Krossa Privacy Policy

Krossa is built by NUVEDA.AI PRIVATE LIMITED (“Nuveda”, “we”, “us”, “our”), incorporated in India. This policy covers the Krossa mobile app for iOS and Android, and the account you hold with us.

For the nuveda.ai website, our waitlists, and email you send us, see the Nuveda.ai Privacy Policy.

Health and fitness data is sensitive, and we treat it that way. We ask for it separately, in the app, and you can withdraw that permission at any time by disconnecting the health source or deleting your account. Krossa works only with the data you choose to connect — nothing is read from your phone without your permission.

We use your data to do the things you opened the app for, and nothing else:

• To build your training plan and adapt it as your training and your life change
• To show you how you are progressing against your own past performance
• To create and secure your account
• To answer your questions and support requests
• To keep the app working, stable and secure
• To meet our legal obligations

We use your personal data only to provide and improve Krossa. We do not share it with third parties for their own marketing or advertising purposes, we do not build advertising profiles, and we do not use your health data for anything other than coaching you.

We do not share your personal data with anyone for their own purposes. We do rely on trusted service providers to run the app. They act on our instructions, under contract, and may only use your data to provide their service to us:

Some of these providers operate outside India. When your data crosses a border, we make sure appropriate contractual protections are in place. We will also disclose data if the law genuinely requires it — a court order or a lawful demand from a government authority — and where we are permitted to tell you, we will.

If you need the current list of the specific providers we use, email us at support@nuveda.ai and we will share it.

• Your account and training data: for as long as your account is open. If you delete your account, we delete it.
• Emails you send us: long enough to deal with your enquiry and any follow-up, then deleted.
• Diagnostic and crash data: a short period, to find and fix the problem it reported.

When data is no longer needed, we delete it or make it irreversibly anonymous. Deleted data may persist briefly in routine encrypted backups before those are cycled out.

You stay in control of your data. Some of this you can do yourself, right now:

• Delete your account — in the app under Account → Delete account, or via our Delete your account page if you have already uninstalled it. This is permanent.
• Disconnect Apple Health or Health Connect — in the app, or in your phone’s system settings. We stop reading new health data immediately.
• Turn off location — in your phone’s settings. Route and distance tracking will stop working, but the rest of the app will not.
• Unsubscribe from any email we send, using the link in it.

You also have rights under India’s Digital Personal Data Protection Act 2023, under which we act as a Data Fiduciary. Email support@nuveda.ai to exercise any of them:

We aim to respond within five business days, and will always respond within 30 days.

We use industry-standard measures to protect your data, including encryption in transit and at rest, access controls that limit who on our team can see personal data, and regular review of how we handle it.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your data, we will notify you and the relevant authorities as the law requires. If you spot a security problem, please tell us at support@nuveda.ai — we would rather hear it from you than not at all.

Krossa is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

We will update this policy as Krossa evolves. If a change meaningfully affects how we use your data or what rights you have, we will update the effective date at the top and, where practicable, tell you in the app or by email.

For any question, request or complaint about your data or this policy, write to us. A real person reads it.