What Curio processes
Curio's offline discovery library stays on the device. When Online Mode is enabled, Curio processes account identifiers, username and display name, the selected avatar style, bio, friend relationships, public cards, replies, reactions and reports, service timestamps and the technical security records needed to run the service. Direct-message encryption is not currently supported, so direct messages are uploaded as text over the protected Online Mode connection.
Why and how long
Curio uses this data to create and secure accounts, deliver social features, prevent abuse, respond to reports, comply with law, and maintain the service. Public wall posts, replies and server-side direct messages are designed to expire after 24 hours. A participant's device may retain messages it received until that person deletes local data or signs out. Security, report and account records may need a separate, documented retention period where law permits or requires it.
Sharing and controls
Curio shares data only with the service providers needed to host and authenticate the service, with other members according to the chosen feature and privacy settings, and with authorities when law requires it. Curio does not sell personal information and does not use Online Mode content for advertising. Members can disable Online Mode, edit public profile fields, block and report people, delete their local app data, and request access, correction, deletion, portability, restriction or objection where applicable.
Two of those controls have their own place here: you can review everything this site shows about your account on the account page, and you can delete the account outright from the same page.
International transfers and children
Online data may be processed where Curio or its providers operate. The operator must put in place the transfer safeguards required for the member's location before launch. Curio Online Mode is not intended for children under 13; where a country sets a higher digital-consent age, the operator must meet that requirement before processing that child's data.
Security and limits
Curio uses access controls, Android Keystore-backed local secrets and the encryption features described in the Terms of Use. No system is risk-free. Members should use device security and report suspected compromise promptly.
Contact
Privacy questions, access requests and deletion requests: the contact address published with the release. Deleting your account on the account page removes the data Curio holds about you online.