Privacy Policy

1) Who we are

Curima, LLC ("Curima," "we," "us," "our") provides the Services described in this Policy. See Section 12 for how to contact us.

2) Children's privacy (COPPA) & parental consent

Curima can be used by learners under 13 only with verifiable parental consent (or, in a school setting, with authorization from the school acting as the parent's agent for educational use). We provide direct notice to parents/guardians and obtain consent before collecting personal information from a child; parents may review, delete, or revoke consent at any time by contacting support@curima.com. We collect only what's reasonably necessary to provide the service and never condition a child's participation on giving more data than needed.

Texas note. The Texas Attorney General explains that COPPA makes it unlawful to collect a child's personal information without first obtaining verifiable parental consent; Curima follows those requirements.

3) Information we collect

We collect the following categories of information:

a) Account & profile information

Email address, username, password (hashed), age/consent status, and optional profile details (e.g., interests, goals, bio, avatar).

b) Learning content you create

Your memory webs/knowledge graphs (nodes, links, titles, descriptions), attachments you upload, study progress, quiz results, tags, reactions, and any sharing settings. Your knowledge graphs are private by default unless you choose to share them.

c) Usage & device information

Log data (timestamps, pages/screens viewed, features used), device and app identifiers, language, approximate location (from IP), and diagnostics/performance data.

d) Payment & subscription information

If you subscribe, we receive payment status and limited details from our payment processor (we do not store full card numbers).

e) Support & communications

Information you provide when you contact us (e.g., email content), plus survey or feedback responses.

We do not ask for government IDs or sensitive categories by default. Please avoid sharing sensitive information in learning content.

4) How we use information

We use information to:

• Provide and improve the Services, including account creation, syncing your memory webs, search, and performance maintenance.
• Personalize learning, including AI-assisted content and suggestions matched to your knowledge level.
• Safety and integrity, including abuse prevention, anti-spam, fraud detection, and responding to security incidents or Terms violations.
• Communicate with you about service updates, security, and support.
• Handle subscriptions and billing (free trials, renewals) via our payment processor.
• Comply with law and protect our rights, users, and the public.

AI. We use automation and machine learning to power features like recommendations and adaptive lessons. We do not use your personal content for third-party advertising, and we do not train third-party models on your personal content. We may use de-identified or aggregated data to improve Curima's features (including AI). Where required, we will ask for your consent.

5) Sharing & visibility

Curima is primarily a personal learning tool. If you choose to share a memory web (e.g., with a teacher, class, or collaborator), those people can view the items you share under the permissions you set. By default, your graphs are private.

We share information only as needed to operate the Services and as described below:

• Service providers (cloud hosting, analytics, customer support, email delivery, payments). They may access data only to provide services to us and must protect it.
• Legal reasons (to comply with law, court orders, or government requests; to enforce our Terms; to protect Curima, users, or the public).
• Business transfers (merger, acquisition, financing, or sale of assets), subject to this Policy.

We do not sell personal information and we do not share it for cross-context behavioral advertising.

6) Data retention

We retain personal information only as long as necessary to provide the Services, for legitimate business or legal purposes, or as required by law.

• Account & profile data: kept while your account is active; deleted or anonymized within a reasonable period after deletion.
• Learning content (memory webs): retained to power your history and features; then deleted or anonymized upon account deletion, subject to backup cycles and legal holds.
• Logs & diagnostics: typically 12–24 months, then aggregated or deleted.
• Payment records: retained per tax and accounting obligations.

7) Your choices & rights

Account controls

Edit your profile at any time. You can adjust sharing on individual memory webs or keep them private. You may delete your account from settings or by contacting us; we will delete or anonymize personal data, subject to legal requirements and backup retention.

California (CCPA/CPRA)

California residents can request to know, access, delete, correct, and limit the use of certain personal information, and to opt out of sale/share (we do not sell/share). See Section 12 to exercise rights.

EEA/UK/Switzerland (GDPR)

Where GDPR applies, our legal bases include contract (to provide the Services), legitimate interests (safety, fraud prevention, product improvement), consent (where required), and legal obligation. You may request access, correction, deletion, portability, and restriction/objection to processing.

Parents' & guardians' rights (COPPA)

If your child uses Curima, you (as a verified parent or legal guardian) have the right to:

• Review the personal information we have about your child.
• Delete your child's personal information and/or request we stop collecting or using it.
• Revoke consent at any time. If you revoke consent, we'll disable the child's account (or restrict it) and delete the child's personal information, subject to legal or backup requirements.
• Limit sharing to service providers that support Curima; we do not sell children's personal information or use it for targeted advertising.

How to make a request. Email support@curima.com from the parent/guardian email used during consent and include the child's username (or account email) and your request. We may ask for limited additional information to verify your identity and relationship to the child. We will respond within a reasonable time and honor your choices consistent with COPPA and applicable law.

School use. If Curima is used through a school, the school may act as the parent's agent for educational use. Parents can exercise the rights above through the school or directly with Curima.

8) International data transfers

We may process and store data in the United States and other countries. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) for cross-border transfers.

9) Security

We use industry-standard administrative, technical, and organizational measures to protect personal information, including encryption in transit, segmented infrastructure, and role-based access. No system is 100% secure; please use a strong, unique password and keep it confidential.

10) Cookies & similar technologies

We use essential cookies and similar technologies to keep you signed in, provide core features, and measure basic usage. You can control cookies via your browser settings; disabling essential cookies may limit functionality.

11) Additional information for educators & institutions

If you use Curima in an educational setting, additional terms or data-processing agreements may apply. Please contact us to discuss institutional needs and student privacy requirements.

12) Contact us

Email: support@curima.com

13) Changes to this Policy

We may update this Policy from time to time. We will post the updated version and revise the "Last updated" date. If changes materially affect your rights, we will provide additional notice (e.g., email or in-app message).