What we actually collect.

Answering the questions

While you are working through the check, your answers are stored in your browser's local storage under the name aioseniors.check.v1. That is what lets you close the tab and pick it up later. At that stage they are on your device only.

To delete that: use the Start again button at the end of the check, which clears it immediately. Clearing your browser's site data for aioseniors.com does the same.

Asking us to email your plan

The last screen asks for your first name and email, with a consent box that is never pre-checked. If you complete it, this is what we receive and keep:

• Your first name and email address
• The ZIP code you entered, and whether it resolved to California
• Your answers about the situation: who it is for, age range, whether Medicare or Medicaid is in place, whether there was military service, whether you are working, a broad income band, and what is getting hard
• The exact wording of the consent you agreed to, and the moment you agreed to it
• Which page you came from

We do not receive anything else, because the check never asks for anything else.

Your plan link

Your plan gets a private web address containing a random 32 character token. It is not listed in our sitemap, it is marked so search engines do not index it, and it is not guessable. Anyone who has the link can open it, so treat it like any other private link: forward it to a sibling if that helps, and do not post it publicly.

What we do with it

Two things, and nothing else. We email you your plan, and we send a small number of follow-up emails about the programs in it and how to actually get them applied for.

Those emails are sent through the shared system run by Digilu, the company that builds AIOSeniors. That is the same company, not a third party we sold your details to. Email delivery is handled by Cloudflare, which hosts this site.

We do not sell or rent your information to insurers, agencies, lead buyers, advertisers or anyone else.

Stopping the emails, and deletion

Every email we send carries a one click unsubscribe. Using it stops all of them, and that suppression is permanent: it is never cleared by a later job or a new submission.

To have your record deleted entirely, email [email protected] from the address you signed up with and ask. We will delete it and confirm.

How long we keep it

Your plan is held for about 13 months so the link keeps working, then expires. The lead record is held for about two years unless you ask us to delete it sooner.

What we never ask for

No Social Security number. No Medicare number. No insurance member ID or policy number. No bank or payment details. No medication list, diagnosis history, or photographs of insurance cards. None of that is needed to tell you which programs are worth a phone call.

Web addresses

We do not put your answers in a web address. If you begin the check from the home page by entering a ZIP code, that ZIP is passed to the start page and then immediately removed from the address bar. Addresses get logged by servers, saved in history and pasted into messages, so personal details do not belong in them.

Cookies

This site sets no cookies. There is no consent banner because there is nothing to consent to, which is also why there is no banner standing between you and the first question.

Third parties

This site loads no third party scripts, no advertising, no trackers, no embedded video and no social widgets. The one webfont is served from this site rather than from Google, so using this page does not tell Google anything about you.

The only outbound requests happen when you deliberately click a source link, which takes you to an official site such as cdss.ca.gov, medicare.gov or va.gov. Those sites have their own privacy policies and we do not control them.

Analytics

The check records events for its own use, such as which step was completed and where people stop. These are event names and step numbers only. They never contain your answers, your ZIP code or anything identifying, and today they are held in the page and discarded when you close the tab.

If that ever changes, this page changes with it, in the same release. We will not quietly begin transmitting something this page says stays local.

Server logs

This site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes standard request information such as IP address and browser type in order to serve the page and protect against abuse. We do not use that to build a profile of you.

Children

This service is intended for adults and is not directed at children.

Changes

When behaviour changes, this page changes in the same release rather than afterwards. The review date below is the date the page was last checked against what the site actually does.

Your rights under California law

California gives residents specific rights over personal information under the CCPA as amended by the CPRA. These apply to you whether or not we are large enough to be covered, because we intend to honour them either way.

What we collect, in the categories the law uses

• Identifiers: your first name and email address, and the ZIP code you enter.
• Characteristics that can be sensitive: age range, whether Medicare or Medicaid is in place, whether there was military service in the family, a broad income band, and the general kinds of help you told us are needed.
• Internet activity: which page you started from.
• Geolocation, coarse: the county your ZIP resolves to. Never precise location.

We do not collect a Social Security number, a Medicare number, an insurance member ID, a policy number, financial account details, precise location, biometric data, or the contents of your messages. We do not ask for a medical diagnosis, a medication list, or any record from a doctor.

Why we collect it

To generate your plan, to send it to you, and to send a small number of follow-ups about the programmes in it. Nothing else. We do not use it to build a profile, to advertise, or to train anything.

We do not sell or share your personal information

Not for money and not for anything else of value, and not for cross-context behavioural advertising, which is what "sharing" means under this law. We have never done so. Because of that there is nothing for a "Do Not Sell or Share My Personal Information" link to switch off, and you will not find one here.

Sensitive personal information

Some of what you tell us is treated as sensitive. We use it only to work out which programmes may apply to your family, which is the purpose you gave it to us for. We do not use or disclose it for any other purpose, so the right to limit its use does not have anything to bite on here.

Who else sees it

Our own systems, which means Digilu, the company that builds AIOSeniors. Cloudflare hosts the site and delivers the email, acting as a service provider under contract and not permitted to use your information for its own purposes. Nobody else. We do not pass your details to any programme, agency, insurer or lead buyer, and applying to a programme is always something you do yourself.

How long we keep it

Your plan for about 13 months, so the link keeps working. Your contact record for about two years. Consent records for as long as we rely on them, because being able to show what you agreed to and when is the point of them. Anonymous county-level counts are kept indefinitely, and they contain nothing that identifies you.

Your rights, and how to use them

• Know what we hold about you and where it came from.
• Delete it. We null your details, detach the record and revoke your plan link.
• Correct anything that is wrong.
• Opt out of the emails, in one click in any email, or by asking.
• Not be discriminated against for using any of these. The tool is free and stays exactly as free and as complete either way.

Email [email protected] from the address you signed up with, which is how we confirm it is you without asking for anything further. If you cannot, tell us enough to find the record. We aim to answer within 45 days, which is the period the law allows, and usually much sooner. An authorised agent may act for you with your written permission.

If we get it wrong

Tell us first and we will fix it. You can also complain to the California Privacy Protection Agency or the California Attorney General.

Contact

Questions about privacy: [email protected]

Last reviewed 28 July 2026