CurveCare Privacy Policy

Last updated: August 21, 2026

CurveCare ("we," "our," or "us") provides a post-surgical recovery companion app. This Privacy Policy explains how we collect, use, and protect your information, and the choices you have.

Information We Collect

Account information. Email address, name (optional), and password (if you create an account directly) — or, if you sign in with Google or Apple, the basic profile information they return (name and email; Apple may provide a private relay email address instead of your real one, at your choice).

Procedure information you provide. Procedure type (liposuction, BBL, tummy tuck), surgery date, and related details you enter during onboarding (e.g., whether you have drains or a compression garment, treated body areas, technique variants).

Recovery tracking data. Daily symptom logs (swelling, pain, mood, free-text notes), progress photos you choose to add, checklist completion state, garment stage progression, and any red-flag symptom reports you submit.

Surgeon contact you save. If you add your surgeon's name and phone number in Settings, we store it so the App can surface it during red-flag prompts. That contact information is stored with your account and is not shared with third parties.

Payment information. We do not store your credit card number. If you purchase through the iOS app, your payment is processed by Apple via In-App Purchase, governed by Apple's own privacy policy — we only receive confirmation of your purchase and entitlement. If you access CurveCare through a non-iOS platform where Stripe checkout is offered, Stripe processes that payment instead, under its own privacy policy.

Device / usage information. Standard technical data needed to operate the App, including device platform (iOS/Android), push notification token (only if you grant notification permission), and error logs.

How We Use Your Information

We use the information above to: generate and personalize your day-by-day recovery plan; let you track symptoms, drains, garments, and progress over time; enable optional caregiver sharing you turn on yourself; confirm your purchase and entitlement; provide customer support; and maintain the security and functioning of the app.

We do not sell your personal information. We do not use your health or recovery information for advertising, marketing, or to train third-party AI models.

Sharing Your Information

Payment processing. Apple (iOS In-App Purchase) or Stripe (non-iOS checkout, where offered) processes your payment. Their handling of your payment details is governed by their own privacy policies.

Authentication. If you sign in with Google or Apple, that provider receives an authentication request, governed by their own privacy policy. If you signed in with Apple and later delete your account, we also revoke CurveCare's access to your Apple ID, not just your data with us.

Push notifications. Delivery goes through Apple's APNs (iOS) or Google's FCM (Android) as required by the operating system.

Caregiver sharing. If you choose to share your recovery updates with a caregiver, we share the specific information you select with the contact you designate. You can revoke this at any time within the App.

Legal requirements. If required to comply with applicable law, court order, or to protect the rights or safety of users.

Data Storage and Security

Your information is stored in encrypted-at-rest databases on secure servers operated on our behalf. We use industry-standard measures to protect your data (encrypted transport, password hashing, access controls), but no method of electronic storage or transmission is 100% secure.

Data Retention

We retain your account and recovery data for as long as your account is active. If you delete your account (Settings → Delete Account & Data), we delete your user record, procedure record, checklist completions, daily logs, supply completions, caregiver links, red-flag reports, and payment records associated with your account.

Your Rights and Choices

Access. You can request the personal data we hold about you.

Export. Export your data anytime from Settings → Export My Recovery Journal (PDF and JSON available).

Correct. Most fields are editable directly in the App.

Delete. Delete your data anytime from Settings → Delete Account & Data.

Withdraw consent. You can withdraw consent to push notifications at any time via your device settings.

If you are in the EU/EEA, UK, or California, you may have additional rights under GDPR / UK GDPR / CCPA, including the right to object to processing and the right to lodge a complaint with your local data protection authority.

Children's Privacy

CurveCare is intended for adults (18+) recovering from cosmetic surgery. We do not knowingly collect information from anyone under 18. If you believe a minor has provided data to us, contact us and we will delete it.

International Transfers

Depending on where you are located, your data may be processed in a country different from your own. Where required, we use appropriate legal safeguards for cross-border transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above when we do, and material changes will also be surfaced in the App.

Contact Us

Questions about this policy or your data, or to exercise a right listed above, can be sent to andrew@curvecareapp.com or through in-app support.