Curato · Legal

Privacy Policy

Last updated 11 July 2026

Curato (“we”, “the service”) is operated by FOP Pendrakovska O.M., an individual entrepreneur registered in Ukraine (registration details available on request). This policy explains what we collect, why, how we protect it, and the rights you have. It is written to meet the Law of Ukraine “On Personal Data Protection” and, for visitors in the EU/UK, the GDPR. Using Curato means you accept this policy.

1. What we collect

• Email address — when you save or share a profile, create an account, or receive your result.
• Test data — your questionnaire answers and the room pairs you pick.
• Date of birth & place (optional) — the date is used only for the clearly-labelled astrological reading; your region only informs the architecture of your generated rooms. Provide neither and the product still works.
• Photos you upload (optional) — feed screenshots or a favourite photo of yourself. These are sent to our AI provider for analysis and are never stored by us: they exist only in memory for the seconds the analysis takes, then are discarded. We keep only the qualitative result (e.g. “warm palette”), not the image.
• Your results — your aesthetic profile and any rooms you generate, stored only if you choose “Save to my profile”.
• Feedback — your “is this close to you?” ratings, stored without your identity.
• Minimal technical data — a temporary, per-server count of requests from your network address, used only to prevent abuse of our AI generation. It is not stored long-term and is not used to profile you.

2. Why we use it & on what basis

We use your data to build your profile, generate your rooms, save your studies, let you sign in and share, take payment where you buy an unlock, and keep the service safe. Our legal bases are: performance of a contract (delivering what you asked for), your consent (optional photos, date of birth), and our legitimate interest in running and protecting the product. We do not sell your data and do not use it for advertising.

3. A note on photos

A photo of your face could be considered sensitive data. That is exactly why we do not store your photos at all — we look at the clothing and colours, return a qualitative reading, and discard the image. You can use every core feature without uploading a single photo.

4. How it is stored & for how long

Accounts and saved results are stored encrypted at rest (AES-256). Passwords, where you set one, are hashed — we never hold them in readable form. We keep your data only while your account exists: you can delete individual saved studies, or ask us to erase your account and email entirely, at any time.

5. Cookies

We use only strictly necessary cookies — no advertising, analytics, or third-party tracking. The details are in our Cookie Policy.

6. Who else processes your data

We rely on a small set of trusted providers, strictly to run the service:

• Anthropic — analysis of text and images, and written readings;
• Replicate / Google — image generation;
• Vercel — hosting and encrypted storage;
• Stripe — payment processing; we never see or store your card details.

Each acts only on our instructions to deliver its part of the service. Some are based outside Ukraine and the EU (e.g. the United States); where that involves a transfer of personal data, it is done under appropriate safeguards such as the providers’ standard contractual clauses.

7. Your rights

You may access, correct, export, or delete your data, withdraw consent, or object to a particular use. EU/UK users hold the full set of GDPR rights (access, rectification, erasure, restriction, portability, objection). To exercise any right, email us and we will respond within 30 days. You also have the right to complain to your data-protection authority.

8. Children

Curato is not intended for anyone under 16, and we do not knowingly collect data from children.

9. Changes & contact

We may update this policy; the current version always lives on this page, with the date above. For any question or request: pendrakovskaya@gmail.com. This policy is governed by the law of Ukraine.