Legal
Privacy Policy
1. Introduction
CURÂT LLC (“we,” “our,” or “the Company”) operates the website at thecuratapp.com. This Privacy Policy explains what data we collect, how we use it, and the choices you have.
By using our Service, you agree to the collection and use of information in accordance with this policy.
2. Data We Collect
2.1 Information you provide
- Email address — collected at the end of the quiz, before payment. Used to deliver your Identity Dossier and provide access to your Style Portal.
- Designer's email address — if you choose to share your results with a designer after purchase. This is optional and never required.
2.2 Data generated by the assessment
- Quiz responses— your image-pair selections across 20 rounds. These are used to compute your psychometric dimension scores and archetype. They are stored in our database (“Supabase”) linked to your quiz result ID.
- Dimension scores and archetype — the output of the Bayesian scoring engine applied to your quiz responses. Stored in the
quiz_resultstable. - Lifestyle module responses— answers to the “How I Live” questions (occupancy, household type, ownership status, etc.). Used to personalise your Dossier. Stored alongside your quiz results.
2.3 Room photo analysis (optional)
If you choose to upload a photo of your current space as part of the quiz, the image is passed to Google's Gemini AI service for dimension scoring. Only the resulting scores are stored — the photo itself is never saved to our database or storage. It is discarded immediately after scoring.
2.4 Payment data
All payments are handled by Stripe, Inc. We never see or store your credit card number, CVV, or full card details. Stripe provides us with a transaction confirmation, a session ID, and your email address. We store the Stripe session ID and transaction metadata (amount, currency, status) in our database for our records.
2.5 Usage data
We may collect standard server-side logs (IP address, browser type, pages visited, referring URL, timestamps) for security and debugging purposes. We do not currently use a third-party analytics platform on the consumer site.
3. How We Use Your Data
- To deliver your Identity Dossier by email
- To provide access to your Style Portal (where applicable)
- To personalise your Dossier with lifestyle-relevant recommendations
- To send your results to a designer of your choosing (only if you request this)
- To improve our scoring engine and assessment quality
- To respond to support enquiries
- To comply with legal obligations
4. How We Store Your Data
Your quiz results and email address are stored in a PostgreSQL database managed by Supabase, Inc., hosted on Amazon Web Services (AWS) infrastructure. Supabase is GDPR-compliant and SOC 2 audited. Your data is encrypted at rest and in transit.
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
5. Third-Party Services
- Stripe — payment processing (stripe.com/privacy)
- Resend — transactional email delivery of your Dossier (resend.com/privacy)
- Supabase — database and storage (supabase.com/privacy)
- Google Gemini API — AI-generated dossier prose and optional room photo analysis (policies.google.com/privacy)
- Vercel — website hosting and deployment (vercel.com/legal/privacy-policy)
6. Your Rights (California / CCPA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to know — you can request a summary of the personal data we hold about you.
- Right to deletion — you can request that we delete your personal data from our systems. We will comply within 30 days, subject to legal retention requirements.
- Right to opt out of sale — we do not sell your personal data.
- Right to non-discrimination — we will not treat you differently for exercising your privacy rights.
To exercise any of these rights, contact us at hello@thecuratapp.com. We will respond within 30 days.
7. Data Retention
We retain your quiz results and associated data indefinitely to allow you to access your Style Portal and historical results. If you request deletion, we will remove your data from our systems within 30 days, except where we are required to retain it for tax or legal compliance.
8. Cookies
We use browser localStorage and sessionStorage to maintain your quiz session and store your results temporarily during the assessment. We do not use third-party advertising cookies. We may use first-party session cookies for security and authentication purposes.
9. Children's Privacy
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted data through the Service, contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.
11. Contact
Questions about this Privacy Policy or your data? Contact us at: hello@thecuratapp.com
CURÂT LLC · thecuratapp.com