Privacy Policy for Curatd Mobile Application

Last Updated: 01/12/2025

1. Introduction

This Privacy Policy describes how N&N lda collects, uses, and protects your personal information when you use the Curatd mobile application. By using Curatd, you agree to the collection and use of information in accordance with this policy.

Contact: N&N lda — hello@curatd.eu — Rua Antónia Andrade 5rc esq, 1170-025, Lisboa

Contact Information:

  • Company Name: N&N lda
  • Email: hello@curatd.eu
  • Address: Rua Antónia Andrade 5rc esq, 1170-025, Lisboa

2. Information We Collect

2.1 Account Information

  • Name and email address (collected through Clerk authentication)
  • Profile photographs and images
  • Account preferences and settings
  • Authentication credentials (managed securely through Clerk)

2.2 Location Data

Precise Location: We collect your precise location (GPS coordinates) when you:

  • Search for nearby coaches and facilities
  • Book sessions at specific locations
  • Track your session progress

Approximate Location: We may collect approximate location based on your IP address or device settings. Location data is used to provide location-based services and improve your experience finding coaches and facilities.

2.3 Photos and Media

Camera Access: We access your device camera to:

  • Take photos for your profile picture
  • Complete KYC (Know Your Customer) verification processes

Photo Library Access: We access your photo library to upload images for your profile or other app features. Images are stored securely and used only for the purposes stated above.

2.4 Booking and Session Data

  • Session bookings, including date, time, and location
  • Coach and facility selections
  • Session preferences and customizations
  • Equipment requirements and notes
  • Session history and records

2.5 Payment Information

  • Payment method details (processed securely through Stripe)
  • Transaction history and receipts
  • Billing addresses

Note: We do not store full credit card numbers or CVV codes. All payment processing is handled by Stripe, a PCI-compliant payment processor.

2.6 Communication Data

  • Chat messages between you and coaches, facility managers, or other users
  • In-app notifications and communications
  • Customer support interactions

2.7 Device and Technical Information

  • Device identifiers (such as device ID, advertising ID)
  • Operating system and version
  • App version and build number
  • Device model and manufacturer
  • Network information (IP address, network type)
  • Crash reports and error logs

2.8 Usage Data

  • Features you use within the App
  • Time spent in the App
  • Pages or screens viewed
  • Interactions with coaches, facilities, and services
  • Preferences and settings

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

  • To create and manage your account
  • To facilitate bookings and session scheduling
  • To connect you with coaches and facilities
  • To process payments and manage subscriptions
  • To enable real-time chat and communication features
  • To send push notifications about bookings, messages, and session updates

3.2 Service Improvement

  • To analyze usage patterns and improve App functionality
  • To develop new features and services
  • To personalize your experience
  • To optimize App performance and fix technical issues

3.3 Communication

  • To send you important updates about your account, bookings, and sessions
  • To respond to your inquiries and provide customer support
  • To send marketing communications (with your consent, where required)

3.4 Legal and Safety

  • To comply with legal obligations
  • To enforce our Terms of Service
  • To protect the rights, property, or safety of users, coaches, or the public
  • To prevent fraud and abuse

4. Third-Party Services

We use the following third-party services that may collect, process, or store your information:

  • Clerk - Provides user authentication and account management services.
  • Convex - Provides backend infrastructure, database storage, and real-time data synchronization.
  • Stripe - Processes all payment transactions securely.
  • Google Maps - Provides mapping and location services.
  • Google Firebase - Provides push notification services for Android devices.
  • Expo Notifications - Provides push notification infrastructure.
  • Expo - Provides app development framework and tools.

Note: These third-party services have their own privacy policies governing the collection and use of your information. We encourage you to review their privacy policies.

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

  • Service Providers: Stripe, Clerk, Convex, Google Maps, Google Firebase, Expo.
  • Business Transfers: If we are involved in a merger, acquisition, or sale of assets.
  • Legal Requirements: If required by law or in response to valid requests by public authorities.
  • Protection of Rights: To protect our rights, privacy, safety, or property, or that of our users or others.
  • With Your Consent: When you have given us explicit consent to do so.
  • Data Sales: We do not sell your personal information to third parties for their marketing purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

  • Encryption: Data is encrypted in transit using SSL/TLS protocols.
  • Secure Storage: Personal information is stored securely using industry-standard security measures.
  • Access Controls: Access to personal information is restricted to authorized personnel only.
  • Regular Updates: We regularly update our security practices and systems.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

7.1 Access and Portability

  • Request access to your personal information
  • Request a copy of your data in a portable format

7.2 Correction and Deletion

  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal information (subject to legal and contractual obligations)

7.3 Opt-Out Rights

  • Opt out of certain data processing activities
  • Unsubscribe from marketing communications
  • Disable location tracking (may limit certain App features)
  • Disable push notifications through your device settings

7.4 California Privacy Rights (CCPA)

  • Right to know what personal information is collected, used, shared, or sold
  • Right to delete personal information
  • Right to opt-out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising your privacy rights

7.5 European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent

To exercise any of these rights, please contact us at hello@curatd.eu.

8. Data Retention

We retain your personal information for as long as necessary to provide you with our services, comply with legal obligations, and resolve disputes and enforce our agreements.

When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal, regulatory, or business purposes.

9. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using the App, you consent to the transfer of your information to these countries.

If you are located in the EEA, we ensure appropriate safeguards are in place for such transfers, including:

  • Standard contractual clauses approved by the European Commission
  • Other appropriate legal mechanisms

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the new Privacy Policy in the App
  • Updating the "Last Updated" date at the top of this policy
  • Sending you a notification (if we have your contact information)

Your continued use of the App after any changes constitutes acceptance of the updated Privacy Policy.

12. Do Not Track Signals

The App does not currently respond to "Do Not Track" signals from browsers or mobile devices. However, you can control tracking through your device settings and the App's privacy controls.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

  • Email: hello@curatd.eu
  • Address: Rua Antónia Andrade 5rc esq, 1170-025, Lisboa

For data protection inquiries, please include "Privacy Policy Inquiry" in your subject line.

14. Additional Information

The App requests the following device permissions:

  • Camera: To take photos for your profile and KYC verification
  • Photo Library: To upload images from your device
  • Location (When In Use): To find nearby coaches and facilities
  • Location (Always): To track session progress
  • Notifications: To send push notifications about bookings and messages
  • Storage: To store app data and cached content

You can manage these permissions through your device settings at any time.

14.2 Data Controller

N&N lda is the data controller for personal information collected through the App.

By using the Curatd mobile application, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein.