Privacy Policy

1. Overview

This policy explains what CUR8R collects, why, who we share it with, and the choices you have. We never sell your personal information.

2. What we collect

Account details: name, email, password (stored securely by our authentication provider), account type and confirmation that you are 18 or older.

Profile: photo, bio, home base city (creators) or property address (hotels), skills, style, social handles and self-reported follower counts, property details and amenities.

Connected accounts: if you connect Instagram or TikTok, we receive your username, account ID, account type and follower count, plus an access token so we can refresh your follower count once a day. We never post on your behalf or read your messages. You can disconnect at any time in Edit profile, and we delete the token straight away; deleting your CUR8R account removes everything.

Content: portfolio photos and videos, listings, applications, messages and files you send.

Approximate location: the city you choose. We use it to match creators and hotels and to show where members are. We do not track your device's GPS location.

Usage and device data: app interactions, crash reports and device type, used to keep the app working and improve it.

Purchases: if you subscribe, the app store or Stripe tells us your plan and status. We never see your full card details.

Support and safety: messages you send to support, and reports you file or that are filed about you.

3. How we use it

To run the marketplace (show profiles, listings and applications, deliver messages and notifications), to review accounts and keep the community safe, to provide support, to process subscriptions, to fix problems and improve the Service, and to meet legal obligations.

4. Who can see what

Approved members can see your public profile and portfolio. Hotels see the applications and messages Creators send them. Your email address is never shown to other members. CUR8R admins can see account and safety information to review accounts and reports.

5. Who we share it with

Service providers that run CUR8R for us under contract: hosting and database (Supabase), push notifications (Expo), crash reporting and analytics (Sentry, PostHog), payments (Apple, Google, Stripe, RevenueCat) and email delivery.

Authorities when required by law or to protect someone's safety.

A buyer, if CUR8R is ever sold or merged, under the same protections.

We do not sell personal information or share it for cross-app advertising.

6. How long we keep it

We keep your information while your account is open. When you delete your account, we delete your profile, uploads, applications and messages right away, and backups roll off within 30 days. We may keep limited records longer where the law requires (for example, billing records) or to handle a safety report.

7. Your choices and rights

You can view and edit your profile at any time, turn notifications on or off in your device settings, and delete your account in Settings → Delete account. Depending on where you live (for example under GDPR or the CCPA), you may have rights to access, correct, delete or export your data, or to object to some processing. Email support@cur8r.app and we'll respond within 30 days.

8. Children

CUR8R is only for adults 18 and over. We don't knowingly collect information from anyone under 18. If you believe a minor has an account, tell us and we'll remove it.

9. Security

Data is encrypted in transit, private files (like message attachments) are only available through short-lived links, and access rules in our database make sure members can only see what they're allowed to. No system is perfectly secure, so please use a strong, unique password.

10. International transfers

CUR8R is run from the United States and our providers may process data in other countries. Where required, we use standard contractual protections.

11. Changes and contact

We'll tell you about significant changes in the app or by email. Questions: support@cur8r.app · [COMPANY], [ADDRESS].