Privacy Policy

1. Scope

This Privacy Policy applies to the Curio mobile application, our related backend services, and any features that link to this Privacy Policy.

2. Information We Collect

The information we collect depends on how you use Curio.

• Account and authentication information including email address, Apple or Google sign-in data, anonymous or guest identifiers, and backend account IDs.
• Profile and preference information including display name, avatar selection, selected categories, onboarding responses, and consent or privacy preferences.
• Learning and activity information including completed levels, completed content, review history, quiz answers, quiz scores, confidence selections, results, XP, level, streak, energy, category or chapter state, and in-app actions.
• Purchase and subscription information including entitlement state, product and offering identifiers, purchase, restore, cancellation, and renewal status, and store-related customer identifiers.
• Device, diagnostics, and analytics information including device identifiers, app version, OS version, language, region approximation, device type, crash data, performance signals, and analytics events.
• Notifications information including push token, platform information, notification permission state, and engagement events if notifications are enabled.
• Advertising information including ad request and response data, rewarded ad events, identifiers where permitted, and ad interaction data if ads are enabled.

3. How We Use Information

• Provide, maintain, and improve Curio.
• Authenticate users and manage guest and registered accounts.
• Save and sync progress, categories, streaks, energy, XP, and related learning state.
• Personalize content, recommendations, and onboarding.
• Deliver quizzes, review schedules, and progression systems.
• Process subscriptions and restore purchases.
• Send notifications you request or allow, such as energy refill and streak reminders.
• Measure usage, performance, reliability, and feature adoption.
• Detect, prevent, and investigate abuse, fraud, bugs, and security issues.
• Comply with legal obligations and enforce our terms.

4. Legal Bases (EEA/UK)

You can manage certain privacy choices in the app's Settings.

• Performance of a contract to provide Curio and its core features.
• Consent for analytics, advertising personalization, push notifications, and similar optional processing where required.
• Legitimate interests to secure, maintain, improve, and operate the Service.
• Legal obligation where data must be retained or disclosed under applicable law.

5. How We Share Information

We do not sell your personal information in the ordinary meaning of that term.

• Service providers for backend infrastructure, authentication, database, and storage, including Supabase.
• Analytics, diagnostics, and crash reporting providers, including Firebase services.
• Subscription management providers, including RevenueCat.
• Push notification delivery providers including Expo, Apple Push Notification service, and Firebase Cloud Messaging.
• Advertising and rewarded ad partners including Google AdMob and configured mediation partners where used.
• Apple and Google when you use their sign-in, app store, or payment services.
• Legal and business transfer recipients if disclosure is required by law or needed for a merger, financing, acquisition, or sale of assets.

6. Advertising and Analytics Choices

Your choices, device settings, and region may affect whether personalized ads or certain analytics features are used.

• Enable or disable analytics storage.
• Enable or disable advertising storage.
• Enable or disable ad user data and ad personalization.
• Enable or disable marketing communications.
• Request platform-level tracking permission where applicable.

7. Data Retention

We retain personal data for as long as reasonably necessary to provide the Service, maintain your account and progress, fulfill the purposes described in this Privacy Policy, resolve disputes, enforce agreements, and comply with legal obligations.

• Account and progression data may be retained while your account remains active.
• Guest data may be retained until it is deleted, expires, or is migrated into a registered account.
• Diagnostic, analytics, and advertising records may be retained for operational and reporting purposes, subject to your settings and applicable law.

8. Your Rights and Choices

Curio includes in-app privacy controls for consent settings.

You can also contact `contact@curio.app` regarding privacy requests.

• Access the personal data we hold about you.
• Correct inaccurate information.
• Request deletion of your data.
• Request a copy or export of your data.
• Withdraw consent for certain processing.
• Object to or restrict certain processing.

9. Account Deletion and Data Export

You may request account deletion or data export through Curio's privacy settings or by contacting `contact@curio.app`.

Some information may be retained where necessary for legal, security, fraud-prevention, accounting, or operational reasons.

10. Children's Privacy

Curio is not intended for children under the age at which parental consent is required under applicable law unless expressly stated otherwise.

If you believe a child has provided personal information to us inappropriately, contact `contact@curio.app`.

11. International Data Transfers

Your information may be processed and stored in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

12. Security

We use reasonable technical and organizational measures to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Third-Party Services

Curio may link to or integrate with third-party services, including Apple, Google, RevenueCat, Supabase, Firebase, advertising partners, and external websites opened from within the app.

Those third parties have their own privacy policies and practices.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above.

If required by law, we will provide additional notice or obtain consent for material changes.

15. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, contact:

HR Labs

Curio

Email: `contact@curio.app`