Your information, only where you send it

Who we are

Quilt ("Quilt", "we", "us") is a service operated by UniHealth Technologies, Inc., 2010 El Camino Real #833, Santa Clara, CA 95050. Quilt helps people prove the benefits and coverage they already have, such as Medicare, so that programs they apply to can get verified answers instead of asking for paperwork. Quilt is not a government agency and is not affiliated with Medicare, the Centers for Medicare & Medicaid Services (CMS), Medi-Cal, CalFresh, the Department of Veterans Affairs or the Social Security Administration.

You usually reach Quilt through a program or app that works with us (a "partner"), such as a benefits screener. That partner has its own privacy policy for the information you give it directly.

What we collect

Information from sources you connect. When you choose to connect a source, you sign in on that source's own website, not ours. We never see or store your password for that source. With your permission, the source sends us records about you. For example, from Medicare we can receive:

• your name, date of birth and other basic details on your Medicare record;
• your Medicare coverage, such as Part A, Part B and Part D, with start and end dates;
• claims information, which we use to confirm drug coverage and list the prescriptions you have filled.

Other sources work the same way and only send what you approve on their consent screen. For example, from VA we can receive whether you are a Veteran, your periods of service (branch, dates and discharge status) and your combined disability rating. We do not keep your individual conditions or diagnoses.

Letters you share. You can share a letter, such as a Social Security award letter or a CalFresh or Medi-Cal notice. Our own computer system reads it once and keeps only the facts it states, such as your monthly benefit amount and its dates. We do not keep the letter itself, only a fingerprint (a code that proves which file it was). Letters are read on our own computers and are never sent to an outside AI company.

Sign-in keys. The source gives us access keys so we can re-check your information while you stay connected. We encrypt them and never show them to partners.

Information from partners. A partner sends us its own reference number for you so we can keep your connections together. It does not need to send your name, email or phone number.

Activity records. We keep a log of actions such as "connected Medicare", "shared facts with a partner" or "disconnected", with the time, which partner asked and the kinds of facts involved. The log never contains the facts themselves or any keys. We also keep standard technical logs, such as IP addresses and error messages, to keep the service secure.

Quilt does not use advertising cookies or third-party trackers. We do not make or share de-identified or combined data from your records.

Information about other people. Your records are about you. Some, like a CalFresh notice, may mention your household size. We only keep what is needed to prove your own benefits, and we never use it to learn about or contact anyone else.

How we use it

• To turn your records into verified facts, such as whether you have Medicare Part D, with where and when each fact came from.
• To share those facts with the partners you chose, so they can check eligibility, help you enroll, or renew your benefits.
• To re-check your sources from time to time while you stay connected, so your facts stay current.
• To keep Quilt secure, fix problems and meet our legal obligations.

We never sell your information for money or anything else. We do not use it for advertising, marketing, targeted offers or any other money-making deals, or to build profiles about you. We do not use your health information to train artificial intelligence models.

Who we share it with

• Partners you choose. Before a partner gets anything, Quilt shows you a page naming that partner, what it will see, why it asks and how long sharing lasts, and you agree to it. A partner receives facts only about the sources you connected through it, and only for that purpose. Your agreement covers that one partner. If another app asks later, it gets nothing until you agree on a new page for it. When you disconnect, when an agreement ends or when you delete everything, we tell the partner to delete what it received from Quilt, and we record when it confirms it has. A partner that reads facts once and keeps no copy has nothing to delete, so it gets no such request.
• Our insurance agency. UniHealth Technologies also owns an insurance agency, UniHealth Insurance Solutions, LLC. It is not part of Quilt, has no access to Quilt and does not receive your information. We do not use your information for insurance sales or marketing. We will not offer sharing with the agency without first changing this policy and telling you.
• Service providers. We run Quilt on our own servers in the United States. Cloudflare carries all traffic to them and handles our email. Traffic is encrypted on the way, but like any provider that does this, Cloudflare handles it unencrypted at its network edge while passing it on. Cloudflare may keep technical records about that traffic, such as addresses and times, under its own policies. It may only use our traffic to provide its service to us. On this website (not on the pages where you connect a source), Cloudflare Web Analytics counts visits without cookies. The website's fonts come from our own servers. We read letters on our own computers and do not use any outside AI company. Our service providers may only use information to provide their service to us, and they must protect it as this policy does. They may not use or share it for anything else.
• When the law requires it. For example, in response to a valid court order. Where allowed, we will tell you first.
• If our business changes hands. We will tell you first. Any new owner must keep the promises in this policy. You can close your account and have us delete your information, or get a copy of it, before anything changes.

Your choices

• Connect only what you want. Each source is optional, and you can decline on the source's consent screen.
• Disconnect any time. Disconnect through the partner app if it offers that, or email us. We then ask the source to revoke our access, stop re-checking it and delete the facts and keys we hold for it.
• Revoke at the source. For Medicare, you can also stop sharing at Medicare.gov or by calling 1-800-MEDICARE (1-800-633-4227). For VA, go to the connected apps page in your VA.gov profile.
• Access or delete. Email [email protected] to ask what we hold about you, to correct it, or to delete it. California residents have these rights under state law, and we offer them to everyone. We won't treat you differently for using them.
• Delete everything. To delete all of your information for good, email [email protected] with the subject "Delete my data", or ask the app you used. Tell us the app you connected through so we can find you. We will cut off our access at every source and permanently delete 100% of your information within 45 days, and tell you when it is done. In practice: your facts, letters and connections are deleted the same day. We also tell the partner app to delete its copy. If a source can't be reached to cut off our access, we keep only the encrypted access key, with nothing in our records that says whose it is, and keep trying for up to 30 days before deleting it. Our weekly backup copy is deleted within 14 days, even if a new backup fails, and if we ever restore a backup, we delete again everyone who asked to be deleted since it was made.

How long we keep it

We keep facts and sign-in keys only while a source is connected. Your consent with a source can also end on its own. Medicare consent, for example, lasts up to 13 months unless you renew it. When a connection ends, we delete its keys and facts.

Your agreement to share a source with a partner lasts 12 months from when you agreed on Quilt's page for that source. Only agreeing again renews it: background re-checks, other sources and letters don't. When it ends we stop sharing that source at once, cut off our access to it, delete what it told us and ask the partner to delete its copy. Facts from a letter you shared are kept for 12 months from when you shared it, or until you remove the letter. Once nothing is shared any more, we delete everything we hold about you.

Activity records say what happened, when, with which source and which kinds of facts were shared (for example "Medicare Part A"), never the facts themselves. We keep them for up to 6 years for security and legal reasons. When you delete everything, we cut them down to what happened, when and with which source, and remove the link to you. Technical logs are kept for up to 90 days and do not include sign-in codes, your reference number or letter numbers.

We keep one weekly backup copy so we can recover from a failure. Each new copy replaces the last, and no copy is ever kept longer than 14 days, even if new backups fail. So information you delete is gone from our backups within 14 days. The copy is encrypted, and the key to read it is not kept on the server.

How we protect it

Information moves over encrypted connections between you, partner apps, sources and Quilt. Letters are read on a separate computer of ours. Our server passes them to it over an encrypted private network (Tailscale) that is not open to the internet. Sign-in keys are sealed with AES-256 encryption, and access to our systems is limited to the people who run Quilt. We host Quilt in the United States. No system is perfectly secure.

If a breach affects your information, we will tell you without delay and within 60 days at most, by email or through the app you used. We will say what happened, what information was involved, what we are doing, and what you can do, such as disconnecting your sources. We also notify the authorities and the sources involved, such as VA and Medicare, as the law and our agreements require, including under the Federal Trade Commission's Health Breach Notification Rule.

Quilt is a consumer service that you direct. It is generally not covered by HIPAA, which applies to health plans and providers. This policy and applicable consumer protection and state privacy laws govern how we handle your information.

Children

Quilt is not meant for children under 13, and we do not knowingly collect information from them.

Changes to this policy

If we change this policy, we will post the new version here with a new date and tell you by email or through the app you used. If a change affects how we use or share information we already hold, we will ask for your permission first.

Contact us

Email [email protected], or write to Quilt, UniHealth Technologies, Inc., 2010 El Camino Real #833, Santa Clara, CA 95050.