Privacy Policy

Last Updated: September 25, 2026

Effective Date: September 25, 2026

This Privacy Policy explains how King-Chi Ltd ("we," "us," or "our") collects, uses, and protects information when you use VA Claims Coach ("the App").

1. Information We Collect

Information You Provide

Data Type	Purpose	Storage
Email address	Account creation, password reset	Encrypted
Personal statements	Generate claim documents	Encrypted, stored locally by default
Symptom tracker entries	Track your mental health journey	Encrypted, device only unless you enable sync
Uploaded documents	Organize your evidence	Encrypted, you control

Information Collected Automatically

Data Type	Purpose	Can You Opt Out?
Device type, OS version	App compatibility, bug fixes	No (required for app function)
App usage analytics	Improve features	Yes (in Settings)
Crash reports	Fix bugs	Yes (in Settings)

Device Permissions

The App requests these permissions only when you use the feature that needs them. You can decline or revoke them at any time in your device settings, and the rest of the App will continue to work.

Camera: used only to scan a VA letter you choose to capture.
Photos: used only to let you select a photo or PDF of a VA letter to upload.

What We NEVER Collect or Store:

Social Security Numbers
VA file numbers or claim numbers
Financial or banking information
Passwords to government websites
Your location (GPS)

One clarification: a VA letter you choose to upload to the Letter Decoder may itself contain details like your name, VA file number, or disability information. We do not collect or store that document. It is processed for a single request and then discarded, and it is never attached to your account. See section 2, and redact anything you would rather not share before uploading.

2. VA Letter Decoder

The app includes an optional feature that lets you scan or upload a VA letter (such as a rating decision) so the app can explain it in plain language. If you use this feature, the document, which may contain sensitive information such as your name, VA file number, and disability details, is transmitted securely to our AI provider, Google (Gemini), solely to generate your explanation. It is processed for that single request and is not stored on our servers, in our database, or on your device after the summary is produced, and it is not used to train AI models. This feature is educational only and is not legal advice. We recommend removing or redacting information you do not wish to share before uploading.

3. How We Use Your Information

We use your information only to:

Provide the service: Generate documents, track symptoms, deliver educational content
Improve the App: Understand which features are helpful, fix bugs
Communicate with you: Account notifications, support responses, important updates
Process payments: Subscription management through Apple/Google (we never see your payment details)

AI Document Generation: When you use our AI features to generate personal statements or buddy letters, your input is processed to create the document. We do not store your AI-generated content on our servers unless you explicitly choose to save it to your account.

4. What We Will NEVER Do

❌ Sell your data to third parties, advertisers, or data brokers
❌ Share with the VA or any government agency (unless legally compelled)
❌ Use your health information for advertising or marketing
❌ Train AI models on your personal content
❌ Contact your employer or share information about your disability claims
❌ Make decisions about your claim. We provide education, not claim processing

5. How We Protect Your Data

Encryption

In Transit: All data transmitted between your device and our servers uses TLS 1.3 encryption
At Rest: Sensitive data is encrypted using AES-256 encryption
On Device: Local data is protected by your device's security (passcode, biometrics)

Infrastructure Security

Hosted on Google Cloud Platform with SOC 2 compliance
Regular security audits and penetration testing
Strict access controls, only essential personnel can access systems
No employee can view your personal statements or symptom entries

Data Minimization

We collect only what's necessary to provide our services. Symptom tracker data stays on your device by default, cloud sync is optional and opt-in.

6. When We Share Information

We share your information only in these limited circumstances:

Recipient	Purpose	What's Shared
Google	Authentication, cloud storage	Encrypted account data
Apple / Google Play	Payment processing	Subscription status only
Analytics (Mixpanel)	App improvement	Anonymous usage data (opt-out available)
Google (Gemini / Vertex AI)	AI features: the Coach, document generators, and the Letter Decoder	The text and documents you submit. Sent through our secure backend, not stored after processing, and not used to train Google's models

Legal Disclosure: We may disclose information if required by law, such as in response to a valid subpoena or court order. If this happens, we will notify you unless legally prohibited from doing so.

7. Your Rights & Choices

You Have the Right To:

Access: Request a copy of all data we have about you
Export: Download your symptom tracker data and documents anytime
Delete: Permanently delete your account and all associated data
Correct: Update inaccurate information
Opt-Out: Disable analytics and non-essential data collection
Withdraw Consent: Stop using optional features that require data processing

How to Exercise Your Rights

You can manage most settings directly in the App under Profile → Settings → Privacy. For data export or account deletion, go to Profile → Settings → Export My Data or Delete Account.

For other requests, contact us at the address below.

8. Data Retention

Data Type	Retention Period
Account information	Until you delete your account
Personal statements & documents	Until you delete them (or your account)
Symptom tracker entries	Until you delete them (or your account)
VA Letter Decoder uploads	Not retained. Processed for a single request, then discarded
Analytics data	26 months (anonymized)
Support conversations	2 years after resolution

After account deletion, we remove your data within 30 days, except where retention is required by law (e.g., financial records for tax purposes).

9. Children's Privacy

VA Claims Coach is intended for U.S. military veterans and is not directed at children under 18. We do not knowingly collect information from anyone under 18. If you believe a child has provided us with personal information, please contact us immediately.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information is collected
Right to know if personal information is sold or disclosed
Right to say no to the sale of personal information
Right to equal service and price (no discrimination)

We do not sell personal information. To exercise your CCPA rights, contact us using the information below.

11. International Users

VA Claims Coach is designed for U.S. veterans and operates primarily in the United States. If you access the App from outside the U.S., your information will be transferred to and processed in the United States, which may have different data protection laws than your country.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will:

Update the "Last Updated" date at the top
Notify you via email or in-app notification
For material changes, request your consent before continuing to use the App

13. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, please contact us:

King-Chi Ltd

VA Claims Coach Privacy Team

Email: info@king-chi.org

Website: king-chi.org

For general support (not privacy-related), contact: info@king-chi.org

🆘 Crisis Resources

If you are a veteran in crisis or know one who is, help is available:

Veterans Crisis Line: Call 988, then press 1
Text: Send a message to 838255
Chat: VeteransCrisisLine.net/Chat

You are not alone. Support is available 24/7.

🔒 Our Privacy Promise