Krossa Privacy Policy

Effective date: 10 June 2026 · NUVEDA.AI PRIVATE LIMITED

Krossa only works because you trust it with training data about your body. This policy explains, in plain language, what the app collects, why, who we share it with, how long we keep it, and how you stay in control. We use it to coach you, and for nothing else.

1. Who we are and what this covers

Krossa is built by NUVEDA.AI PRIVATE LIMITED (“Nuveda”, “we”, “us”, “our”), incorporated in India. This policy covers the Krossa mobile app for iOS and Android, and the account you hold with us.

For the nuveda.ai website, our waitlists, and email you send us, see the Nuveda.ai Privacy Policy.

2. What Krossa collects

Account

Email, name, date of birth (to confirm you are 18 or over), and password

Create and secure your account

Health & fitness

Workouts, heart rate, distance, pace, duration and similar metrics you allow us to read from Apple Health or Health Connect, plus workouts you record in the app

Build your training plan, adapt it, and show your progress

Location

Precise GPS location while you are actively recording a run, walk or ride — including in the background, if you allow it

Measure distance, pace and route for that workout

Diagnostics

Crash reports and basic usage data

Keep the app stable and fix problems

Health and fitness data is sensitive, and we treat it that way. We ask for it separately, in the app, and you can withdraw that permission at any time by disconnecting the health source or deleting your account. Krossa works only with the data you choose to connect — nothing is read from your phone without your permission.

3. Why we collect it

We use your data to do the things you opened the app for, and nothing else:

To build your training plan and adapt it as your training and your life change
To show you how you are progressing against your own past performance
To create and secure your account
To answer your questions and support requests
To keep the app working, stable and secure
To meet our legal obligations

We use your personal data only to provide and improve Krossa. We do not share it with third parties for their own marketing or advertising purposes, we do not build advertising profiles, and we do not use your health data for anything other than coaching you.

4. Who we share it with

We do not share your personal data with anyone for their own purposes. We do rely on trusted service providers to run the app. They act on our instructions, under contract, and may only use your data to provide their service to us:

Cloud hosting & storage

Running the app and storing your account and training data

Authentication

Signing you in and keeping your account secure

AI providers

Generating your coaching recommendations from the training data you have given us

Maps

Drawing your routes

Crash & error reporting

Telling us when something in the app breaks

Email delivery

Sending the messages you have asked us for

Some of these providers operate outside India. When your data crosses a border, we make sure appropriate contractual protections are in place. We will also disclose data if the law genuinely requires it — a court order or a lawful demand from a government authority — and where we are permitted to tell you, we will.

If you need the current list of the specific providers we use, email us at support@nuveda.ai and we will share it.

There is one other case, and only with your consent: if you join a coach’s plan, we share some of your training information with that coach. Section 5 sets out exactly what.

5. Coaching (Coach Mode)

Coach Mode lets a coach build a training plan and lets you join it with a code. When you join, Krossa builds your own individualised version of that plan and shares some of your training information with that coach so they can guide you. A service provider works on our instructions; a coach does not — so this sharing is worth setting out on its own.

What a coach can see

Training activity

Workouts and sessions for the plan, which you completed, which you missed, and your adherence

Training load

Your load and its trend, including combined load across sports

Execution

How you actually performed a session against what was prescribed — for example whether you hit the target effort

Calibration status

Whether we have enough data from you to set your paces

Display name

The name you show in the app

What a coach cannot see

Unless you explicitly choose to share it, a coach does not see your detailed physiological data — heart-rate variability, sleep, resting heart rate or body metrics. They see summary training signals only. Your email address and login credentials are never shared with a coach, under any circumstances.

Your consent, and taking it back

Joining a plan is your consent to share the above with that specific coach, for that specific plan. Consent is per coach and per plan — joining one coach’s plan shares nothing with any other coach.

You can withdraw that consent at any time by leaving the plan. When you leave, when a coach removes you, or when the plan ends, the coach’s access to your ongoing training data stops. You can see every plan you have joined, and leave any of them, in the app under Profile → Join a coach’s plan → Your coach plans.

A coach can see your training data only while you are enrolled. Leaving a plan does not delete anything — your training history stays in your own account, as it always was.

Where the coach stands, legally

A coach who receives your training data is a separate recipient of it, and under the DPDP Act may be a Data Fiduciary in their own right. We facilitate the sharing with your consent; how a coach then uses your data within the plan is their own responsibility.

Coaches are bound by our Terms of Service, which prohibit them from exporting, copying, selling, publishing or reusing your data for anything other than coaching you within the plan you joined, and require them to keep it confidential. If you believe a coach has misused your data, tell us at support@nuveda.ai.

6. How long we keep it

Your account and training data: for as long as your account is open. If you delete your account, we delete it.
Emails you send us: long enough to deal with your enquiry and any follow-up, then deleted.
Diagnostic and crash data: a short period, to find and fix the problem it reported.

When data is no longer needed, we delete it or make it irreversibly anonymous. Deleted data may persist briefly in routine encrypted backups before those are cycled out.

7. Your choices and your rights

You stay in control of your data. Some of this you can do yourself, right now:

Delete your account — in the app under Account → Delete account, or via our Delete your account page if you have already uninstalled it. This is permanent.
Disconnect Apple Health or Health Connect — in the app, or in your phone’s system settings. We stop reading new health data immediately.
Turn off location — in your phone’s settings. Route and distance tracking will stop working, but the rest of the app will not.
Unsubscribe from any email we send, using the link in it.

You also have rights under India’s Digital Personal Data Protection Act 2023, under which we act as a Data Fiduciary. Email support@nuveda.ai to exercise any of them:

Access

Get a copy of the personal data we hold about you, and a summary of how we process it

Correction

Have us correct data that is wrong, incomplete or out of date

Erasure

Have us delete your data, unless the law requires us to keep it

Withdraw consent

Change your mind at any time. This does not undo processing we did while consent was in place

Nomination

Nominate someone to exercise these rights on your behalf if you die or become incapacitated

Grievance

Raise a complaint with us directly. If we do not resolve it, you may approach the Data Protection Board of India

We aim to respond within five business days, and will always respond within 30 days.

8. Security

We use industry-standard measures to protect your data, including encryption in transit and at rest, access controls that limit who on our team can see personal data, and regular review of how we handle it.

No system is perfectly secure, and we will not pretend otherwise. If a breach affects your data, we will notify you and the relevant authorities as the law requires. If you spot a security problem, please tell us at support@nuveda.ai — we would rather hear it from you than not at all.

9. Children

Krossa is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

10. Changes to this policy

We will update this policy as Krossa evolves. If a change meaningfully affects how we use your data or what rights you have, we will update the effective date at the top and, where practicable, tell you in the app or by email.

11. Contact us

For any question, request or complaint about your data or this policy, write to us. A real person reads it.

NUVEDA.AI PRIVATE LIMITEDHyderabad, Telangana, India
Email: support@nuveda.ai

Krossa Terms of Service — the rules for using Krossa, including the medical and AI disclaimers
Nuveda.ai Privacy Policy — the website, waitlists, and email
Delete your account — step by step

← Back to Krossa