Privacy policy

Effective November 2, 2026.

Who we are

Haggler is run by Hey Lucy, Inc.. We work for you, the patient. You give us a medical bill, we check it, and with your written permission we deal with the hospital, clinic, insurer or collection agency to get it corrected or lowered. We are not a hospital, an insurer or a law firm, and we don't give legal advice.

What we collect

Things you give us. The bill and anything that goes with it: itemized statements, insurance explanations, letters, your insurance card. Your name, date of birth, address, and an email address or phone number. Only if you choose to apply for financial assistance, your household size and income. If you approve an offer that carries a fee, a payment card, which our payment processor holds and we never see in full.

Things we create. Our review of the bill, the letters we send, and recordings and transcripts of the calls we make to billing offices on your behalf.

Things others send us. Replies, decisions and documents from the hospital, insurer or collection agency you authorized us to contact.

Technical records. When you sign in, the device and browser you used, and a log of every time a person at Haggler or one of our systems opened your records.

We don't use advertising trackers, and we don't buy information about you from anyone.

How we use it

To check the bill for errors, overcharges and help you may qualify for.
To contact the hospital, insurer or collection agency, once you've signed the authorization.
To handle the offers you approve and any fee.
To tell you what's happening, by email, text or in the app. Texts and emails never carry health details, only that there's something to see.
To keep the records the law requires.
To make our review better, using information with your name and details removed.
To keep the service secure.

Who can see it

The hospital, insurer or collection agency named on your bill, once you've signed the authorization. We send only what that bill needs.
Companies that do work for us, by role: hosting and file storage, email, text, fax and mail delivery, phone calls, reading documents and drafting letters with AI, and payment processing. Each may use your information only to do that job for us. Our AI providers do not train on your information.
Our staff, only when a task needs it. Every time your records are opened, it is logged.
A membership program that sponsors your service (for example, through Lucy). We tell it which step your bill is at so it can let you know. We don't send it the health details.
Anyone the law requires, such as under a court order.

We never sell your information, and we never use it for advertising.

How long we keep it

While your account is open, so you can see your bills and what we did. Raw documents and call recordings are deleted 365 days after a case closes. You can delete your data sooner (see the next section).

Your choices

See everything we have about you in the app.
Delete your data from Profile. Our payment processor keeps the records of any fee you paid, as financial law requires.
Withdraw your authorization from Profile at any time. We then stop contacting providers for you.
Stop texts by replying STOP to any text from us.
Turn off update messages in Profile. We still reach you when a decision needs you.

Security

Your information is encrypted on its way to us and where it is stored. Staff sign in with a password and a second code from an authenticator app. Every read of your records is logged. Companies that work for us get only the access their job needs. No system is perfectly secure, so we also plan for things going wrong.

If something goes wrong

If your information is exposed, we tell you without unreasonable delay, as the FTC Health Breach Notification Rule and state law require: what happened, what information was involved, what we've done, and what you can do.

Where we work

Haggler isn't available yet to residents of New Jersey, Maryland, Washington, Nevada or Connecticut. You can create an account there, but we can't start work on a bill.

Children

Account holders must be 18 or older. A parent or guardian can add a bill for a child or another dependent they're responsible for.

Changes

We post changes here with a new effective date, and tell you in the app when they matter.

Contact

Email hello@bills.heylucy.io. A person reads it.