Consumer Health Data Privacy Policy

Last updated: June 27, 2026 · Effective: June 27, 2026

This is GreenCheck’s dedicated Consumer Health Data Privacy Policy, provided under Washington’s My Health My Data Act (MHMDA), the Nevada consumer-health-data law (SB 370), and similar measures. It explains how we handle “consumer health data.” It supplements, and should be read with, our Privacy Policy and Terms of Service. Where this policy and the general Privacy Policy address the same topic for consumer health data, this policy controls.

1. Who we are

GreenCheck is operated by Gunning Industries, Corp., a Delaware corporation, located at 131 Continental Dr, Suite 305, Newark, DE 19713, USA (“GreenCheck”, “we”, “us”). We are the entity responsible for the consumer health data described here. For any consumer-health-data question or request, contact privacy@greencheck.app. Account holders must be adults (18+) acting as a parent or guardian on behalf of their household.

2. What consumer health data we collect

“Consumer health data” means personal information linked to you or your child that identifies past, present, or future physical or mental health status. For GreenCheck this is limited to the information you choose to enter to make the grading feature work:

• your child’s food allergies (from the “Big 9” allergen set) and their severity;
• your child’s medical conditions relevant to diet that you select;
• related dietary preferences/restrictions you set;
• the scan history and per-child grades produced from the above (which reflect the health data you entered);
• community posts you voluntarily choose to write that reference a reaction or outcome.

We do not collect precise geolocation, biometric identifiers, diagnoses from health providers, prescriptions, or any health data beyond what you enter for grading.

3. Sources

We collect consumer health data directly from you, the adult account holder, when you create or edit a child profile, run a scan, or post in the community. We do not buy consumer health data or obtain it from data brokers.

4. How & why we use it

We use consumer health data solely to:

• compare a scanned product’s ingredients and allergens against each child’s profile to produce the per-child BEST / GOOD / CAUTION / AVOID grade and reasons;
• maintain your scan history and child profiles within your account;
• provide support you request and keep the Service secure and functioning.

We do not use consumer health data to advertise to you, to build marketing profiles, to infer additional characteristics, or to train third-party AI models on your data.

5. Who we share it with

We share consumer health data only with the limited service providers (processors) that operate GreenCheck on our behalf, under contracts that restrict them to our instructions — the same providers listed in our Privacy Policy, which for the grading feature are primarily:

• Supabase — secure database, authentication, and file storage;
• OpenAI — ingredient analysis (not used to train models on your data, no advertising use);
• Vercel — application and API hosting.

We may also disclose consumer health data if required by law, to comply with a valid legal process, or to protect the rights, safety, and security of users or the public. We will not provide consumer health data in response to a legal request without a legally valid and binding order, and we will notify you where permitted by law.

6. No sale; no targeted advertising; no geofencing

• We do not sell consumer health data and have no practice of seeking the separate, valid written authorization that a sale would require.
• We do not use consumer health data for targeted advertising or share it for cross-context behavioral advertising.
• We do not use geofencing to identify or track consumers near, or to send notifications based on proximity to, any health-care facility or provider.

7. Consent & withdrawal

We collect and process consumer health data only with your consent, obtained when you choose to enter it to use the grading feature, and we use it only for the purposes you authorize and that are described here. You may withdraw consent at any time by deleting the relevant child profile or your account in the app, or by emailing privacy@greencheck.app. Withdrawing consent does not affect processing already carried out, and we will stop further processing and delete the data as described below.

8. Your rights

Subject to applicable law, you have the right to: confirm whether we process your or your child’s consumer health data; access that data; have it deleted, including by directing us to ask our service providers to delete it; and withdraw consent. We will not discriminate against you for exercising these rights. To exercise them, use the in-app controls (Settings → Delete account) or email privacy@greencheck.app. We will verify and honor your request within the time the law requires (and, for deletion, will pass the deletion to our processors). You may appeal a denial by replying to our response.

9. Security & who can access it

We protect consumer health data with encryption in transit and at rest, row-level security so each account can access only its own data, server-side permission enforcement, and scoped access for personnel. Internal access is limited to the personnel who need it to operate, support, or secure the Service. No method of transmission or storage is 100% secure, but we work to protect your information and will notify affected users and regulators of a breach where the law requires.

10. Contact

Consumer-health-data questions or requests: privacy@greencheck.app. General support: support@greencheck.app. Mailing address: 131 Continental Dr, Suite 305, Newark, DE 19713, USA. Washington residents may also contact the Washington State Attorney General; Nevada residents may contact the Nevada Attorney General.