Your data & rights

Choices in the app

• See and download: Profile → Privacy → Download my data gives you a copy of saved app records. Contact us for information outside this export.
• Correct: edit your details in Profile and editable records in Journal, Supplements, Inventory, or Period history. Contact us if a record cannot be corrected there.
• Remove: clear chats or delete saved data in Privacy. To remove sign-in too, use Profile → Delete account. Compare deletion options.
• Connected health: disconnect in Health integrations to stop future syncing and remove imported summaries. Change category permissions in the phone’s health settings.
• Optional support: change “Use in Cresca” in PCOS / PCOD support settings. Previously saved records and messages are separate from this choice.
• Reminders: change notification preferences in the app or revoke permission in phone settings.

Withdraw consent or make a request

To withdraw health and AI consent, open Profile → Privacy → Health data & AI. New health-data entry, AI requests and automatic insights will pause. You can still download or delete saved records. Read the consent details for the scope of this choice.

For other processing changes, analytics, or the early-access list, email us with what you would like stopped. We will explain the available options and confirm how your request is handled.

While a request to stop AI processing is pending, pause use of the app to avoid further requests, including automatic suggestions. Sending an email does not stop processing immediately.

Withdrawal concerns future processing. It does not undo completed processing or automatically remove earlier records. You can request erasure separately, subject to applicable legal retention requirements.

Your rights in India

India’s Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025 provide rights over personal information. These apply as the relevant provisions take effect and according to your circumstances. They include:

• Notice and consent: understand the data involved, its purposes, and how to withdraw consent or raise a grievance. Our privacy policy describes the data and purposes.
• Access: request a summary of personal data being processed and processing activities, and information about sharing as provided by applicable law.
• Correction and erasure: request correction, completion, updating, or removal of personal data, with applicable exceptions for necessary or legally required retention.
• Grievance redressal: raise a concern about how your information or request has been handled.
• Nomination: where applicable, nominate someone to exercise your rights in the event of death or incapacity. Contact us about making a nomination.

You can read the official DPDP Act (PDF) and DPDP Rules (PDF) for more information.

Privacy requests and grievances

1. Email support@crescahealth.com with “Privacy request” or “Privacy grievance” in the subject. Use your account email where possible and describe the outcome you want.
2. We may need to verify account ownership or authority to act for someone else. Do not send a password, one-time code, or medical records with the initial request.
3. We aim to send a first response within 24–48 hours, with next steps, an expected resolution time, and any retention requirement. If you are unhappy with the response, ask for review in the same thread.

Our deletion target is 24 hours for selected records in Cresca’s active systems, following in-app confirmation or verification of an email request. See deletion timing and exceptions for backups, provider copies and retained records.

Where applicable, you may raise an unresolved grievance with the Data Protection Board of India after using our grievance process. Other rights may apply where you live.