1. Information We Collect

We collect several types of information from and about you when you use the Website and Service:

Personal Information

This includes information that can be used to identify you directly, such as your name, email address, phone number, and postal address. We may collect this information when you create an account, contact us, or use certain features of the Service.

Usage Data

We collect information about your activity on the Website and Service, such as the pages you visit, the features you use, and the time you spend on the Website and Service.

Device Information

We collect information about the device you use to access the Website and Service, such as your device type, operating system, browser type, IP address, and device identifiers.

Health & Fitness Data

Our app accesses and collects the following health and fitness data through Android Health Connect (Google Health Connect):

a) Step Count: We access your daily step count to display your physical activity progress within the app.

b) Apple HealthKit and Android Health Connect: Our app accesses and collects health and fitness data through Apple HealthKit (iOS) and Android Health Connect (Google Health Connect).

c) How we use this data: To display your daily step count and progress toward your personal fitness goal within the app interface.

d) Data Storage: Step count data is processed locally on your device and is not transmitted to our servers or stored externally.

e) Data Sharing: We do not sell, share, or transfer your health or fitness data to any third parties.

f) Your Control: You can revoke HealthKit permissions at any time via iOS Settings → Privacy & Security → Health → CRCI, or revoke Health Connect permissions via Android Settings → Health Connect → App permissions → CRCI.

Vitals via Face Scan

Our app offers an optional "Vitals via Face Scan" feature that estimates certain physiological metrics using your device's camera.

a) What we collect: During a scan, the camera captures a live video preview for approximately 30 seconds. We use on-device face detection (Google ML Kit) solely to guide face positioning during the scan. We then analyze subtle color changes in small areas of your face (forehead and cheeks) using a standard signal-processing technique (remote photoplethysmography, or rPPG) to estimate heart rate, breathing rate, blood oxygen level, stress indicator, and — combined with your entered height and weight — BMI.

b) What we do NOT collect or store: We do not capture, save, or transmit any facial image, video recording, or biometric facial template. All camera frames are processed transiently in memory during the scan and are discarded immediately afterward.

c) What is sent to our servers: Only the final computed numeric results (heart rate, breathing rate, blood oxygen %, stress level, BMI, and timestamp) are sent to our servers and stored as part of your personal health record, so you can view your scan history within the app.

d) Data retention: This data is retained for as long as you maintain an active account with us, so you can access your historical vitals records. You may request deletion at any time as described in Section 10.

e) Data sharing: We do not sell, share, or transfer this data to any third party.

f) Your control: This feature is entirely optional and only activates when you choose to start a scan.

Health Assessment

Our app offers optional self-assessed wellness questionnaires (e.g., Physical Health, Diet & Nutrition, Heart Health). Your answers generate a wellness score based on predefined point values; this is not an AI-based or diagnostic assessment. Your responses and score are stored as part of your health record for as long as you maintain an active account, and are not shared with any third party. This feature is included with your CRCI plan at no additional charge.

2. How We Use Your Information

We use your information to:

• Provide and operate the Website and Service
• Process your requests and transactions
• Send you important information about the Website and Service, including updates, security alerts, and support messages
• Communicate with you about your use of the Website and Service
• Monitor and improve the Website and Service
• Personalize your experience on the Website and Service
• Comply with legal and regulatory requirements

3. Disclosure of Your Information

We may disclose your information to third-party service providers who help us operate the Website and Service. These service providers are obligated to protect your information and are only permitted to use it for the purposes we instruct them.

We may also disclose your information if we are required to do so by law or in the good faith belief that such disclosure is necessary to:

• Comply with a legal process
• Protect the rights or safety of you, CRCI, or others

4. Data Retention

We will retain your information for as long as your account is active or as needed to provide you with the Website and Service. We may also retain your information for legal, regulatory, and audit purposes.

5. Your Choices

You have certain choices regarding your information:

• You can access and update your personal information through your account settings.
• You can unsubscribe from our marketing communications by following the unsubscribe instructions in those communications.

6. Security

We take reasonable steps to protect your information from unauthorized access, disclosure, alteration, or destruction. However, no internet transmission or electronic storage is 100% secure.

7. Children’s Privacy

The Website and Service are not directed to children under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and you believe your child has provided us with personal information, please contact us.

8. International Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws than your own country.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated Privacy Policy on the Website. You are advised to review this Privacy Policy periodically for any changes.

10. Data Deletion

Users have the right to request deletion of their personal data.

a. You can request data deletion by: contacting us at:

info@crci.in

b. Once we receive your request:

1. We will delete your data within 7–30 days
2. Some data may be retained if required by law or for legitimate business purposes

11. Contact Us