Crosscheck — Consumer Health Data Privacy Policy

Version 2026-11. This policy takes effect on 16 October 2026.

This policy explains how GJU Software LLC, doing business as Crosscheck ("Crosscheck," "we," "us" or "our"), collects, uses and shares consumer health data: information that is linked or reasonably linkable to you and that identifies your past, present or future physical or mental health. We publish it because Washington's My Health My Data Act and Nevada's law on consumer health data call for one, and we apply it to everyone who uses Crosscheck, wherever they live. Everything else about how we handle personal information is in our Privacy Policy.

1. The consumer health data we collect, and how we use it

We collect consumer health data only when you enter it, add it, or ask a feature to bring it in, and only for the uses below.

Apart from messages you send to our support addresses, which our support mailbox keeps as you wrote them, reminder dates, the medical class of your automatic medical reminder, and reviews are the only health-related items we store in readable form. For each encrypted record, we also store a readable yes-or-no marker showing whether it belongs to a paid area of Crosscheck; it does not say what the record is or what it contains. We can also see which encrypted items are documents, how many documents you hold and how much storage they use, and when each encrypted item was last changed, but not what any of them says.

We do not use consumer health data for advertising, marketing, analytics, research, model training, or product decisions.

2. Where it comes from

• You, when you enter it or add a document.
• Your own browser, which works out your dates, and the class and date of your automatic medical reminder, from what you enter.
• The FAA's MedXPress page, from which Crosscheck Fill-in, or the Crosscheck app's MedXPress window, reads your MedXPress confirmation number and its dates after you submit your application.

We do not obtain consumer health data from health care providers, insurers, data brokers, health platforms or anyone else.

3. How we process it

Your records are encrypted on your device before they are sent, and our database host stores the encrypted result. They become available only after you sign in, and in normal operation they are decrypted only in the open tab or the open Crosscheck app, which clears them when you sign out, close the tab, or leave it untouched for 15 minutes. On our website those 15 minutes also sign you out. In the Crosscheck app for iPhone and iPad, if you turn on Sign in with Face ID, they lock the app instead and Face ID opens it again, and your password, and a texted code if your account uses one, are asked again at least every 30 days. A document you scan, photograph or choose in the app is kept readable on your device only until it is encrypted and sent, or until you leave the screen (Privacy Policy, Section 3.2A).

Crosscheck operates the systems used to provide the Service, so we do not represent that technical access to user records is impossible. Crosscheck does not provide staff with a routine interface for viewing readable user records, and accessing user records is not part of normal staff operations. We maintain security logs related to access to your records for security and incident-response purposes. Staff who need to see consumer health data for their work, such as reading a review before it is published or answering your message, see only what that work needs.

When you press Start filling MedXPress, Crosscheck gives Crosscheck Fill-in the answers for this fill. Fill-in keeps them only in memory while it fills, never saves them, and erases them when it stops. The Crosscheck app's own MedXPress window works the same way, and forgets the answers when it closes or the app locks.

When a paid plan ends. When a paid plan ends for good, the records in the areas that belong to paid plans (your doctor visits, medications, documents, MedXPress profile, Certification Assistant plans and FAA letters, and your own dates and reminders) are kept, read-only, for 12 months and then deleted. We email you 60, 30 and 7 days before, naming the date, and nothing is deleted if you start a paid plan again first (Terms of Use, Section 13.3). Your medical details and your automatic medical reminder are not deleted by this.

4. Who receives it

Our service providers, which process it to provide their services to us:

• our database host (Supabase), which stores your encrypted records and documents, the readable reminder details and reviews;
• our hosting provider (Cloudflare), which serves the site and protects access to your records, and counts visits to the public pages of our website (Cloudflare Web Analytics; not used on the sign-in pages, in your account area or in your records);
• our email delivery provider (Resend), which delivers reminder emails, carrying the date and, for your automatic medical reminder, your medical class, and passes messages you write on the Contact page to our support mailbox;
• our messaging provider (Twilio), which delivers reminder texts, carrying the date, if you turn them on;
• our support mailbox provider (Zoho), which holds messages you send to our support addresses; and
• our mail-handling provider (Northwest Registered Agent), which receives and scans what you send to our postal address.

Our payment processor (Stripe) receives nothing from your records. It does receive any promotion code you use. A code an examiner gave you may name that examiner, so it can show which examiner referred you.

The FAA, when you use Crosscheck Fill-in or the app's MedXPress window. The MedXPress pages Fill-in or the window fills, including your medication, visit and medical-history answers, go to the FAA's MedXPress system when Fill-in presses Add, Yes or Next at your instruction.

Your mobile carrier, which carries reminder texts that give a date, if you turn them on.

The public, only with your separate agreement. When you send a review, you agree that we may publish it. A published review shows your rating, your words, the price you paid and whether that included an EKG, the class of exam and the month of your visit, and never your name, initials, handle, account or exact date. You can take it down at any time from that examiner's page, and once you have, we do not publish it again unless you write it again.

When the law requires it. We disclose consumer health data when we believe in good faith that the law requires it, such as a valid subpoena, court order or warrant, and then only what is required. We will tell you first unless the law prohibits it or there is an emergency involving a risk of death or serious physical injury to someone.

If our business changes hands. If GJU Software LLC is involved in a merger, acquisition or sale of all or part of its business, consumer health data may be transferred as part of it, and the new owner must handle it as this policy describes.

Affiliates. We have no affiliates, and we share no consumer health data with any affiliate.

Apart from these, we share consumer health data with no other third party. On request, we will give you a list of every third party that has received your consumer health data, with its contact details (Section 6).

5. Your consent

How you give it. The sign-up page has three boxes, each unticked until you tick it, and your account is made only when all three are ticked. One of them, separate from the other two, is your consent to Crosscheck storing and using the health information you enter, as this policy describes, and it links this policy. Directly above that box, the sign-up page summarizes what the consent covers: the categories in Section 1, the uses in Section 1 including the automatic medical reminder, the service providers and other recipients in Section 4, and how to withdraw. It is separate from accepting our Terms of Use.

What it covers. In the box and in this policy, "health information" means the consumer health data Section 1 lists. Your consent covers collecting the consumer health data you enter and using it as Section 1 describes, including the automatic medical reminder, and its processing by the service providers in Section 4. When you add your medical details, the set-up page also offers to turn the automatic medical reminder off. Anything beyond that needs a separate agreement: we publish a review only when you agree as you send it, and we send reminder texts only if you turn them on in Settings and my data by ticking a box that starts empty.

How to withdraw it. You can withdraw your consent at any time, in any of these ways:

• delete your records, in Settings and my data;
• delete your account, in Account & privacy; or
• email privacy@crosscheckmed.com from the address on your account.

You can also withdraw a single use: turn off your automatic medical reminder in Settings and my data, remove a reminder, turn reminder texts off or reply STOP, take a review down, or stop using Crosscheck Fill-in.

What withdrawing does. We stop collecting and using the consumer health data the withdrawal covers, at once when you use a control in Crosscheck and within 15 days at the latest when you ask us by email. Without your consent we cannot keep health records for you, so withdrawing it in full means deleting your records. Delete my records keeps your records for 30 days so that you can undo it, and uses them for nothing else. Deleting your account deletes them at once. If you withdraw your consent by email, or ask us by email to delete your records before the 30 days are up, we delete them within 15 days. Document files are removed from storage at the next daily clean-up, and copies in backups are deleted within 90 days. Withdrawing does not affect what we did before you withdrew. We keep a record that you gave your consent and when, which is described in the Privacy Policy and holds no health information.

New uses. Before we collect a new category of consumer health data, use it for a new purpose, or share it with a new kind of recipient, we will update this policy and ask for your consent.

6. Your rights

You have the right to:

• confirm whether we collect, share or sell your consumer health data, and see it;
• get a list of every third party and affiliate that has received it, with an email address or other way to contact each;
• withdraw your consent (Section 5); and
• have it deleted, including by our service providers and from backups, as "When we answer" below describes.

How to make a request. Use Settings and my data (export your records, or delete them) or Account & privacy (delete your account), or email privacy@crosscheckmed.com from the address on your account, or write to us at the address in Section 9. If you are signed in, that is how we know it is you; for a request by email, we may ask you to confirm it from the address on your account. An authorized agent may act for you with your written permission.

When we answer. We answer within 45 days after receiving your request. If we need longer, we will tell you within those 45 days, with the reason, and answer within 45 more days. When we delete consumer health data at your request, we do so within 30 days after verifying the request (or, if you used Delete my records, when its 30-day undo ends, unless you ask us to delete sooner), tell our service providers to delete it too, except what a provider keeps for a short fixed period or under its own policy and the law, as the Privacy Policy describes (Sections 10, 12 and 15), and remove it from backups within 90 days. Requests are free.

Appeals. If we decline your request, in whole or in part, you can appeal by replying to our answer or by emailing privacy@crosscheckmed.com with "Appeal" in the subject line. We will decide within 45 days and tell you in writing what we did and why. If you disagree with our decision, you can contact your state Attorney General: in Washington at atg.wa.gov, in Nevada at ag.nv.gov, and in Connecticut at portal.ct.gov/ag.

We will not deny you the Service, charge you more, or give you a worse service because you used any of these rights.

7. Reviewing and changing your data

You can see and correct your records at any time in My records. You can change or take down a review from that examiner's page. For anything else, email privacy@crosscheckmed.com.

8. Collection by other companies

We do not allow any third party to collect consumer health data about your activity on Crosscheck over time or across other websites.

9. Changes to this policy, and contact

If we make a material change to this policy, we will tell you at least 30 days before it takes effect, by email to the address on your account and by a notice in Crosscheck. A change the law requires may take effect sooner, and we will tell you as soon as we can. A change that would collect a new category of consumer health data, use it for a new purpose, or share it with a new kind of recipient applies only after you give your consent. Earlier versions of this policy are available on request from privacy@crosscheckmed.com.

GJU Software LLC, doing business as Crosscheck, 7901 4th St N #36361, St. Petersburg, FL 33702, USA.

Telephone: (954) 569-6920

privacy@crosscheckmed.com