Privacy Policy

1. Information We Collect

1.1 Information You Provide to Us

1.2 Information Collected Automatically

1.3 Sensitive Personal Information

For BaZi fortune-telling analyses, the Services require your date of birth, time of birth, and place of birth. While this may be considered sensitive in some jurisdictions, it is essential for core functionality. By providing this data, you acknowledge and consent to its use as described herein.

2. How We Use Your Information

We do NOT sell your personal information as defined by CCPA/CPRA or any other applicable privacy law.

3. Sharing of Information

We may share information in limited circumstances:

3.1 Service Providers

All service providers are contractually obligated to protect your information and use it only for specified purposes.

3.2 Legal Requirements

We may disclose information if required by law, regulation, legal process, or governmental request — including responding to subpoenas, court orders, complying with applicable laws, protecting rights/safety, and detecting fraud.

3.3 Business Transfers

In the event of merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. You will be notified via email or prominent notice.

4. Data Security and Retention

4.1 Security Measures

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256);
• Access controls and authentication mechanisms;
• Regular security assessments and vulnerability testing;
• Employee training on data protection practices.

No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

4.2 Data Retention

• We retain personal information while your account is active or as needed to provide Services;
• We also retain information necessary to comply with legal obligations, resolve disputes, detect fraud;
• When no longer needed, we securely delete or anonymize your data;
• Upon account deletion request, we delete within thirty (30) days (some info retained where legally required).

4.3 Storage Location

Your data is primarily stored on servers located in Singapore. To generate your readings, your birth information and questions are transmitted to AI service providers (see Section 3.1) which may process data in other jurisdictions, as described in Section 6.

5. Your Rights and Choices

5.1 General Rights (GDPR & CCPA Compliant)

To exercise these rights, contact us at [email protected].

5.2 GDPR Rights (EEA, UK, Switzerland Users)

Legal Basis: Consent, contract performance, legitimate interests, legal obligations.

5.3 CCPA Rights (California Residents)

We respond to verifiable requests within forty-five (45) days.

5.4 Additional Choices

6. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States and other jurisdictions whose data protection laws may differ from those of your country.

For EEA, UK, and Switzerland Users: Where we transfer data to countries without an adequacy decision, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) approved by the European Commission.

Contact us at [email protected] to obtain a copy of safeguards we rely on.

7. Children's Privacy

We do not knowingly collect personal information from children under the applicable age without parental consent. If we become aware that we have collected such information, we will take steps to delete it promptly.

If you are a parent/guardian and believe your child has provided us personal information, please contact us immediately at [email protected].

COPPA Compliance: We comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect PII from children under 13.

8. Third-Party Services

The Services may integrate with third-party websites, applications, or services not operated by us. These include:

• Social Media Platforms: For optional sharing features (if available)
• App Stores: Apple App Store and Google Play for distribution
• Analytics Tools: As described in Section 3.1

We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before interacting with them.

9. Cookies and Tracking Technologies

We use cookies and similar technologies for authentication, session management, and understanding usage patterns.

You can manage cookie preferences through device settings and browser controls. For details, see aboutcookies.org.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Post the updated policy with a revised "Last Updated" date;
• Notify you through the App (in-app notification or banner) for significant changes;
• If required by law, obtain your consent before the updated policy takes effect.

Your continued use after the effective date constitutes acceptance of changes.

Version History:

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Website: https://curioboxai.com

Response Timeline: We aim to respond to all privacy-related inquiries within thirty (30) days. For complex requests, up to an additional thirty (30) days may be needed.