Privacy Policy

Effective Date: 01/01/26

This policy explains how Curv Labs Inc. collects, uses, shares, and protects your data, in compliance with U.S. law and Apple App Store requirements.

1. Data We Collect

a. Information You Provide

• Name, email, account credentials

• Health and movement data you choose to input

• Support communications

b. Automatically Collected

• Device identifiers (IDFA only with ATT consent)

• IP address, app interactions, diagnostics

• Cookies and similar technologies

c. Sensitive Health Data

If you use health features, we may process body movement, posture, or pain-related information. This is treated as sensitive personal data.

2. How We Use Data

• Provide and operate the Service

• Personalization and analytics

• Safety, fraud prevention

• Customer support

• Legal compliance

No data is used for advertising tracking without explicit opt-in (ATT compliant).

3. Legal Bases (California / US)

Processing is based on:

• Performance of contract

• Your consent

• Legitimate business interests

• Legal obligations

4. Data Sharing

We may share with:

• Cloud hosting and analytics providers

• Payment processors

• Customer support tools

• Law enforcement if legally required

We do not sell personal data.
We do not allow third-party ad tracking without consent.
Health data is never shared for advertising.

5. Apple App Store Compliance

• App Tracking Transparency prompt shown before any IDFA access

• Privacy Nutrition Label reflects actual data use

• No background data collection without user action

• No cross-app tracking without opt-in

6. Your Rights (CCPA / CPRA)

You may:

• Request access to your data

• Request deletion

• Request correction

• Opt-out of any data “sale” (we do not sell)

• Limit use of sensitive personal information

Requests: rohan@curvlabs.io

7. Data Retention

Data is retained only as long as necessary for service provision or legal compliance, then securely deleted.

8. Security

We use industry-standard encryption, access controls, and secure infrastructure.

9. Children

The Service is not intended for children under 13. We do not knowingly collect their data.

10. International Transfers

Data may be processed in the United States. By using the Service, you consent to this transfer.

11. Changes

We may update this policy. Material changes will be notified in-app or by email.

12. Contact

rohan@curvlabs.io
8 The Green STE R, Dover, DE, 19901