Your data & rights

Our Grievance Officer, VIANI, handles privacy requests and complaints at support@crescahealth.com.

Choices in the app

• See and download: You → Privacy & account → Download my data gives you a copy of saved app records. Contact us for information outside this export.
• Correct: edit your details in You → Your details & goals and editable records in Today, Supplements, Kitchen, or Cycle & periods. Contact us if a record cannot be corrected there.
• Remove: clear chats or delete saved data in You → Privacy & account. To remove sign-in too, use Delete account on the same page. Compare deletion options.
• Connected health: disconnect in Health integrations to stop future syncing and remove imported summaries. Change category permissions in the phone’s health settings.
• Optional support: change “Use in Cresca” in Cycle & periods → Condition support. Previously saved records and messages are separate from this choice.
• Reminders: change notification preferences in the app or revoke permission in phone settings.

Withdraw consent or make a request

To withdraw health and AI consent, open You → Privacy & account and choose Withdraw consent now. New health-data entry, AI requests and automatic insights will pause. You can still download or delete saved records. Read the consent details for the scope of this choice.

For other processing changes, analytics, or the early-access list, email us with what you would like stopped. We will explain the available options and confirm how your request is handled.

You can also contact support@crescahealth.com to withdraw your consent. Email requests require review and confirmation; sending an email does not stop processing immediately. Use the in-app withdrawal control to pause covered processing while you wait.

Withdrawal concerns future processing. It does not undo completed processing or automatically remove earlier records. You can request erasure separately, subject to applicable legal retention requirements.

Your rights in India

India’s Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025 provide rights over personal information. These apply as the relevant provisions take effect and according to your circumstances. They include:

• Notice and consent: understand the data involved, its purposes, and how to withdraw consent or raise a grievance. Our privacy policy describes the data and purposes.
• Access: request a summary of personal data being processed and processing activities, and information about sharing as provided by applicable law.
• Correction and erasure: request correction, completion, updating, or removal of personal data, with applicable exceptions for necessary or legally required retention.
• Grievance redressal: raise a concern about how your information or request has been handled.
• Nomination: where applicable, nominate someone to exercise your rights in the event of death or incapacity. Contact us about making a nomination.

You can read the official DPDP Act (PDF) and DPDP Rules (PDF) for more information.

Privacy requests and grievances

1. Email support@crescahealth.com with “Privacy request” or “Privacy grievance” in the subject. Use your account email where possible and describe the outcome you want.
2. We may need to verify account ownership or authority to act for someone else. Do not send a password, one-time code, or medical records with the initial request.
3. We respond promptly and within the time the law allows: within 30 days for grievances, or 45 days for US state privacy requests. Appeals: if we decline or you disagree with the outcome, reply with “Appeal” in the subject. Someone not involved in the original decision reviews it, and we respond within 45 days, with the reasons and how to contact your regulator.

We delete selected records from Cresca’s active systems promptly after in-app confirmation or verification of an email request. See deletion timing and exceptions for backups and retained records.

Where applicable, you may raise an unresolved grievance with the Data Protection Board of India after using our grievance process. In Australia, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au). Other rights may apply where you live.