Curiora Privacy Policy

Curiora is a memory platform designed to help people capture, organize, revisit, share, and preserve meaningful life moments. Curiora is built around a privacy-first, local-first philosophy.

This Privacy Policy explains what information we collect, how we use it, how we protect it, and what choices you have.

Depending on how you use Curiora, we may collect account information, user content, metadata, and technical or diagnostic information.

Account information may include name, display name, email address, authentication identifiers from identity providers, account settings, and preferences.

User content may include photos, videos, voice recordings, text notes, sketches, documents, event memories, tags, captions, annotations, and metadata.

Metadata may include capture date and time, file type and size, event or collection association, device-generated metadata when available, sharing and contribution information, favorites, pins, comments, and other engagement signals.

Technical and diagnostic information may include app version, device type, operating system, error logs, sync status, authentication events, and security or abuse prevention logs.

Curiora is designed to support local capture and local storage. Some features may work entirely on your device.

Cloud synchronization is optional and occurs only when you enable cloud account features or sign in to a cloud-enabled account.

We use information to provide Curiora features; store and organize memories; sync content across devices when enabled; support search, timeline, journey, events, collections, and people features; enable sharing and collaboration; provide authentication and security; improve reliability and performance; support optional AI-powered organization, search, summarization, and discovery features; comply with legal obligations; and protect users and the service.

Curiora may offer AI-powered features that classify, organize, summarize, search, or generate memory experiences.

When AI features are enabled, Curiora may process user content and metadata to provide those features. Depending on implementation, this processing may occur on-device, on Curiora-controlled infrastructure, or through trusted third-party AI service providers.

We will not claim that AI processing is fully local or fully private unless the implementation supports that claim.

Curiora content is private by default unless you choose to share it.

When you share memories, events, collections, or circles, recipients may be able to view, contribute to, comment on, or otherwise interact with shared content depending on permissions you set.

You are responsible for choosing what to share and with whom.

You retain ownership of content you create, upload, or import into Curiora.

You grant North Harbor AI LLC a limited license to store, process, transmit, display, and otherwise use your content only as needed to provide Curiora features, support synchronization, operate the service, and comply with your instructions.

We retain information for as long as needed to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and maintain security.

Local data may remain on your device unless you delete it or uninstall the app. Cloud-stored data may remain until you delete it, request deletion, or close your account, subject to backup and legal retention limitations.

You may export local content using available Curiora export tools. Cloud export tools may be introduced over time.

You may request deletion of cloud-stored account data and content by contacting us or using in-app deletion controls when available.

We use reasonable technical and organizational safeguards, including encrypted transport, access controls, authentication, and operational monitoring.

No system is perfectly secure. If you believe you have discovered a vulnerability, contact security@northharbor.ai.

Curiora may be used by families to preserve memories involving children. Users should only upload or share child-related content when they have appropriate rights, authority, and consent to do so.

Additional child and family privacy practices may be described in our Child & Family Privacy Addendum.

Curiora may rely on third-party providers for infrastructure, authentication, storage, analytics, AI processing, email delivery, payments, or support.

Examples may include identity providers, cloud infrastructure providers, AI service providers, and app platform providers. A subprocessors list may be published as Curiora matures.

Curiora is initially intended for users in the United States. If you use Curiora from outside the United States, your information may be processed in the United States or other locations where our providers operate.

We may update this Privacy Policy as Curiora evolves. When changes are material, we will provide reasonable notice through the app, website, or other appropriate means.