Privacy notice
Draft — pending legal review before launch.
Who we are
Curio is operated by Curiosbot Digital S.L. (Zaragoza, Spain), the data controller. Contact: privacy@curiosbot.com.
What Curio processes
When you press “Start talking”, your microphone audio is streamed, encrypted, directly from your browser to our AI provider (OpenAI) so Curio can understand you and reply. Curiosbot does not record, store or listen to your audio. Text transcripts are shown on your screen as captions and are discarded when the conversation ends (see Live supervision). If you type, your messages are processed the same way.
What we keep
Your account details (below) and anonymous, aggregated statistics: number of conversations, minutes used, response times, error counts and safety-filter counts. To enforce fair daily limits we use a one-way, salted fingerprint of your IP address that changes every day; we never store the IP address itself. We do not use cookies for tracking or advertising. Your browser may remember your language and the consent checkbox (local storage on your device only).
Your account
To use Curio you sign in with Google. We receive your name, email address and profile picture from Google and keep them, together with your credit balance, plan and minutes used, for as long as your account exists. Payments are handled by Stripe; we never see your card details. Accounts are for adults (18+), who set Curio up for their children.
Live supervision
While a conversation is running, authorised Curiosbot staff can see the live captions and can guide Curio's next reply (for example to keep it safe or on topic). These live captions are held in memory only and disappear when the conversation ends; they are not written to our database.
Personal context
If you ask us to, staff can add short notes to Curio's memory about you and your family (for example names and hobbies) so Curio can greet you personally. These notes are linked to your account email, are only used in your own conversations, and you can ask us to change or delete them at any time.
AI provider
OpenAI processes audio and text on our behalf to generate Curio's replies and to check messages for safety (moderation). Under OpenAI's API terms, API data is not used to train models by default and is retained for a limited period for abuse monitoring. Data may be processed outside the EU under appropriate safeguards (e.g. Standard Contractual Clauses).
Children
Curio is designed to be safe for children: it avoids asking for personal details, discourages sharing them, keeps topics age-appropriate and suggests talking to a trusted grown-up about anything serious. In Spain, children under 14 need a parent or guardian’s consent; please use Curio together with your child.
Legal basis & your rights
We rely on consent (given via the start screen) for microphone processing and on legitimate interest for anonymous service statistics. You may withdraw consent at any time by ending the conversation. Because we do not keep identifiable conversation data, there is normally nothing to access or delete, but you can contact us with any request and you may complain to the Agencia Española de Protección de Datos (aepd.es).
Not a substitute for people
Curio is an AI character. It can make mistakes and does not have feelings. It is not a teacher, doctor or emergency service. In an emergency, call 112.
v2 · 2026-10-24