, business, and contractual obligations. Unless a longer period is required by law, we generally keep personal information and Protected Health Information for up to seven (7) years after your account is closed or your last activity on the platform.
9. Deletion Requests, Backups, and Inactive Accounts
You may request deletion of your account or personal information at any time. If you make a deletion request, we will delete or permanently de-identify your information from our active production systems as soon as reasonably possible unless we are required to keep it for legal requirements, regulatory obligations, fraud prevention, security investigations, litigation, or contractual obligations.
Encrypted backup copies may temporarily retain deleted information until the applicable backup retention period expires or backup media is securely overwritten. Backup information is used only for disaster recovery and business continuity.
Accounts that remain inactive for an extended period may be deactivated or deleted in accordance with this Privacy Policy and applicable law.
10. Your Privacy Choices
You have control over your information. Depending on where you live and the services you use, you may have the right to:
- Access your information
- Correct inaccurate information
- Download a copy of your information
- Request deletion of your information
- Withdraw your consent when consent is required
- Disconnect connected accounts
- Remove family members or authorized people
- Manage your communication preferences
We may ask you to verify your identity before processing certain requests.
11. Security Incidents and Breach Notification
If we discover a security incident involving your information, we will investigate it promptly. When required by law, we will notify affected individuals without unreasonable delay in accordance with applicable federal and state laws, including the HIPAA Breach Notification Rule and applicable Federal Trade Commission (FTC) requirements.
Notifications may be provided by email, in-app notification, postal mail, or another method permitted by law. Our notice will generally include what happened, the types of information involved, what we have done to address the issue, steps you can take to protect yourself, and how to contact us for additional information.
12. Children’s Privacy
My Benni AI accounts are not intended for children under 18 years of age. Parents or legal guardians may add and manage benefits information for their dependent children as part of family access.
13. International Users
My Benni AI operates in the United States. If you use our Services from another country, you understand that your information may be transferred to, processed, and stored in the United States.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide notice at least 30 days before the changes become effective whenever required by law or when the changes materially affect your rights. We may notify you by email, through the My Benni AI application, or on our website.
The updated Privacy Policy will always include a new Last Updated date. If you do not agree with the updated Privacy Policy, you may stop using our Services and request deletion of your account, subject to applicable legal retention requirements.
15. Contact Us
If you have questions about this Privacy Policy or would like to exercise your privacy rights, please contact us.
Benni Inc. (My Benni AI)
Email: info@mybenni.ai