Curae is a personal styling and gift-finding app for you and your family. This policy explains what we collect, why, who we share it with, and the choices you have. We have written it in plain language on purpose. Questions? Email support@curaecollective.app.
Curae is operated by Curae Collective, ABN 41 749 032 735, based in Sydney, Australia ("Curae", "we", "us", "our"). We handle personal information in line with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). If you are in the UK or the European Economic Area, the additional rights in the "International users" section apply to you as well.
01A quick summary
- Curae is built for adults 18 and over. Parents and guardians can create profiles for children inside their own account.
- We collect only what we need to give you styling and gift suggestions, run your subscription, and keep the app working.
- We use a small number of trusted providers and send them the minimum they need. We never send your photos to our AI provider.
- You can view, correct, export or delete your data from inside the app, or by emailing us.
- We do not sell your personal information, and we do not show third-party ads inside the app.
02Information we collect
Account information
Your email address and a securely hashed password. We never store your password in plain text.
Profile information
For each person you set up a profile for, you may provide a name, gender, age or age band, colour season, body shape, clothing sizes and country, body measurements, favourite brands, and gift interests or dislikes. You choose what to enter. Most fields are optional.
Photos
If you add a photo to a profile or wardrobe item, or use try-on, that image is stored in your Curae account so we can display it back to you. Photos are used only to power your styling experience. We do not share your photos with our AI provider or with advertisers.
Wardrobe, looks, gifts and lists
Items you add, looks and gift ideas you save, and wishlist or shopping list entries.
Chat history
Messages you send to the in-app stylist and its replies, so you can leave and resume a conversation. You can clear this anytime in Settings.
Subscription and payment information
If you subscribe or buy a look pack, our payment provider (Stripe) processes your payment. Curae records your plan, status and renewal date but does not see or store your full card number.
Referral information
If you share or redeem an invite code, we record the codes and redemptions so we can apply trial credit correctly.
Calendar information (only if you turn it on)
If you enable Calendar Sync, Curae reads upcoming event titles and dates from your device to suggest outfits. Calendar data stays on your device unless you explicitly ask Curae to generate a look from a specific event. You can revoke access anytime in your device settings.
Technical and usage information
Basic information needed to operate and secure the service, such as device type, app version, approximate region, and logs of security-relevant events. We keep photos and message contents out of these logs.
03How we use your information
We use your information to create and run your account, generate styling and gift suggestions matched to a profile, show you real products and shopping links, run your trial, subscription and referral credit, provide support, keep the service secure and prevent abuse, and meet our legal obligations.
We rely on your consent, the performance of our agreement with you, and our legitimate interest in running a safe and functional service. Where the law requires consent, we ask for it. We do not use your personal information to train third-party AI models, and we do not sell it.
04Children's data
Curae is designed for adults. A parent or guardian may create profiles for children under 18 within their own adult account.
- We do not knowingly allow anyone under 18 to create their own Curae account.
- Children do not log in, receive messages, or interact with the app directly. A child profile is a set of preferences an adult manages.
- Adult-only features, including virtual try-on, are restricted so they cannot be used on a child profile.
- We treat children's profile details and photos as our most sensitive category of information.
- As the account holder, you are responsible for the information you enter about a child and for having the right to provide it.
If you believe a child has provided us information directly, or you want a child's profile removed, email support@curaecollective.app and we will delete it promptly. COPPA applies for US users; the UK GDPR and GDPR children's protections apply in the UK and EEA.
05How AI is used
Styling, gift and declutter suggestions are generated using Claude, an AI service from Anthropic. Product information is fetched from Google Shopping through SerpAPI. When we generate a suggestion we send only the minimum profile summary needed, for example an age band, colour season, body shape, size and country. We do not send your photos, your email, or your full profile to the AI provider.
06Who we share information with
We do not sell your personal information. We share it only with service providers who help us run Curae, and only to the extent they need it.
| Provider | What they do | What they receive |
|---|---|---|
| Anthropic | Generates AI styling and gift suggestions | A minimal profile summary. No photos. |
| SerpAPI | Retrieves live product and price data | Search terms derived from a suggestion |
| Stripe | Processes subscription and pack payments | Payment details you enter at checkout |
| [MongoDB HOST] | Stores your account data | Your stored account, profile and app data |
| Expo | Delivers the app and updates | Basic device and app diagnostic data |
Some providers process data outside Australia, including in the United States. Where we transfer data overseas we take reasonable steps to ensure it is handled consistently with the APPs, and where GDPR applies we rely on appropriate safeguards such as standard contractual clauses. We may also disclose information if the law requires it, or as part of a business transfer, in which case we will tell you.
07Data retention
We keep your information while your account is active. Deleting a profile permanently removes that profile's wardrobe, saved looks, gifts and lists. Deleting your account permanently removes your account and all associated data across our systems, and this propagates to our backups within [30] days. We may keep a minimal record where the law requires it, and we keep security logs for a limited period.
08How we protect your information
Our measures include encrypted connections (TLS) for data in transit, encryption of stored data, access controls so each account can only reach its own data, hashed passwords, restricted and individually accountable administrative access, and logging of security-relevant events. No system is perfectly secure, but we work to protect your information and respond quickly if something goes wrong.
09Your rights and choices
At any time you can access what we hold, correct anything wrong (mostly in the app), export a copy of your data from Settings, delete individual profiles, your chat history or your whole account, withdraw consent for optional features such as Calendar Sync, and opt out of non-essential communications. Most of these are self-service in the app. If you would rather we handle it, email us and we will action your request, usually within 5 business days.
10Cookies and the Curae website
Our website uses only the cookies needed to make the site work and, where enabled, privacy-respecting analytics. We do not use advertising trackers. Where the law requires it, we ask for consent before setting non-essential cookies, and you can decline.
11Data breach notification
If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) under the Notifiable Data Breaches scheme. Where GDPR applies we will notify the relevant supervisory authority within 72 hours of becoming aware, and affected individuals without undue delay. We treat any incident involving children's data with the highest priority.
12International users
UK and EEA (GDPR). You have the rights above plus the right to object to or restrict certain processing, and to lodge a complaint with your local data protection authority. Our legal bases are consent, contract, and legitimate interests. We rely on appropriate safeguards for international transfers.
United States. For children under 13 we comply with COPPA. A parent controls all information about a child profile and can review or delete it at any time.
13Changes to this policy
We may update this policy from time to time. If we make a material change we will tell you inside the app before it takes effect, and update the date below.
14Contact and complaints
For any privacy question, data request or complaint: Email support@curaecollective.app, or Post 5 Mindarie St, Lane Cove NSW. If you are in Australia and not satisfied with our response, you can contact the OAIC at oaic.gov.au. In the UK or EEA, contact your local data protection authority.
Effective date: 16 September 2026 · Last updated: 16 September 2026
← Back to home