Privacy Policy

1. Introduction

Welcome to Currant ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you understand how your personal information is collected, used, and safeguarded when you use our mobile application and related services (collectively, the "Service").

This Privacy Policy applies to all users of Currant, including those who access the Service through iOS, Android, or web platforms. By using Currant, you agree to the collection and use of information in accordance with this policy.

Currant is designed to help you nurture meaningful relationships and maintain balance across your life pillars. We built this app with privacy in mind because we understand that the information you entrust to us—your contacts, relationships, and personal reflections—is deeply personal.

2. Information We Collect

We collect several types of information to provide and improve our Service. We are committed to collecting only the minimum amount of data necessary to deliver a great experience.

2.1 Account Information

When you create an account, we collect:

• Email address - Used for account authentication, password recovery, and important service communications
• Name (optional) - Used to personalize your experience within the app
• Profile preferences - Your chosen settings and customizations

2.2 Contact Data

When you add contacts to Currant, we collect and store information about your relationships:

• Contact names and details - Names, relationship types, and notes you add
• Interaction history - Records of when you connected with contacts
• Contact health status - Engagement tracking data you create

2.3 Usage Data

We collect anonymized analytics to understand how our Service is used and to improve the user experience:

• Feature usage patterns - Which features are used most frequently (anonymized)
• App performance metrics - Load times, response times, and error rates
• Session information - General usage patterns without personally identifiable details

This data is aggregated and anonymized, meaning it cannot be used to identify individual users.

2.4 Device Information

To provide technical support and improve app stability, we may collect:

• Device type and model - To optimize performance for your device
• Operating system version - To ensure compatibility
• App version - To track which version you're using
• Crash reports - Technical information when the app encounters an error

Crash reports help us identify and fix bugs quickly. They contain technical diagnostic information but do not include your personal contact data or relationship information.

3. How We Use Your Information

We use the information we collect for specific, legitimate purposes. We do not use your data for purposes beyond what is described here.

3.1 Provide and Maintain the Service

• Enable you to create and manage your account
• Store and sync your contact data across your devices
• Provide contact health tracking and relationship insights
• Enable weekly planning and life pillar features
• Sync with your calendar (when you enable this feature)

3.2 Improve and Optimize the Service

• Analyze anonymized usage patterns to identify popular features
• Fix bugs and improve app stability
• Develop new features based on aggregated user feedback
• Optimize app performance across different devices

3.3 Communicate With You

• Service notifications - Important updates about your account or the Service
• Security alerts - Notifications about security-related events
• Product updates - Information about new features (you can opt out)

We will never send you marketing emails without your consent, and you can unsubscribe from optional communications at any time.

4. Data Storage & Security

We take the security of your data seriously and implement multiple layers of protection to keep your information safe.

4.1 Encryption

• Data in transit - All data transmitted between your device and our servers is encrypted using TLS 1.3
• Data at rest - Your contact data and personal information is encrypted using AES-256 encryption
• Passwords - User passwords are hashed using bcrypt with appropriate salt rounds

4.2 Infrastructure

Our backend infrastructure is hosted on Supabase, a secure cloud platform that provides:

• SOC 2 Type II certified data centers
• Automatic backups and disaster recovery
• Network isolation and firewall protection
• Regular security patches and updates

4.3 Security Practices

• Regular security audits - We conduct periodic security assessments
• Access controls - Strict internal access policies limit who can access user data
• Monitoring - Continuous monitoring for suspicious activity
• Incident response - Documented procedures for handling security incidents

5. Data Sharing

5.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties. Your contact data, relationship information, and personal details are never sold or shared for advertising purposes.

5.2 Third-Party Service Providers

We work with a limited number of trusted third-party services that help us operate and improve Currant:

• Supabase - Database hosting and authentication
  Processes: Account data, encrypted contact data
• Analytics services - Anonymized usage analytics
  Processes: Anonymized usage patterns only
• Crash reporting - App stability monitoring
  Processes: Technical crash data, device info

All third-party providers are bound by data processing agreements and are required to protect your information in accordance with this policy.

5.3 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, such as:

• Court orders or subpoenas
• Government agency requests as required by applicable law
• To protect the rights, property, or safety of Currant, our users, or others

6. Your Rights

You have control over your personal data. We provide you with the following rights and capabilities:

6.1 Access Your Data

You can access all the personal information we have about you at any time through the app. Your contacts, relationship data, and account information are always available to view within Currant.

6.2 Delete Your Account

You can delete your account at any time from within the app settings. When you delete your account:

• All your personal data will be permanently deleted
• Your contact data and relationship information will be removed
• This action cannot be undone
• Deletion is completed within 30 days

6.3 Export Your Data

You have the right to export your data. You can request a copy of all your personal information in a portable format by contacting us at the email address provided below.

6.4 Additional Rights

Depending on your location, you may have additional rights including:

• Right to rectification - Correct inaccurate personal data
• Right to restriction - Limit how we process your data
• Right to object - Object to certain types of processing
• Right to portability - Receive your data in a machine-readable format

To exercise any of these rights, please contact us using the information in the Contact Us section below.

7. Children's Privacy

Currant is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13 years of age.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately. If we discover that a child under 13 has provided us with personal information, we will promptly delete such information from our servers.

For users between 13 and 18 years of age, we recommend that a parent or guardian review this Privacy Policy and supervise their use of the Service.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make changes:

• We will update the "Last Updated" date at the top of this policy
• For significant changes, we will notify you via email or in-app notification
• We encourage you to review this policy periodically

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please don't hesitate to contact us:

We take all privacy inquiries seriously and will respond to your request within 30 days.