Privacy Policy

Kurio is currently a pre-launch marketing site. The only personal data we actively collect is what you voluntarily submit through the waitlist form:

• Email address — so we can contact you when Kurio opens.
• Preferred device (iOS or Android) — to prioritize the right launch.
• Technical metadata — a one-way hash of your IP address and a truncated user-agent string, kept only to prevent spam and abuse. We do not store your raw IP address.

We do not use advertising trackers, third-party analytics cookies, or fingerprinting scripts on this site.

• To notify you when Kurio becomes available on your platform.
• To send occasional launch updates (you can unsubscribe at any time).
• To protect the waitlist from spam, scraping, and automated abuse.
• To comply with applicable legal obligations.

We will never sell your personal data.

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under Article 6 GDPR:

• Consent — for joining the waitlist and receiving launch updates.
• Legitimate interests — for basic security and anti-abuse measures.
• Legal obligation — where required by applicable law.

We share data only with the vendors that make this site work:

• Hosting & database — our infrastructure provider stores waitlist entries on servers with encryption in transit and at rest.
• Email delivery — used to send launch notifications when Kurio opens.

These processors are bound by data-processing agreements and may only use your data on our instructions.

Your data may be processed in countries outside your own, including the United States. Where required, we rely on Standard Contractual Clauses or equivalent safeguards to protect your information.

We keep waitlist entries until Kurio launches and for a reasonable follow-up window afterwards, or until you ask us to delete your data — whichever comes first. Hashed security metadata is retained for up to 12 months.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.
• Lodge a complaint with your local data protection authority.

California residents have additional rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CCPA.

To exercise any of these rights, email us at hello@kurio.app. We will respond within the timeframes required by law.

Kurio is intended for users aged 18 and over. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

We enforce HTTPS everywhere, HSTS, a strict Content Security Policy, anti-clickjacking headers, server-side input validation, and least-privilege database access. No system is perfectly secure, but we take reasonable technical and organizational measures to protect your data.

We may update this policy from time to time. The "Last updated" date at the top will always reflect the most recent revision. Material changes will be communicated to waitlist subscribers by email.

Questions? Email hello@kurio.app.