Privacy Policy – The Good Weight

The Good Weight mobile application and website (collectively, the "Platform") are operated by Cratos Healthtech Private Limited ("we", "us", "our"). We value your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, store, use, process, disclose, and transfer your personal data when you use:

• The Good Weight website; and
• The Good Weight mobile application available on the Google Play Store or Apple App Store

(together, the "Services") within India.

By using our Platform and Services, you agree to the practices described in this Privacy Policy.

1. Applicability and Consent

This Privacy Policy applies to users located in India and is governed by applicable Indian laws, including but not limited to:

• The Information Technology Act, 2000 and rules made thereunder; and
• The Digital Personal Data Protection Act, 2023 ("DPDP Act"), to the extent notified and in force.

By accessing or using the Platform or Services, clicking the "I accept" button, creating an account, providing personal data, or otherwise using The Good Weight's Services, you:

• Consent to the collection, storage, use, processing, disclosure, and transfer of your personal data as described in this Privacy Policy; and
• Confirm that you are legally competent to provide such consent (for example, you are not a minor, or consent is given by a lawful guardian where required).

You may choose not to provide certain information; however, this may limit or prevent your ability to use some or all of our Services.

You may withdraw your consent at any time by writing to support@thegoodweight.com. Withdrawal of consent will not affect processing that has already taken place, but it may result in reduced functionality or discontinuation of access to the Services where such processing is essential to provide the Services.

1.1 Use of Services Outside India

The Good Weight Services are primarily intended for users located in India. If you access or use the Platform or Services from outside India, you do so at your own initiative and are responsible for compliance with applicable local laws in your jurisdiction.

By using the Services from outside India, you acknowledge and agree that:

• Your personal data will be collected, processed, stored, and transferred in accordance with Indian law and this Privacy Policy;
• Your personal data may be transferred to and processed in India or other jurisdictions where our servers, service providers, or partners are located;
• The data protection and privacy laws of India may differ from those in your country of residence; and
• You expressly consent to the transfer and processing of your personal data in accordance with this Privacy Policy and applicable Indian law.

If you do not agree to the application of Indian law or the terms of this Privacy Policy, you should not access or use the Services.

2. Services We Provide

The Good Weight offers services that may include:

• Dietitian- and coach-led weight management, nutrition, and lifestyle programs;
• Teleconsultations with doctors and other qualified health professionals;
• Health coaching, progress tracking, and related wellness services; and
• Facilitating diagnostic and lab tests through third-party lab partners (including test booking, result retrieval and display within the Platform).
• E-commerce services, including the sale and delivery of food products, wellness products, and other related goods through the Platform or third-party partners.

This Privacy Policy covers personal data collected and processed in connection with these Services.

3. Changes to this Privacy Policy

We may update or modify this Privacy Policy from time to time to reflect:

• Changes in legal or regulatory requirements;
• Changes in our data handling practices; and
• Improvements or changes in our Services.

The revised Privacy Policy will be made available on the Platform with an updated "Last Updated" date. Where required by law, we may notify you of material changes and seek your renewed consent.

If you do not agree with the updated Privacy Policy, you should discontinue using the Platform and Services.

4. Personal Data We Collect

"Personal data" means any data about an individual who is identifiable by or in relation to such data, as per applicable Indian law. Depending on how you use the Platform and Services, we may collect the following categories of personal data:

4.1 Identity and Contact Data

• Name (e.g., Patient / Caregiver / Doctor / Health Coach);
• Gender;
• Date of birth / Age;
• Address (postal address, city, state, PIN code);
• Phone number / Mobile number; and
• Email address.

4.2 Health and Medical Data

In the context of dietitian, coach-led, teleconsultation, and lab-test related services, we may collect:

• Medical history and health conditions (e.g., diabetes, hypertension, obesity, allergies);
• Lifestyle, diet, sleep, activity, and wellness information;
• Anthropometric and body composition data (e.g., weight, height, BMI, measurements);
• Clinical notes and recommendations from doctors, dietitians, and health coaches;
• Medication details, prescriptions, and treatment plans shared or generated through the Platform;
• Lab test orders, test parameters, and lab test results received from or through lab partners; and
• Any health-related documents or records you upload (e.g., previous reports, prescriptions, discharge summaries).

This information may be considered sensitive under applicable law and is handled with additional safeguards.

4.3 Account and Authentication Data

• Login ID and password; and
• Security and authentication-related information (e.g., OTP verification logs, tokens).

4.4 Financial and Transaction Data

• Limited payment-related information required to process payments (e.g., transaction IDs, payment status, payment method used); and
• Billing-related information where applicable.

Note: Payment card/bank details may be processed primarily by our payment gateway partners and may not be stored by us in full.

4.5 Communication Data

• Emails, chat messages, in-app messages, and recordings or notes of interactions with our support team, dietitians, health coaches, or doctors (where legally allowed and with appropriate consent where needed); and
• Feedback, reviews, surveys, and queries you submit to us.

4.6 Usage and Technical Data

• Usage details such as time, frequency, duration, and pattern of use of the Platform and Services;
• Device and technical information such as Internet Protocol (IP) address, device type, device identifiers, browser type, operating system, network information, and diagnostic data; and
• Log information generated when you use or interact with the Platform.

We may collect this data automatically through our systems and through cookies and similar technologies.

5. How We Collect Personal Data

We may collect personal data in the following ways:

1. Directly from you
   • When you register or create an account on the Platform;
   • When you fill out forms, complete assessments, book teleconsultations, or enroll in diet/coach-led programs;
   • When you upload records, lab reports, or prescriptions; and
   • When you communicate with us via email, chat, or calls.
2. From your use of our Services
   • When you log food, activity, weight, or other health metrics;
   • During teleconsultations and interactions with doctors, dietitians, or health coaches through the Platform; and
   • When you view or download lab reports via the Platform.
3. From third parties (only as needed for our Services)
   • Lab partners providing your test results and related data, pursuant to your request/authorization; and
   • Payment gateway partners for transaction and payment status information.
4. Automatically
   • Through cookies, pixels, and similar technologies embedded in the Platform; and
   • Through server logs and diagnostic tools when you use the Platform.

6. Purposes and Legal Basis for Use of Personal Data

We use your personal data for the following purposes, in accordance with Indian law:

6.1 To Provide and Operate the Services

• Creating and managing your user account;
• Enabling dietitian and coach-led programs, teleconsultations with doctors, and ongoing health coaching;
• Facilitating lab tests by sharing necessary information with lab partners (e.g., your name, contact details, and test information), and receiving your test results;
• Displaying and updating your health profile, history, and progress on the Platform; and
• Providing reminders for appointments, medication, tests, renewals, and other health actions.

6.2 To Improve and Develop Our Services

• Conducting research, analytics, and internal studies to improve treatment protocols, nutrition plans, and user experience; and
• Generating anonymized or aggregated data (which does not identify you) for analytics, performance measurement, and product development.

6.3 To Communicate with You

• Sending confirmations, reminders, and updates for appointments, tests, and plans;
• Providing technical support, responding to your queries, and addressing grievances; and
• Sending important security, service, or policy-related notifications.

6.4 Marketing and Promotional Communications

• Providing information about The Good Weight programs, features, offers, and updates; and
• Sharing wellness tips, newsletters, and educational content related to nutrition, weight management, and health.

You can opt out of non-essential promotional communications by using the unsubscribe link in emails or by contacting us.

6.5 Legal, Regulatory, and Security Purposes

• Detecting, preventing, and responding to fraud, abuse, or security incidents;
• Enforcing our Terms of Use and protecting our rights, property, users, and the public; and
• Complying with legal obligations, regulatory requirements, and lawful directions or requests from authorities.

6.6 Corporate Transactions

• In connection with any merger, acquisition, restructuring, or sale of business or assets, where your personal data may be part of the transferred assets, subject to applicable legal protections.

We rely on lawful bases permitted under Indian law, including your consent, performance of a contract, compliance with legal obligations, and our legitimate interests (balanced with your rights).

7. Sharing and Transfer of Personal Data

We may share your personal data, on a strict need-to-know basis, with:

1. Affiliates and Group Companies
   Entities under common ownership or control with Cratos Healthtech Private Limited, for operational, compliance, or support purposes.
2. Healthcare Professionals and Coaches
   Doctors, dietitians, and health coaches engaged or associated with The Good Weight, for providing consultations, advice, and ongoing program support.
3. Lab Partners and Diagnostic Service Providers
   Third-party labs and diagnostic centers, to book tests, share your necessary details (such as name, contact, and test information), and to receive your reports for displaying within the Platform.
4. Service Providers and Vendors
   Technology, hosting, analytics, communication, and customer support providers; and payment gateway partners and financial institutions for processing transactions.
   These parties process personal data under appropriate contractual obligations, confidentiality, and security commitments.
5. Professional Advisors
   Legal, compliance, accounting, and audit professionals, where reasonably necessary.
6. Government / Regulatory Authorities and Law Enforcement
   Where required to comply with legal obligations, court orders, or lawful requests, or to protect our legal rights and the safety of users and the public.

Your personal data may be stored and processed on servers located within or outside India, subject to applicable law on cross-border data transfers. When we transfer data outside India, we will do so in compliance with applicable Indian law (including rules under the DPDP Act once fully operational), and with appropriate protections in place.

We do not sell your personal data to third parties for their independent marketing purposes.

8. Use of Cookies and Similar Technologies

We may use cookies and similar technologies (such as pixels, tags, or local storage) to:

• Enable core functionality of the Platform;
• Remember your preferences and settings;
• Improve performance and user experience; and
• Conduct analytics, including understanding how users interact with the Platform and Services.

You may configure your browser or device to manage or block cookies. However, certain features or Services may not function properly if cookies are disabled.

9. Security Practices

We implement reasonable security practices and procedures as required under Indian law to protect your personal data from unauthorized access, use, alteration, disclosure, or destruction. These may include:

• Role-based access controls and least-privilege access;
• Secure login mechanisms and password protection;
• Encryption during transmission and, where appropriate, at rest; and
• Regular monitoring and review of our security practices.

However, no system is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.

You are responsible for:

• Keeping your login and authentication details confidential;
• Logging out after using the Platform on shared devices; and
• Promptly notifying us if you suspect any unauthorized access to your account or any security incident.

10. Third-Party Websites and Services

The Platform may contain links to third-party websites, applications, or services that are not operated or controlled by The Good Weight. These third parties have their own privacy policies and terms.

We are not responsible for the privacy practices, content, or security of such third-party services. You should review their privacy policies before sharing any personal data. Your use of third-party services is at your own risk.

11. Your Rights and Choices (India)

Subject to applicable Indian law and any conditions or exceptions therein, you may have the right to:

• Access the personal data we hold about you;
• Correct or update inaccurate or incomplete personal data;
• Withdraw consent for processing where processing is based on consent;
• Request deletion or erasure of personal data in certain circumstances, subject to legal and contractual limits; and
• Restrict or object to certain processing, where permitted by law.

To exercise these rights or raise any privacy-related concerns, you can contact us at:

Email: support@thegoodweight.com

We may need to verify your identity before acting on your request. Some requests may not be fully complied with where they conflict with our legal obligations, contractual requirements, or other lawful bases for processing. We will respond within a reasonable time as required under applicable law.

12. Compliance with Indian Laws and Terms of Use

You agree to use the Platform and Services only in compliance with:

• Applicable Indian laws and regulations; and
• Our Terms of Use and any other applicable policies made available on the Platform.

If you engage in unlawful activity, violate our terms, or misuse the Platform, we may restrict, suspend, or terminate your access to the Services and take any steps required or permitted under law.

13. Retention of Personal Data

We will retain your personal data for as long as necessary to:

• Provide you with the Services (diet/coach-led programs, teleconsultations, lab-test facilitation, and related services);
• Fulfill the purposes described in this Privacy Policy;
• Comply with legal, regulatory, tax, accounting, or reporting obligations; and
• Resolve disputes and enforce our agreements.

Unless a longer retention period is required or permitted by Indian law, we will generally retain your personal data for at least three (3) years from:

• The date of your last use of the Services; or
• The date of collection;

or for such other period as may be required under applicable law.

We may retain de-identified or aggregated data (that no longer identifies you) for analytics, research, and business purposes for a longer period.

14. AI-Based Food Analysis Disclaimer

Our app uses artificial intelligence (AI), including Google Gemini, to analyze food images and provide estimated nutritional information. The data processed may include food images and user-provided inputs submitted for analysis.

Nutritional values are estimates only and may vary based on portion size, ingredients, preparation method, and image quality. Please do not rely on these results for medical decisions.

Where applicable, submitted content may be processed by third-party AI service providers (such as Google) to generate results. For more information on how Gemini handles data, please review Google's documentation.

15. Grievance Officer (India)

In accordance with the Information Technology Act, 2000 and applicable rules, and/or the DPDP Act (as applicable), the details of our Grievance Officer / Data Protection contact are as follows:

Grievance Officer
Cratos Healthtech Private Limited
Email: support@thegoodweight.com

If you have any questions, complaints, or concerns about this Privacy Policy, our handling of your personal data, or our compliance with Indian data protection laws, you may contact the Grievance Officer at the above email address. We will endeavor to address your concerns in a timely manner as per applicable law.

Last Updated: 23 December 2025