This Privacy Policy explains how Curiopath (“Curiopath,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use our websites, web application, and related services (collectively, the “Service”).

By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Who we are

Curiopath is an AI-powered learning platform that helps adults build personalized curricula, study with quizzes and flashcards, explore interactive simulations, and chat with an AI tutor about their lessons.

Questions about this policy: support@curiopath.ai or use the in-app feedback form.

2. Information we collect

Account and profile information

When you create an account or complete onboarding, we may collect:

Email address and authentication credentials (managed via Firebase Authentication)
Name and other profile details you provide (for example birthday, industry, profession, interests, and preferred learning styles)
Account identifiers used to link your profile to your authenticated user

Learning content and activity

To operate the Service, we store content and progress you create or generate, including:

Learning goals, lesson titles, and context you provide
Generated lesson and chapter content (text, quizzes, flashcards, interactive materials, and related media)
Progress data such as chapter completion, time spent, and quiz results
Messages you send to the AI tutor and responses returned in lesson or chapter chat
Lesson-sharing details you submit (recipient email address and optional message)

Billing information

If you subscribe to a paid plan, payments are processed by Stripe. We receive and store subscription-related identifiers and status (such as Stripe customer and subscription IDs, plan status, and billing period information). We do not store full payment card numbers on our servers; Stripe handles card data according to its own policies.

Technical and diagnostic information

We may automatically collect:

Browser type, device information, and pages or URLs associated with errors
Client-side error and warning logs (which may include a message, stack trace, URL, user agent, and, when available, user identifiers) to diagnose and fix problems
Information stored locally in your browser (for example remembered email, voice preferences, and short-lived redirect state after sign-in)

Communications

If you contact us or submit feedback, we collect the content of that message and any contact details you include so we can respond.

Cookies and similar technologies

We use authentication and session mechanisms required to keep you signed in and operate the Service (including Firebase Auth session persistence). We do not currently use third-party advertising or analytics cookies on the marketing site or app for marketing tracking. Your browser may also store preferences in local or session storage as described above.

3. How we use your information

We use the information we collect to:

Create and manage your account and provide the Service
Generate and personalize lessons, curricula, quizzes, flashcards, simulations, and tutor responses
Track learning progress and improve your experience within the Service
Process subscriptions, payments, and billing support
Send transactional emails such as lesson-share invitations and responses to feedback
Monitor reliability, debug errors, secure the Service, and prevent abuse
Comply with legal obligations and enforce our Terms of Service

4. Artificial intelligence processing

Curiopath uses third-party AI providers (including Google Gemini and related agent tooling) to generate educational content and tutor responses. To provide these features, we send relevant inputs—such as your learning goals, profile context you provide, lesson or chapter content, and chat messages—to those providers for processing.

AI outputs can be inaccurate or incomplete. Do not treat generated content as professional, medical, legal, financial, or other regulated advice. See our Terms of Service for additional limitations.

5. How we share information

We share information only as needed to operate the Service:

Service providers. We use trusted vendors to host and operate the Service, including Google Cloud (application hosting, databases, and media storage), Firebase Authentication, Stripe (payments), and email delivery providers (SMTP) for share invites and feedback.
AI processors. As described above, content needed to generate lessons and tutor replies is processed by AI providers.
Lesson sharing. If you share a lesson, the recipient can access the shared lesson content according to the sharing settings you choose, and we may email them an invite using the address you provide.
Legal and safety. We may disclose information if required by law, or if we believe disclosure is necessary to protect rights, safety, or the integrity of the Service.
Business transfers. If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to appropriate notice where required.

We do not sell your personal information.

6. Data location and international transfers

The Service is primarily hosted in the United States (including Google Cloud infrastructure in the us-central1 region). If you access the Service from outside the United States, your information may be processed in the U.S. or other countries where our providers operate.

7. Retention

We retain account, profile, lesson, progress, chat, and billing records for as long as your account remains active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Diagnostic logs are retained for a limited period needed for troubleshooting and security. If you request deletion of your account, we will delete or de-identify personal data associated with your account except where we must retain certain records (for example billing history or legal compliance).

8. Security

We use reasonable administrative, technical, and organizational measures to protect personal information, including authenticated access controls and encrypted transport. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your choices and rights

Depending on where you live, you may have rights to:

Access, correct, or update information in your account
Request deletion of your account or certain personal data
Object to or restrict certain processing, where applicable
Export a copy of certain data you provided, where applicable

You can update many profile details in the app. To request account deletion or other privacy requests, email support@curiopath.ai from the address associated with your account, or use in-app feedback. We may need to verify your identity before fulfilling a request.

You may also manage marketing or browser storage preferences in your device or browser settings, and you can cancel a paid subscription through the Stripe customer portal or in-app billing controls where available.

10. Children’s privacy

The Service is intended for adults and lifelong learners. It is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

11. Third-party services and links

The Service may link to or embed third-party resources (for example video providers). Those services have their own privacy policies, and we are not responsible for their practices.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the effective date. If changes are material, we may provide additional notice (for example by email or an in-app message). Continued use of the Service after an update means you accept the revised policy.

13. Contact us

For privacy questions or requests, contact: support@curiopath.ai.