Privacy Policy
Last updated: 28 August 2026
1. Who We Are
Jilocosmos Healthrevolution Private Limited operates “Kriti”, an AI-powered health, nutrition and lifestyle coaching service delivered over WhatsApp. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), we act as the Data Fiduciary in respect of the personal data we process about you. This Privacy Policy explains what we collect, how we use and protect it, and the rights you have.
2. Scope
This Policy applies to your use of the Kriti service on WhatsApp and to our website coachkriti.com. By using Kriti or sharing information with us, you agree to this Policy. If you do not agree, please do not use the service.
3. Information We Collect
Identity & contact information:
- Your name, WhatsApp phone number, age, gender, and city/location, to the extent you share it.
Health & wellness information (sensitive personal data):
- Vitals you share such as blood pressure, blood sugar and weight; body measurements and goals.
- Images of lab / diagnostic reports you send, and the biomarker values read from them.
- Photos of meals and food logs; nutrition and diet information.
- Symptoms, medical conditions, medications, allergies, lifestyle (sleep, activity, habits) and family history you choose to share.
Communications & content:
- Your WhatsApp messages (text), voice notes, and images you send, and your interactions with Kriti and our care team.
Payment & subscription information:
- Your subscription status, plan, billing dates and transaction/payment identifiers. Your card / UPI credentials are collected and processed by our payment gateway ; we do not store them.
Technical information:
- Message metadata and timestamps, delivery status, and limited technical logs used to operate and secure the service.
4. How We Collect Information
- Directly from you — through your WhatsApp chat with Kriti and the onboarding questions.
- Automatically — message metadata and delivery information when you message us.
- From service providers — for example, subscription and payment status from our payment gateway.
5. How We Use Your Information
- To provide health, nutrition and lifestyle coaching and answer your questions.
- To generate and personalise your diet and nutrition plan, and to have it reviewed and approved by a qualified nutritionist / dietitian before it is shared with you.
- To read your lab reports, estimate the nutrition in your meals, and track your vitals and progress.
- To send reminders, check-ins and daily guidance.
- To process your subscription and provide customer support.
- For safety — to flag readings or inputs that may need attention and advise you to consult a qualified healthcare professional.
- To improve, secure and troubleshoot the service, and to comply with applicable law.
We do not sell your personal data, and we do not use your health or wellness data for third-party advertising.
6. AI Features and Automated Processing
Kriti uses third-party artificial-intelligence models (for example, Google Gemini) to understand your messages, transcribe your voice notes, read your reports, estimate nutrition and draft plans. These outputs are generated automatically, are for general health, nutrition and lifestyle guidance only, and are not a medical diagnosis, treatment, or professional medical advice. Every diet plan is reviewed and approved by a qualified nutritionist / dietitian before it is delivered to you. You remain responsible for the decisions you make.
7. Health Data
The health and wellness information you share is sensitive personal data. We process it only with your consent and only to provide and improve the service to you. We do not sell it and do not use it for advertising. It is shared only with our internal care team and with the processors needed to deliver the features you use (see Section 8).
8. How We Share Information
We share personal data only as described below, under appropriate confidentiality and data-protection obligations:
- Service providers / data processors — cloud hosting and database, AI model providers, the WhatsApp / Meta messaging platform, our payment gateway , and document-generation services, engaged to operate the service.
- Our care team — qualified nutritionists and dietitians who review your plan.
- Legal, safety and compliance — where required by law, legal process or government request, or to protect rights and safety.
- Business transfers — in connection with a merger, acquisition or asset sale, with this Policy continuing to protect your data.
- With your consent or at your direction.
We never sell your data, and we never share your health data for marketing or advertising.
9. International Data Transfers
Your data is primarily stored and processed in India. Some of our service providers may process data on servers located outside India. Where this happens, we take steps to ensure your data is protected through appropriate contractual and security safeguards.
10. Data Retention and Deletion
- We retain your account and health data while your account / subscription is active and as needed to provide the service.
- On a verified deletion request, we delete or anonymise your personal data within 90 days, unless we are required to retain it by law.
- Financial and transaction records may be retained for up to eight (8) years to meet tax and accounting requirements.
- De-identified / aggregated data may be retained to improve the service.
To request deletion, email suman@jilohealth.com or message Kriti “delete my data” on WhatsApp.
11. How We Protect Your Data
We use reasonable security practices including encryption in transit and at rest, access controls that limit who can see personal data, and monitoring for unauthorised access. No method of transmission or storage is completely secure, but we work to protect your information.
12. Your Rights and Choices
Subject to applicable law, including the DPDP Act, you may:
- Access the personal data we hold about you and obtain a summary of it.
- Correct or update inaccurate or incomplete data.
- Request erasure of your data and closure of your account.
- Withdraw your consent to the processing of your health data at any time (this does not affect processing already carried out).
- Nominate another individual to exercise your rights in the event of your death or incapacity.
- Raise a grievance and, if unresolved, escalate to the Data Protection Board of India.
To exercise any right, email suman@jilohealth.com or message Kriti on WhatsApp. We may need to verify your identity before acting on a request.
13. Subscriptions and Billing
Kriti is offered on a subscription of month, with the first seven (7) days free. Billing is handled by our payment gateway, , using UPI AutoPay / e-mandate. A ₹1 verification charge is used to set up the mandate; the first charge occurs after the free week and then monthly, until you cancel. We do not store your card or UPI credentials. Please see our Terms & Conditions and Refund & Cancellation Policy for details.
14. Age Requirement and Children
Kriti is intended only for individuals aged 18 and above. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from a minor, we will delete it promptly.
15. Cookies and Website
Our website coachkriti.com may use basic cookies and similar technologies to keep the site working, remember preferences and measure usage. You can control cookies through your browser settings.
16. Third-Party Links and Services
Our service may reference or rely on third-party services (for example WhatsApp, and AI providers). Their handling of your data is governed by their own policies, and we are not responsible for their practices. We encourage you to review them.
17. Changes to This Policy
We may update this Policy from time to time. We will post the updated version with a new “Last updated” date, and where the change is material we will notify you on WhatsApp or by email. Your continued use of the service after an update means you accept the revised Policy, unless fresh consent is required by law.
18. Grievance Officer & Contact
In accordance with the Information Technology Act, 2000, the rules made thereunder, and the DPDP Act, 2023, the details of our Grievance Officer are:
To raise a complaint, email us your name, contact details, a description of your complaint and any supporting information. We will acknowledge your complaint within 48 hours and aim to resolve it within 15 days. If you are not satisfied, you may escalate to the Data Protection Board of India.