Privacy Policy
Curotiva Services Private Limited
Effective Date: 21 February 2026
Last Updated: 21 February 2026
1. Introduction
Curotiva Services Private Limited (“Curotiva”, “Company”, “we”, “us”, or “our”) is committed to protecting your privacy and ensuring transparency in how we collect, use, disclose, and safeguard your personal data.
This Privacy Policy describes how we collect and process your information when you access or use:
Our website: www.curotiva.com (“Website”)
Our mobile application (“App”)
Any related services, content, features, or offerings (collectively, the “Platform”)
By accessing or using the Platform, you consent to the collection and processing of your data as described in this Privacy Policy.
2. Scope
This Privacy Policy applies to:
Visitors browsing the Website
Registered users of the App
Individuals booking or participating in services
Professionals listed on the Platform
Guests interacting without registration
This Policy applies only to data collected through the Platform and not to third-party websites or services.
3. Information We Collect
We collect only data necessary for providing and improving our services.
a. Personal Information
You may provide:
Full name
Email address
Phone number
Date of birth
Profile photo
Gender (optional)
Login credentials (password, OTP, authentication tokens)
b. Professional Information (For Professionals)
If you register as a Professional, we collect:
Educational qualifications
Professional certifications
Registration or license ID
Governing authority
Professional contact information
Verification documents
Consent for public display of credentials
c. Usage & Technical Information
Automatically collected data includes:
Device type and model
Operating system version
IP address
App usage logs
Session timestamps
Crash reports
Diagnostics and analytics data
d. Payment Information
Payments are processed through third-party payment gateways. We do not store full financial information.
We may collect:
Transaction details
Billing address
Partial payment identifiers (last four digits, UPI reference ID, wallet reference)
Payment status
All financial data is processed by PCI-DSS compliant providers.
e. Communication Data
We may store:
Customer support emails
In-app messages
Chat transcripts
Feedback and ratings
f. Sensitive Personal Data
Due to the nature of services offered, we may collect:
Mental or emotional wellbeing data
Session content or notes
Support preferences
Such data is treated as Sensitive Personal Data and processed only:
With explicit consent
For core service functionality
With enhanced security safeguards
4. How We Use Your Information
We use your data to:
Provide, operate, and maintain the Platform
Process bookings and payments
Verify Professional credentials
Personalize user experience
Improve service quality
Send service-related communications
Respond to inquiries and support requests
Detect fraud and prevent misuse
Comply with legal obligations
Enforce our Terms and policies
We do not use your data for unrelated purposes without consent.
5. Legal Basis for Processing (India – DPDP Act 2023 Alignment)
We process personal data under the following lawful grounds:
Consent: When you register or voluntarily provide information
Contractual Necessity: To provide booked services
Legal Obligation: To comply with applicable laws
Legitimate Use: For fraud detection, system security, and operational improvements
You may withdraw consent at any time by contacting us.
6. Sharing of Information
We do not sell or rent personal data.
We may share data only as necessary:
a. Service Providers
With trusted third-party vendors for:
Payment processing
Cloud hosting
Analytics services
Communication infrastructure
Customer support
Such providers are contractually obligated to maintain confidentiality.
b. Professionals
When booking a session:
Relevant booking details are shared
Only necessary information for service delivery is disclosed
c. Legal Compliance
We may disclose information:
In response to court orders
To comply with legal obligations
To protect rights, safety, or prevent fraud
d. Business Transfers
In case of merger, acquisition, restructuring, or asset sale:
User data may be transferred
Confidentiality and data protection safeguards will apply
7. Data Retention
We retain personal data:
As long as your account remains active
As required to provide services
As required by applicable law
For legitimate business purposes
Upon deletion request:
Personal data will be deleted or anonymized
Certain data may be retained for legal compliance or dispute resolution
8. Cookies & Tracking Technologies
We use:
Cookies
Analytics SDKs
Crash reporting tools
Performance monitoring tools
Google Analytics via Firebase
These help improve functionality and user experience.
You may disable cookies via browser or device settings. Some features may not function properly if disabled.
8A. Account Deletion & Data Erasure
Users and listed Professionals (including Therapists and Peer Support Listeners) may permanently delete their account at any time directly within the App by navigating to:
Settings → Delete Account
Upon account deletion:
Personal information is permanently removed from active systems.
Session data and sensitive wellbeing data are deleted or irreversibly anonymized.
Public profile information of Professionals is removed from the Platform.
Deletion requests are processed immediately upon confirmation.
Data stored in secure backups is removed within a reasonable retention period not exceeding 30 days, unless retention is required:
To comply with applicable law;
For dispute resolution;
For fraud prevention or legal defense purposes.
Once deletion is complete, the account cannot be restored.
9. Data Security
We implement reasonable administrative, technical, and physical safeguards including:
Encrypted communications
Access controls
Secure servers
Monitoring systems
However, no system can guarantee absolute security.
In case of a data breach, we will notify affected users as required by law.
10. Children’s Privacy
The Platform is intended for individuals 18 years or older.
If we become aware that data from a minor has been collected without guardian consent, we will delete such data promptly.
11. Third-Party Links
The Platform may contain links to third-party websites.
We are not responsible for:
Their privacy practices
Their data handling policies
Users are encouraged to review their privacy policies.
12. Your Rights (Data Principal Rights under DPDP Act)
You have the right to:
Access your personal data
Correct inaccurate or incomplete data
Request deletion of personal data
Withdraw consent
Nominate another individual to exercise rights in case of incapacity
Seek grievance redressal
To exercise your rights, contact: help@curotiva.com
We will respond within the timeframe required under applicable law.
13. Grievance Officer (India Compliance)
In accordance with applicable Indian data protection laws, you may contact our Grievance Officer:
Email: help@curotiva.com
Response Time: Within 30 days of receipt of complaint
14. International Data Transfers
Your data may be stored or processed outside your country of residence.
Where cross-border transfers occur, we ensure:
Adequate data protection safeguards
Compliance with applicable data transfer regulations
15. Changes to This Policy
We may update this Privacy Policy periodically.
When updated:
The “Last Updated” date will be revised
Users may be notified via email or Platform notification
Continued use of the Platform constitutes acceptance of the updated Policy.
16. Contact Information
For questions or concerns regarding this Privacy Policy:
Email: help@curotiva.com