Privacy Policy
Last updated: 24 August 2026
Curioler ("we", "us") operates this site. This policy describes what personal data we collect, why we collect it, how we store and protect it, who we share it with, and your choices — including how to request deletion or raise concerns. We collect the minimum needed to run the site and improve it; we are not trying to identify individuals beyond what is necessary for those purposes.
Who this applies to
This policy applies to visitors and users of our website. If you access the site from outside India, we still apply sensible data-protection practices. For readers in the European Economic Area (EEA), UK, or similar regions, we describe our practices in a way that aligns with common GDPR-style expectations (lawful basis, purpose limitation, data minimisation, security, and your rights), even though our primary operations are in India.
India's Digital Personal Data Protection Act, 2023 (DPDP Act) sets expectations for processing personal data in India. We aim to process data fairly, for specified purposes, with reasonable security safeguards, and to honour your rights where they apply.
What data we collect
- Reading the public site. Knowledge articles, myth-checks and research summaries are readable without an account. We record an aggregate read count per page — a number, not a visitor record. No IP address, user-agent, or any other identifier is stored against it, by design.
- User accounts. If you create an account for the full Curioler product, we collect the information you provide (name, email address, password). Passwords are stored using a one-way hash — we never store your password in plain text.
- Contact and communications. If you email us, we receive your email address and the contents of your message.
- Server and hosting logs. Our hosting provider processes standard technical information (such as IP address, user agent, timestamps) in server logs for security and reliability, as any web host does.
Why we collect it
- To create and manage your account, and personalise what you see when signed in.
- To respond to messages you send us.
- To understand, in aggregate, which content is actually helpful to caregivers.
- To keep the site secure and available.
Legal bases and fairness
Where GDPR-style rules apply, we rely on appropriate bases such as legitimate interests (running and securing the website, understanding aggregate use) and legal obligations where required. Under the DPDP Act, we process personal data for lawful purposes connected to providing this site and communicating with you when you contact us.
How we store and protect data
Data you submit through the site is stored in our application database, hosted with our cloud provider in the EU. We use industry-standard practices such as HTTPS in production, access controls for administration, and careful handling of secrets. No method of transmission or storage is completely secure; we work to reduce risk in reasonable ways.
Sharing and third parties
We do not sell your personal data, and we do not share it for third-party marketing.
We use service providers as needed to operate the site — cloud hosting and database providers, and email delivery if you contact us.
Retention
We keep information only as long as needed for the purposes above, unless a longer period is required by law. You can ask us to delete personal data you have provided where feasible (see below).
Your rights and choices
Depending on where you live, you may have rights to access, correct, object to certain processing, or request deletion of personal data we hold about you. We will respond to reasonable requests in line with applicable law.
Deletion requests: email strikeagle.lx@gmail.com with "Privacy / deletion request" in the subject line, including enough detail for us to find your data (e.g. the email address on your account). We will confirm or complete feasible requests within a reasonable time.
Children's privacy
Our site is aimed at parents and caregivers. We do not knowingly collect personal data from children as the primary audience. If you believe a child has provided personal data through our forms, contact us and we will take appropriate steps.
International transfers
Our hosting provider may process data in the EU or other countries. Where required, we rely on appropriate safeguards or legal mechanisms for cross-border transfers.
Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top will change when we do.
Contact for privacy concerns
For any privacy questions or complaints, contact strikeagle.lx@gmail.com.
This page is for general information and is not legal advice. You may wish to consult a qualified lawyer for your situation.