# Privacy policy Your health information is personal. Here is what you share with Cresca, why we use it, and how to stay in control. Updated October 7, 2026 · Early access · Operated by VIANI We do not sell your personal data or use health information for advertising. We use service providers to run Cresca, including AI processing. You can download saved data and request deletion. ## Who we are Cresca Health is operated by VIANI (“we” and “us”). This policy covers the app, website, and early-access list. For privacy questions or grievances, contact our Grievance Officer, VIANI, at . Our [data-rights page](https://crescahealth.com/data-rights) explains how to make a request and how complaints are handled. ## What we collect and why - **Account and profile.** Your email, account details, and information from your sign-in service help create and secure your account. Your name, age, height, weight, activity, dietary preferences, and goals help personalize Cresca. We use your phone’s region setting, not your location, to offer local services. - **Nutrition and daily records.** Meals, nutrient estimates, water, kitchen inventory, supplements, check-ins, and observations support your journal, meal ideas, and insights. - **Cycle and optional support.** Period dates, cycle settings, body notes, and PCOS / PCOD choices support cycle-aware features. You choose whether to include additional PCOS / PCOD context in Cresca replies. - **Messages and uploads.** Your messages, selected photos, and voice recordings help answer questions, estimate meals, read labels, and transcribe speech. Chats and estimates are saved to your account. Original images and audio are not kept in chat history; processing providers may retain them under their own terms. - **Connected health.** With your permission, supported connections read sleep, step, and workout information for summaries and personalized replies, and recorded period starts for your Cresca history. Cresca does not change the original records in your health app. - **Membership and reminders.** Purchase records and subscription status manage membership access. The store handles payment details. Your reminder preferences and a device identifier help deliver notifications. - **App and device activity.** Features used, account and device identifiers, IP addresses, and error information help us improve and protect Cresca. App analytics exclude health-content fields, but usage information can still be linked to your account. - **Early access and support.** Your email and signup details help us manage the early-access list. We also note which link brought you to our site, to understand how people find us. Support messages and the details you choose to share help us respond to you. Reporting a Cresca reply shares that response, its attached details, your reason and any note with our support team for review. Optional app analytics are used only for users aged 18 or over. Records needed to secure your account and provide features always apply. ## AI features and your information Before health-data entry and AI features begin, Cresca asks for your agreement to [health-data processing and sharing with AI providers](https://crescahealth.com/consent). You can withdraw it in You → Privacy & account, or contact for help. Account, support, download and deletion tools remain available. During setup, before you create an account, your answers are sent to an AI provider only to understand them. They are not stored until you create your account. AI features send messages, selected uploads, and relevant profile, nutrition, cycle, and conversation information to external AI providers. This supports replies, food estimates, transcription, and personalized suggestions. Some suggestions and insights are prepared automatically as you use Cresca. Your PCOS / PCOD and connected-health choices control whether that optional context is included. Turning them off does not erase earlier messages or remove information you type into a new message. We ask AI providers not to keep your requests or use them to train models where the provider supports this. AI providers may retain requests or use them to improve or train models, depending on the service and its terms. See [how to request changes to processing](https://crescahealth.com/data-rights#withdrawal) and our [health and AI guidance](https://crescahealth.com/health-disclaimer). ## Who receives information We use service providers to operate Cresca. They receive information needed for their role, including: - **Account, storage, and security services:** account information, saved records, and activity needed to provide and protect the service. - **AI services:** the messages, uploads, and relevant context described above. - **App analytics:** usage and device information to understand performance and improve features. - **Payment and membership services:** purchase details and account information needed to manage access. - **Communication services:** email addresses, signup details, support messages, and notification information needed to deliver communications. Your account data is stored in India. Some service providers, including AI providers, process information in other countries, including the United States, where privacy laws may differ. We choose providers that protect information to a standard comparable to ours. We may also disclose information when required by law or to protect users and the service from fraud or abuse. You can [ask us for a list of the providers that handle your information](mailto:support@crescahealth.com?subject=Cresca%20service%20provider%20list). ## Storage, retention, and deletion Saved app records stay with your account until you remove them or delete the account. Connected sleep and movement summaries cover up to seven days on your phone and are removed when you disconnect. If you allow period-date access, recorded period starts are saved in your Cresca history until you delete them here. Deleting all saved data or your account removes that information too. Waitlist information is kept until you request removal or it is no longer needed for early-access communications. When you delete records in the app, they are removed from Cresca’s active systems promptly. For email requests, we act after verifying account ownership. Backup copies are cleared within 6 months. Some security and purchase records are kept longer where needed for fraud prevention or legal obligations. Information already sent to an AI provider is handled under that provider’s terms. See [account and data deletion](https://crescahealth.com/delete-account) for what each option removes. Copies you export or share, and original records in a connected health app, are separate from Cresca’s saved records. ## Permissions, browser storage, and choices Manage camera, microphone, photo, notification, and health permissions in your phone settings. Health integrations and Condition support (PCOS / PCOD) have additional choices in the You tab. Some features need these permissions to work. The website uses browser storage only for basic functions and spam protection. It does not use advertising or product-analytics trackers. External sign-in, payment services, and linked websites have their own privacy practices. In You → Privacy & account, you can download records, clear chat, or delete saved data. Read [Your data & rights](https://crescahealth.com/data-rights) for correction, withdrawal, and privacy requests. ## Security We use encryption during transfer and access controls to protect your information. No service can guarantee absolute security. Report concerns through [Contact & support](https://crescahealth.com/support). ## Complaints If you have a concern, contact our Grievance Officer (above). We will acknowledge it and aim to resolve it within 30 days. If you’re not satisfied, you can ask for a review by someone not involved in the original decision. Depending on where you live, you can also complain to your privacy regulator: in India, the Data Protection Board of India (once its complaint process is in force); in Australia, the Office of the Australian Information Commissioner ([oaic.gov.au](https://www.oaic.gov.au)); in the US, your state attorney general. ## Children and age eligibility Cresca’s initial release is for adults aged 18 and over. If you believe a child has shared personal information with us, contact us so we can investigate and arrange appropriate removal. ## Policy changes The date at the top shows when this policy took effect. We tell you about material changes by email or in the app before they take effect, and ask for consent again where required. --- Source: [Privacy Policy · Cresca Health](https://crescahealth.com/privacy)