Privacy Policy

1. Who We Are

Curio AI is a subscription newsletter service delivering weekly AI literacy content to families with children aged 6–16. We operate at curioai.co.uk.

Contact: hello@curioai.co.uk

2. What Data We Collect

When you subscribe, we collect:

• Your first name and email address
• Your child's age group (6–9, 9–12, 13–16, or multiple) — provided by you
• How you heard about us (optional)

When you purchase a paid subscription, we collect:

• Payment information — processed and stored securely by Stripe. We do not store your card details.
• Billing address (if required by Stripe)

When you use our website, we collect:

• Basic usage data via Beehiiv analytics (email opens, clicks). This data is aggregated and not used to identify individuals.

3. How We Use Your Data

We use your data to:

• Deliver your weekly Curio AI newsletter
• Process and manage your subscription and payments
• Send transactional emails (welcome sequence, payment confirmations, renewal reminders)
• Improve our content based on aggregated engagement data
• Comply with legal obligations

We do not use your data for advertising, profiling, or automated decision-making.

4. Legal Basis for Processing

We process your data under the following legal bases (UK GDPR Article 6):

• Contract — to deliver the subscription service you have signed up for
• Legitimate interests — to send transactional emails related to your subscription
• Legal obligation — to comply with UK GDPR, tax, and financial regulations

5. Who We Share Your Data With

We share data with the following processors only:

We do not sell, rent, or share your data with any other third parties.

6. Data Retention

• Subscriber data — retained for the duration of your subscription plus 12 months after cancellation
• Payment records — retained for 7 years as required by UK tax law
• Email engagement data — retained for 24 months in aggregated form

You may request deletion of your personal data at any time (see Section 8).

7. Data Security

Your data is stored securely by Beehiiv and Stripe, both of which maintain industry-standard security practices including encryption at rest and in transit. We access subscriber data only to manage content delivery and subscription administration.

8. Your Rights

Under UK GDPR, you have the right to:

To exercise any of these rights, email hello@curioai.co.uk. We will respond within 30 days.

9. Cookies

Our newsletter is delivered by email. Our website uses minimal cookies for basic functionality via Beehiiv. We do not use advertising or tracking cookies.

10. Children's Data

Curio AI is a service for parent-child pairs. Subscriptions are purchased by parents or legal guardians. We do not knowingly collect personal data directly from children. The child's age group we collect is provided by the subscribing adult and used only to route content to the correct tier.

11. ICO Registration

Curio AI is registered with the Information Commissioner's Office (ICO) as a data controller.

ICO Registration Number: [Add after registration at ico.org.uk/registration]

12. Changes to This Policy

We may update this policy from time to time. We will notify active subscribers of material changes by email. The current version is always available at curioai.co.uk/privacy.