VA Claim Path

Privacy Policy

Last updated: April 18, 2026

VA Claim Path (we, us) is a product of Craftloop, built to help U.S. Veterans organize evidence for VA disability claims. This policy explains what we collect, how we use it, who we share it with, and the choices you have. If you have questions, email privacy@vaclaimpath.com.

What we collect

• Account information. Your phone number and/or email address, used only for passwordless sign-in (a one-time code sent to your phone or email via Firebase Authentication), plus an optional display name.
• Documents you upload. Service records, medical records, personal statements, buddy letters, and any other evidence you choose to submit. We parse these to extract facts that help identify claimable conditions.
• Evidence chat + quick-add input. Text you type to describe conditions or symptoms.
• Derived analytical data. AI-extracted facts, VASRD code matches, triad assessments, rating estimates, and evidence gaps — computed from your uploads.
• Operational logs. Timestamps, IP addresses, and error traces used to run and debug the service. We do not sell or share these.

How we use your data

• To process your claim evidence and produce the analyses, ratings, and suggestions you see in the app.
• To authenticate you, keep your session secure, and prevent abuse.
• To troubleshoot errors and improve product quality.

We do not use your evidence to train third-party AI models. We do not sell your personal information.

Third-party processors

We use a small set of vendors to operate the service:

• Google Cloud Platform — hosting (Cloud Run), database (Cloud SQL), Firebase Authentication.
• Anthropic — large-language-model inference used by the AI pipeline (condition synthesis, gap analysis, rating estimation). Content sent for inference is covered by Anthropic's zero-retention terms where applicable.
• Google Cloud AI / Gemini — fact extraction from uploaded documents.

Each vendor processes data only to deliver its service to us and is contractually bound to confidentiality.

Retention

We keep your evidence and derived analyses as long as your account exists. You can delete individual documents from the Evidence page, or request full account deletion by emailing privacy@vaclaimpath.com — we'll purge your data within 30 days.

Your rights

• Access. Request a copy of your data.
• Correction. Ask us to correct inaccurate data.
• Deletion. Ask us to erase your account and data.
• Export. Ask for a machine-readable copy of what you've uploaded and what we've derived.

California (CCPA/CPRA), EEA/UK (GDPR), and other jurisdictions give you these rights by law; we honor them regardless of where you live.

Children

VA Claim Path is intended for adults (18+). We do not knowingly collect data from children under 13. If you believe a child has provided us data, email us and we will delete it.

Security

We use TLS for every network connection, industry-standard hashing for secrets, role-separated service accounts, and principle-of-least- privilege access controls. No system is perfectly secure; if you believe your account has been compromised, please contact us.

Not medical or legal advice

VA Claim Path is an educational tool. It does not file claims for you, does not render medical diagnoses, and is not a substitute for advice from a Veterans Service Officer (VSO) or an accredited attorney. Always consult a qualified professional before making claim decisions.

Changes to this policy

We may update this policy to reflect product changes or legal requirements. The "Last updated" date at the top of this page indicates when it was last revised. Material changes will be announced in-app before they take effect.

Contact

Craftloop · privacy@vaclaimpath.com