Book a free class

Privacy Policy

Last updated: October 2026

[Company Legal Name] ("Curiovio", "we", "us") respects your privacy. This Privacy Policy explains what information we collect, why, and how it is used, stored, and protected when you use the Curiovio platform.

1. Information we collect

Account information: name, email address, phone number, role (student/parent/teacher), and — for students — grade level, provided at sign-up.

Learning data: lesson progress, quiz and assignment scores, mastery/skill levels, class attendance, AI tutor conversation history, and project submissions — collected as you use the Service, to power progress tracking, the Mastery Map, and the AI Coach.

Payment information: we do not collect or store full card/bank details. Payments are processed by Razorpay and/or Stripe, who handle and secure that data under their own privacy and PCI-DSS compliance standards. We retain only transaction references, amounts, and status.

Files you upload: resumes (teacher applications), assignment submissions, profile avatars, and course materials — stored in our cloud storage provider (Supabase Storage).

Usage data: device/browser information, IP address, and in-app activity, collected automatically for security, analytics, and service reliability.

2. Children's privacy

Curiovio is used by children under the guidance of a parent/guardian and a teacher. A student account for a child under 18 must be created or approved by a parent or legal guardian, who is responsible for reviewing this Policy. We collect only the information necessary to deliver tutoring and track learning progress, and we do not knowingly sell or use a child's personal data for third-party advertising. A parent may request access to, correction of, or deletion of their child's data at any time by writing to us (see §7).

How consent works (India's Digital Personal Data Protection Act, 2023). Until a parent approves, a new student account is paused. The child sends their parent a link, and the parent approves it while signed in with the email address the request was sent to. A parent can also approve from their own account when they add their child. We keep a record of each approval: who gave it, when, and under which version of this notice. We do not track children's behaviour for advertising or target ads at them. A parent can withdraw consent from their dashboard at any time, which pauses the account immediately, or ask us there to delete the child's data. Learners aged 18 or over can ask support to verify their account.

3. How we use your information

  • To provide and operate the Service — scheduling classes, tracking progress, and billing;
  • To personalize learning — the Mastery Map, AI Coach recommendations, and AI tutor responses;
  • To communicate with you — class reminders, progress reports, and service updates, by email, in-app notification, and (where enabled) WhatsApp;
  • To maintain security, prevent fraud, and comply with legal obligations.

4. Who we share data with

We share data only as needed to operate the Service, with the following categories of processors:

  • Supabase — authentication, database, and file storage;
  • Razorpay / Stripe — payment processing;
  • AI providers (e.g. Anthropic, or another configured LLM provider) — to power the AI tutor/coach. Conversation content necessary to generate a response may be sent to this provider;
  • Google — to auto-generate Google Meet links for scheduled classes, where enabled;
  • Email/WhatsApp delivery providers — to send notifications you're entitled to receive, or have not opted out of.

We do not sell personal data to third parties.

5. Data retention

We retain account and learning data for as long as your account is active, and for a reasonable period afterward to comply with legal, accounting, or dispute-resolution needs. You may request deletion of your account and associated personal data at any time (see §7), subject to records we are legally required to keep (e.g. payment records).

6. Security

We use industry-standard measures — encrypted connections (HTTPS), access-controlled databases, and authenticated file storage — to protect your data. No system is 100% secure; we encourage you to use a strong, unique password and report any suspected unauthorized access immediately.

7. Your rights

You (or a parent/guardian, for a child's account) may request to access, correct, export, or delete your personal data, or opt out of non-essential communications (email notifications can be muted per-account in Settings). To exercise these rights, email privacy@curiovio.com. We will respond within a reasonable time, consistent with applicable law (including India's Digital Personal Data Protection Act).

8. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the Service or by email, with an updated "Last updated" date above.

9. Contact

Questions about this Policy or your data? Write to privacy@curiovio.com.