This policy explains how CurioNext Labs Private Limited (“CurioNext”, “we”, “us”) collects, uses and protects information when you use Curio Flow, including this website, the Curio Flow connector for AI assistants and the companion app.
1. Who we are
CurioNext Labs Private Limited is responsible for your information. Address: IIT Madras Research Park, Chennai, Tamil Nadu, India. Contact: info@curionext.com.
2. Information we collect
- Account information. When you sign in with Google we receive your name, email address and Google account ID, and use them to create and secure your Curio account.
- Google Calendar information. With your permission, Curio checks when you are free or busy and reads the start and end times of events on your primary calendar from today until your latest deadline (at least two weeks and at most 60 days ahead), so it can find free time. It creates, updates and deletes only the events it adds for your Curio tasks, and stores the IDs of those events. If you move or delete one of those events yourself, Curio keeps your change; if you invite people to one or make it repeat, it becomes your event and Curio stops changing it. Curio asks Google to tell it when your calendar changes; these notices contain no event details. In the companion app’s calendar view, the titles and times of your events for the week you’re looking at are read from Google when you open it and shown only to you. We don’t store the titles, descriptions or attendees of your other events.
- What you tell Curio. Your routine (work hours, breaks, protected time and time zone), goals, deadlines, tasks, notes or references you ask Curio to remember, and feedback such as how long an activity took, focus ratings and scope corrections.
- Information from your AI assistant. When you use Curio in ChatGPT, Claude or Grok, the assistant sends Curio the details needed for each request, such as a goal and the context you chose to share. Curio doesn’t receive your full chat history, your assistant’s memory or your other connectors.
- Voice. If you use voice in the companion app, your browser or device turns speech into text. Curio receives the text, not audio.
- Payments. Razorpay (India) and Paddle (international) process payments. We receive subscription status, amounts and billing dates. We never receive your full card or bank details.
- Technical information. We keep limited service logs, such as the route requested, status, timing and a one-way hash of your account ID. Our hosting provider also records standard request logs, which can include your IP address and browser type.
3. How we use information
- To provide Curio: plan goals, estimate time, schedule and update Curio’s tasks in your calendar, and learn your pace from your feedback.
- To run your account, free trial, subscription and support requests.
- To keep Curio secure, prevent abuse and apply usage limits.
- To meet legal obligations.
We don’t sell your personal information, we don’t show ads, and we don’t use your information to train general-purpose AI models.
4. AI processing
Curio uses Google’s Gemini models on Google Cloud (Vertex AI, in the United States) to draft plans. Google processes this information as our service provider. What Curio sends depends on where you plan:
- From ChatGPT, Claude or Grok: the goal, deadline and priority, the context and source links your assistant shares, your routine, your recent timing estimates, and up to 12 saved notes and up to 12 completed tasks that relate to the goal.
- From the Curio companion app: the goal and any context you enter, your routine, your existing tasks, your saved notes (up to 100, each shortened), your recent activity feedback (up to 100 entries) and a summary of your timing history.
Your calendar events aren’t sent to Gemini; Curio checks your free time itself. Curio checks the draft and does the scheduling. AI output can be wrong, so please review your plan.
5. Google user data
Curio Flow’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use Google Calendar data only to provide and improve Curio’s user-facing planning and scheduling features.
- We don’t sell it, use it for advertising, or use it to develop, improve or train generalized AI or machine-learning models.
- We don’t let people read it unless you ask us to (for example, for support), it’s needed for security or to comply with law, or it has been aggregated and anonymized.
- We transfer it only as needed to provide or improve these features, for security, or to comply with law.
6. Who we share information with
- Service providers that run Curio for us: Google Cloud (hosting, database and Gemini AI), Razorpay (payments in India) and Paddle (payments in US dollars).
- Paddle is the Merchant of Record for orders paid in US dollars and handles the customer information it collects under its own privacy notice.
- Your AI assistant’s provider (OpenAI, Anthropic or xAI) receives Curio’s responses inside your conversation, under that provider’s terms.
- Legal reasons, when required by law or to protect people’s safety and our rights.
- Business changes, such as a merger or acquisition, with notice to you.
7. Where information is stored
Curio stores data on Google Cloud in Iowa, United States. If you use Curio from outside the United States, your information is transferred to the United States. Our providers may process information in other countries under their own safeguards.
8. Security
Connections use HTTPS. Google and Notion access tokens are encrypted by Curio (AES-256-GCM) in addition to Google Cloud’s encryption at rest. Access is limited to people who need it to run the service. No system is perfectly secure; if a breach affects you we will tell you as the law requires.
9. How long we keep information
- We keep your account information while your account is open.
- When you delete your account, we remove your routine, goals, tasks, notes, timing history, connections and sign-ins from our live database straight away. Connections to your assistants stop working immediately, and their access tokens are erased within 31 days. Backups roll off within 15 days, and temporary planning caches expire within 30 days.
- After deletion we keep a minimal record linked to your Google account ID (the deletion date, when your free trial ended and a marker that keeps old assistant connections invalid) so earlier sign-ins and assistant connections stop working and a free trial can’t restart.
- If you paid, we also keep payment references linked to your Google account ID (the payment provider’s subscription and payment IDs, amounts and the periods paid for) for up to eight years for tax, accounting and dispute handling. References to checkouts that were never paid are deleted within 90 days. Payment providers keep their own records, including your customer details, as tax and financial laws require.
- Service logs are kept for up to 30 days.
10. Your choices and rights
- Download your data from Your account → Account controls → Download my data.
- Delete your account from Your account → Account controls → Delete my account. This also cancels your subscription.
- Disconnect your assistants from your account page, or remove Curio’s Google access at myaccount.google.com/permissions.
- Automatic replanning is on once you connect Google Calendar: when your calendar changes, Curio moves only its own upcoming blocks. You can pause it any time on your account page or by asking your assistant.
You can ask us to access, correct or delete your information, or raise a concern, by emailing info@curionext.com. We aim to respond within 30 days. Depending on where you live (for example under India’s Digital Personal Data Protection Act or the GDPR), you may have further rights, including the right to complain to a data protection authority.
11. Children
Curio Flow is not for anyone under 18, and we don’t knowingly collect their information.
12. Changes
We will update the date above when this policy changes, and tell you by email or in Curio before material changes take effect.
13. Contact and grievances
For questions, requests or grievances, contact CurioNext Labs Private Limited at info@curionext.com, or write to us at IIT Madras Research Park, Chennai, Tamil Nadu, India.