Privacy Policy

Healthcare and Financial Information

HealthExpense, Inc. (“Health Expense”) maintains healthcare and financial information (“Healthcare and Financial Information”) in accordance with applicable state and federal laws. Specifically, Healthcare and Financial Information, which is deemed Protected Healthcare information (“PHI”) by the Health Information Portability and Accountability Act of 1995 (“HIPAA”, is maintained in accordance with HIPAA and the Health Information Technology for Economic and Clinical Health Act of 2009 (“HITECH”).

HealthExpense will not share your Healthcare and Financial Information unless (i) you authorize a third party to access or disclose such information; or if (ii) you have provided access to our service (“Service”) as part of your benefit package for the purposes of reimbursing healthcare expenses. Furthermore you acknowledge and agree that HealthExpense may disclose healthcare and financial information in response to legal process, including but not limited to subpoenas, to protect the property and rights of HealthExpense or a third party used to access the Service, to protect the safety of the public or any person, or to prevent or stop activity it may consider to be, or to pose a risk of being, any illegal, unethical or legally actionable activity.

HealthExpense may aggregate your Healthcare and Financial Information as part of our Service. Aggregate information means Healthcare and Financial Information Information of at least two or more subscribers cleansed to remove all individual identifying information (“Non-Identifying Data”)

Personal Information

When you access and use the Service, HealthExpense may ask you for Personal Information that can be used for contact or identification purposes (“Personal Information”). Personal Information includes, but is not limited to your name, email address, mailing address and any other information that you provide to HealthExpense. HealthExpense uses this Personal Information to provide the Service and administer your inquiries. Personal Information may be aggregated, de-identifiable, depersonalized and used to improve the quality of the HealthExpense Service (“Aggregated Information”).

Log Data

HealthExpense collects information about how you use the Services, including the HealthExpense website (Log Data). HealthExpense may collect such information by using commonly-used information-gathering tools, such as cookies and similar technologies, and the HealthExpense servers may collect additional information when you are using the Service. This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, “pages” of the HealthExpense Service that you visit, time spent on those pages, information you search for on our Service, access times and dates, and other statistics. HealthExpense may use Log Data to monitor and analyze use of the Service and for the Service’s technical administration, to increase the Service’s functionality and user-friendliness, and to better tailor it to the HealthExpense users’ needs. Additional information about cookies is given below.


HealthExpense, like many websites, uses cookies to make interactions with the Service easier and to provide meaningful communications. Both session-based and persistent-based cookies are used. Persistent-based cookies are used to save your login information for future logins. Session-based cookies exist only during one session and disappear from your computer when you close your browser software or turn off your computer. Session-based cookies enable certain features of the Service, to better understand how you interact with the Service and to monitor aggregate usage by Subscriber’s and internet traffic routing. Unlike persistent-based cookies, session-based cookies are deleted from your computer when you log off from the Service and then close your browser. You can instruct your browser, by changing its options, to stop accepting cookies or to prompt you before accepting a cookie from the websites you visit. If you do not accept cookies, however, you may not be able to use all functionality of the Service. HealthExpense may use information from cookies in combination with User Data to provide you with information about HealthExpense.

Do Not Track Policy

HealthExpense does not engage in the collection of information or data about your online activities across third-party websites or online services. HealthExpense does not allow third parties to collect information about your online activities over time and across third-party websites when you use HealthExpense online services. HealthExpense does not respond to web browser “do not track signals.”

Service Provider

HealthExpense works with other companies that help to facilitate the Service, to provide the Service on our behalf, to perform improvements to the Service or to assist in analyzing how the Service is used. Such companies, (“Service Providers”)provide services such as delivering customer support, processing FSA payments, and sending emails. These Service Providers have access to Personal Information only to perform these tasks on our behalf and are contractually required not to disclose or use it for any other purpose.

Aggregate Information and Non-Identifying Information

HealthExpense may share Aggregated Information that does not include Personal Information and may disclose Non-Identifying Information and Log Data with Service Providers for enhancement of features of the Service, industry analysis, personalization and other purposes.

Law Enforcement

HealthExpense cooperates with government, law enforcement officials and private parties to enforce and comply with the law. HealthExpense will disclose any information about you to government or law enforcement officials or private parties as legally necessary or required to respond to claims and legal process (including but not limited to subpoenas), to protect the property and rights of HealthExpense, Service Providers or Third Parties through which you access the Service, to protect the safety of the public or any person, or to prevent or stop activity HealthExpense may consider to be, or to pose a risk of being, any illegal, unethical or legally actionable activity.

Business Transfers

HealthExpense may transfer or otherwise share some or all of its assets, including Personal Information, in connection with a merger, acquisition, reorganization or sale of assets or in the event of bankruptcy.


HealthExpense has implemented administrative, physical, and technical safeguards to protect the confidentiality of Healthcare and Financial Information in its databases; and maintains reasonable policies to limit access and detect, contain and correct security violations.

HealthExpense maintains your and your dependent’s individually identifiable data in a secure and confidential basis as noted in the previous section and as per any Appendix to this agreement or additional HIPAA Authorizations or any other additional Terms of Service.