Privacy Policy

1. Information we collect

Account details: your email address (via our authentication provider), a password (stored only as a secure hash — we never see it), your first name, and your chosen username.

About you: during sign-up we ask for your date of birth (used to confirm you are 18 or older and to enable age-appropriate AI features). You may optionally tell us your gender, the country/region you heard about CURA from, and whether you want faith-based content (this is sensitive data under privacy laws, used only to choose which content you see, and never used for advertising or shared). You can update or clear these at any time in Settings.

Your personal content: contracts, goals, plans, routines, weekly anchors, tasks, check-ins, notes, journal entries, photos, and any other content you create in CURA. We also compute and store your reliability score, accountability history, points, XP, and streaks based on your activity.

Onboarding answers: your responses during sign-up about your goals, focus areas, available time, what motivates you, and what tends to derail you. These personalize CURA and are private to you (never shown to other users).

Activity and connections: nudges you send and receive, people you connect with through shared contracts, inspirations, leaderboard participation, and records of your check-ins and streaks.

AI coaching data: when CURA’s AI coach responds to you, we store your messages and the AI’s responses. The AI also builds and stores a personal profile of you (what it learns about your patterns, goals, and history) to provide better coaching across sessions. This memory is never used for advertising or shared with other users.

Media: a profile photo and proof photos you choose to upload.

Device and technical data: a push notification token so reminders can reach you, your time zone, your notification preferences, and optional diagnostic/crash reports if you enable them.

Subscription status: whether you are on a free plan, a trial, or a paid plan, and subscription period dates.

Health and fitness data: CURA can connect to your phone’s health data (such as step counts) only if you explicitly enable it. It is used solely to check progress on contracts you choose to track that way, is never used for advertising or sold, and is not shared with other users. You can disconnect at any time, and account deletion removes it.

2. How we use your information

To run the app and your account; to compute your progress and streaks; to personalize CURA’s coaching; to send the reminders you turn on; and to keep the service secure.

3. CURA’s AI coach

When you use CURA’s AI features (the chat, coaching insights, and suggestions), relevant text from your account — your message, your contracts, plans, streak, and any remembered notes — is sent to our AI provider, Anthropic, to generate a response. Anthropic processes it to return that response and does not use your data to train its models. We never send your email or password to the AI.

Voice notes: if you use the microphone to dictate a note, your audio recording is sent to OpenAI (Whisper) to be turned into text. The audio is used only to return that text; OpenAI does not use data sent through its API to train its models. Voice dictation is covered by the same AI consent as the rest of CURA’s AI features.

4. Who we share with

We use service providers to operate CURA: Supabase (database, authentication, and file storage), Anthropic (AI responses), and OpenAI (voice transcription). We do not sell your personal information. We share data only as needed to run the service, or if required by law.

5. Friends and sharing

If you connect with friends or join a shared contract, those people can see limited profile information (your name, username, and photo) and the activity on contracts you share with them. Your sensitive onboarding answers are never shown to other users.

6. Storage and security

Your data is stored with our providers using industry-standard protections. Photos are private by default — you choose what to share.

Access to your data is restricted at the database level, so other users can reach only what CURA is designed to show them: your name, username and photo, and the activity on contracts you share with them. Your date of birth, faith preference, onboarding answers and account settings are never shown to other users. If you choose to appear on the public leaderboard, your name, username, photo and points become visible to other signed-in members — that is the only thing opting in shares, and you can turn it off in Settings.

Share cards. When you create a card to share a contract or a milestone, that image is stored at a public web address so it can be posted and previewed. Anyone with the link can view it. Only you can create a card for your own contracts.

7. Data retention, processors, and transfers

How long we keep data: your content stays in your account while the account exists. Conversations with CURA’s AI coach and the AI’s memory about you are stored until you delete your account (clearing the chat in the app clears your view; the stored history is removed when the account is deleted). Deleting your account removes your data immediately, and residual copies in backups are purged within 30 days.

Our processors: Supabase (database, authentication, file storage), Anthropic (AI responses), OpenAI (voice transcription), Expo (push-notification delivery), Apple Push Notification service and Google Firebase Cloud Messaging (delivering notifications to your device), and Cloudflare (our website and link pages). Sentry (crash reporting) and Stripe (payments) apply only if/when those features are enabled.

Where data is processed: CURA is operated from Canada; our providers process and store data in the United States. Canadian privacy law (including PIPEDA and, for Quebec residents, Law 25) applies to our handling of your information — contact us to exercise access, correction, deletion, or data-portability rights.

Automated processing: your reliability score, streaks, and points are computed automatically from your own activity in the app; they affect only what you (and contract partners you choose) see, and you can ask us about how they are calculated.

8. Your choices and rights

You can edit your profile and content in the app at any time. You can permanently delete your account and associated data from Settings → Delete Account. Depending on where you live, you may have additional rights (access, correction, deletion) — contact us to exercise them.

9. Children

CURA is not directed to children. You must be 18 or over to create an account, and we ask for your date of birth at sign-up to check. CURA’s AI coach is available only to users aged 18 or over.

If we learn that we hold information from someone under that age, we will delete it. If you believe a child has given us information, contact us at the address below.

10. Changes to this policy

We may update this policy. We will change the date above and, for material changes, notify you in the app.

11. Contact

Questions about your privacy? Reach us at support@curacontracts.cc.