Privacy Policy – Google Play Compliance

Last updated: February 2026

Welcome to Curio.chat ("Curio", "we", "our").
This Privacy Policy describes how we collect, use, protect, and manage your information in compliance with Google Play User Data Policies.

Curio.chat is designed to offer secure interaction with a language model, prioritizing privacy, data isolation, and user control.

1. Information We Collect

We collect only information necessary to operate the service.

1.1 Personal Information

We may collect:

• Username
• Email address
• Unique user identifier (UUID)
• Google ID (if you use OAuth authentication)
• Full name (optional)
• Date of birth (optional)
• Gender (optional)
• Phone (optional)
• Address and general location (optional)
• Occupation and education level (optional)

Optional fields require explicit consent before being stored.

1.2 Account and Security Information

• Password hash (we never store passwords in plain text)
• Encryption key hash
• Account status and role
• Email verification date
• Access logs and audit trails
• API tokens for programmatic access

1.3 User-Generated Content

• Conversations and messages
• Uploaded documents
• Generated images
• Custom settings
• Token usage for billing

1.4 Technical Data

• IP address
• Session information
• User agent

We do not use tracking cookies or advertising technologies.

2. How We Use Your Information

We use information solely for:

• Providing language model functionality
• Maintaining conversational context
• Processing documents through embeddings and semantic search
• Authenticating sessions
• Managing billing and token usage
• Preventing fraud and abuse
• Complying with legal obligations

We do not use your information for personalized advertising.

3. Data Sharing

We do not sell, rent, or commercialize your personal information.

We do not share data with:

• Advertising networks
• Data brokers
• Marketing companies
• Retailers

Third-party services used:

Brave Search API (optional)
Used only if you enable web search. Queries are sanitized and not permanently stored.

Together.AI (optional – image generation)
Prompts are sent only when users request image generation.

SMTP Provider
Used only for account notifications.

In all cases, usage is limited to functionality requested by the user.

4. Security and Encryption

We apply advanced technical and organizational measures:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest (AES-256-GCM for sensitive data)
• Row-level security
• Complete user isolation
• Access audit logging

In many cases, sensitive data is encrypted in ways that cannot be directly read without authorized system mechanisms.

5. Account Deletion

In compliance with Google Play:

• The app allows account deletion directly from the interface
• Password verification and explicit confirmation are required
• Deletion activates automatic deletion of all associated data
• Minimal security logs may be retained for up to 90 days
• Backups are purged within 30 days

6. Data Export

You can download your data in JSON format directly from the application.
Generated images can be downloaded in ZIP format.
Temporary files are automatically deleted after download.

7. Data Retention

• Conversations and documents: until you delete them
• Account data: while the account is active
• After deletion: automatic purge according to retention policy

8. App Permissions

The app only requests permissions strictly necessary for its operation.
We do not access contacts, SMS, calls, precise location, or external storage without explicit user action.

9. Children's Privacy

Curio.chat is not directed at children under 18.
We do not knowingly collect data from minors.

10. International Users

We comply with applicable GDPR and CCPA principles when relevant.
Data is stored on secure servers with consistent protection standards.

11. Changes to This Policy

We may update this Privacy Policy.
Material changes will be notified within the app or by email.

12. Contact

For privacy-related requests:

privacy@curio.chat
support@curio.chat

Clear Summary:

• We do not sell your information
• We do not advertise based on your data
• Your data is isolated and encrypted
• You can export or delete your information at any time
• The app complies with Google Play User Data Policies

Curio.chat is designed to serve you, not to exploit your information.