Privacy policy

Who we are

Cresca Health is operated by VIANI (“we” and “us”). This policy covers the app, website, and early-access list. For privacy questions or grievances, contact support@crescahealth.com. Our data-rights page explains how to make a request.

What we collect and why

• Account and profile. Your email, account details, and information from your sign-in service help create and secure your account. Your name, age, height, weight, activity, dietary preferences, and goals help personalize Cresca. An optional country or region choice helps show available local services without requiring your device’s location.
• Nutrition and daily records. Meals, nutrient estimates, water, kitchen inventory, supplements, check-ins, and observations support your journal, meal ideas, and insights.
• Cycle and optional support. Period dates, cycle settings, body notes, and PCOS / PCOD choices support cycle-aware features. You choose whether to include additional PCOS / PCOD context in Cresca replies.
• Messages and uploads. Your messages, selected photos, and voice recordings help answer questions, estimate meals, read labels, and transcribe speech. Chats and estimates are saved to your account. Original images and audio are not kept in chat history; processing providers may retain them under their own terms.
• Connected health. With your permission, supported connections read sleep, step, and workout information for summaries and personalized replies. Cresca does not change the original records in your health app.
• Membership and reminders. Purchase records and subscription status manage membership access. The store handles payment details. Your reminder preferences and a device identifier help deliver notifications.
• App and device activity. Features used, account and device identifiers, IP addresses, and error information help us improve and protect Cresca. App analytics exclude health-content fields, but usage information can still be linked to your account.
• Early access and support. Your email and signup details help us manage the early-access list. Support messages and the details you choose to share help us respond to you. Reporting a Cresca reply shares that response, its attached details, your reason and any note with our support team for review.

Optional app analytics stay off unless your profile age or age declaration indicates that you are 18 or older. An age below 18 takes priority over an earlier declaration. Essential records needed to secure your account, provide features, and manage usage still apply.

AI features and your information

Before health-data entry and AI features begin, Cresca asks for your agreement to health-data processing and sharing with AI providers. You can withdraw it in Profile → Privacy → Health data & AI. Account, support, download and deletion tools remain available.

AI features send messages, selected uploads, and relevant profile, nutrition, cycle, and conversation information to external AI providers. This supports replies, food estimates, transcription, and personalized suggestions. Some suggestions and insights are prepared automatically as you use Cresca.

Your PCOS / PCOD and connected-health choices control whether that optional context is included. Turning them off does not erase earlier messages or remove information you type into a new message.

AI providers may retain requests or use them to improve or train models, depending on the service and its terms. See how to request changes to processing and our health and AI guidance.

Who receives information

We use service providers to operate Cresca. They receive information needed for their role, including:

• Account, storage, and security services: account information, saved records, and activity needed to provide and protect the service.
• AI services: the messages, uploads, and relevant context described above.
• App analytics: usage and device information to understand performance and improve features.
• Payment and membership services: purchase details and account information needed to manage access.
• Communication services: email addresses, signup details, support messages, and notification information needed to deliver communications.

Information may be processed outside India, where privacy laws may differ. We may also disclose information when required by law or necessary to protect users and the service from fraud or abuse. You can ask us about the providers handling your information.

Storage, retention, and deletion

Saved app records stay with your account until you remove them or delete the account. Connected-health summaries cover up to seven days on your phone and are removed when you disconnect. Waitlist information is kept until you request removal or it is no longer needed for early-access communications.

Our target is to complete deletion of the selected records from Cresca’s active systems within 24 hours. In-app removal normally takes effect when deletion succeeds. For email requests, the target starts after we verify account ownership and confirm the requested deletion.

Backups and copies retained by external providers may take longer. Some security and purchase records may also remain for fraud prevention or legal obligations. The 24-hour target does not cover these records; contact us for the periods and exceptions relevant to your information.

See account and data deletion for what each option removes. Copies you export or share, and original records in a connected health app, are separate from Cresca’s saved records.

Permissions, browser storage, and choices

Manage camera, microphone, photo, notification, and health permissions in your phone settings. Health integrations and PCOS / PCOD support have additional choices in Profile. Some features need these permissions to work.

The website uses browser storage for basic functionality and does not use advertising or product-analytics trackers. We use short-lived request counters to protect the signup form from spam. External sign-in, payment services, and linked websites have their own privacy practices.

In Profile → Privacy, you can download records, clear chat, or delete saved data. Read Your data & rights for correction, withdrawal, and privacy requests.

Security

We use encryption during transfer and access controls to protect your information. No service can guarantee absolute security. Report concerns through Contact & support.

Children and age eligibility

Cresca’s initial release is for adults aged 18 and over. If you believe a child has shared personal information with us, contact us so we can investigate and arrange appropriate removal.

Policy changes

We update the date when this policy changes. For material changes, we will provide appropriate notice and seek consent where required.