Consumer Health Data Privacy Policy

All of it comes from you, or from an AME office you visit, never from data brokers:

• Your medical certificate: the photo you upload and what is read from it: class, exam date, expiration, limitations and date of birth.
• Conditions and medications: what you enter in your account, including the medication tracker, assessments and the Form 8500-8 mirror, and the documents you upload.
• Medication searches: the names you look up in our Can I Fly? medication check.
• Your AME connections: which Aviation Medical Examiners you choose to connect with.
• Which guides you read: only if you accept analytics cookies, the pages you visit, including our condition guides (for example /depression), and recordings of your visits to our public pages. Inside your account we record only which pages are visited.
• Patients of AME offices: if your AME office uses Clear to Proceed at its front desk, your name, contact details, visit services and payments, held for that office.

Only to provide what you asked for: tracking your certificate and privilege dates and sending your reminder emails; medication checks, assessments, the document checklist and the 8500-8 mirror; connecting you with the AMEs you choose; running an AME office's front desk for that office; keeping the service secure; and, with your analytics consent, understanding which pages work. We do not use it for advertising.

We never sell health data, and we never send it to advertising companies (Meta, Reddit, Google Ads). It is shared only with:

• Service providers that process it for us under contract: Supabase (database, file storage and sign-in), Vercel (hosting), Anthropic (reads certificate photos and answers medication and FAA questions; only what you upload or ask is sent), Resend (email delivery) and, only with your analytics consent, PostHog (page visits and recordings as described above).
• AMEs you connect with: the profile information you choose to share with them.
• An AME office you visit: its own front-desk records about you.
• When the law requires it: for example to answer a valid legal order.

• See it: ask which of your health data we hold and who has received it.
• Delete it: ask us to delete your health data; we delete it from our systems and tell our service providers to do the same.
• Withdraw consent: turn analytics cookies off at any time with Cookie settings at the bottom of our pages, and turn reminder emails off in Settings or from any reminder email.

Email support@ctpmed.com from the address on your account. We confirm who you are before acting, answer within 45 days (we tell you if we need up to 45 more), and charge nothing. If we decline a request you may appeal by replying to our answer; we answer an appeal within 45 days, and you may also contact your state Attorney General.

If we change what health data we collect, why, or who receives it, we update this page and its effective date first, and ask for your consent where the law requires it.