Kuriuus Software LimitedEffective 8 June 2026
Privacy Policy
This policy explains what personal data we collect when you use Kuriuus, why we collect it, who we share it with, and the rights you have over it. It applies to the Kuriuus app, the kuriuus.com website, and any related services we operate.
01Who We Are
Kuriuus is operated by Kuriuus Software Limited, a company registered in England. We are the data controller responsible for your personal data. Our Data Protection Officer can be contacted at the address below.
02Data We Collect
We collect the following categories of personal data when you create an account, use the platform, or contact us:
| Category | What we collect |
|---|---|
| Account Data | Email address, username, display name, profile photos, videos, and bio |
| Verification Data | Biometric facial scan with liveness detection for age estimation and, where required, a copy of a government-issued identity document, legal name, and date of birth |
| Content Data | Sparks you send, receive, post, and answer — questions, polls, ratings, reactions, comments, photos, and video — together with related metadata such as timestamps and expiry |
| Payment Data | Subscription status, spark pack purchases, tips sent and received, and payout details for earning users. Card details are processed by our payment providers and never stored by us |
| Usage & Device Data | IP address, device and browser type, app version, interaction logs, and approximate location derived from IP, used for security, fraud prevention, and service improvement |
| Communications | Messages you send to our support and contact channels |
03How We Use Your Data
We process personal data only where we have a lawful basis to do so under UK GDPR:
- To provide the service — creating your account, delivering sparks, processing tips and subscriptions, and operating earning features (performance of a contract).
- To verify that every user is 18 or over and that content uploaders are who they claim to be (legal obligation and substantial public interest).
- To keep the platform safe — detecting fraud, abuse, spam, and content that violates our terms (legitimate interests and legal obligation).
- To improve Kuriuus — understanding how features are used and fixing problems (legitimate interests).
- To communicate with you about your account, security, and changes to our terms or this policy (performance of a contract).
- To comply with law enforcement requests, court orders, and record-keeping obligations that apply to us (legal obligation).
04Anonymity on Kuriuus
Kuriuus lets you send sparks anonymously. Anonymity on the platform means your identity is hidden from the recipient — it does not mean you are anonymous to us. We always know which account sent a spark, and we retain that link for safety, moderation, and legal compliance.
If you choose to reveal your identity using the identity reveal option, the recipient will permanently see who sent the spark. We never reveal the identity of an anonymous sender to another user ourselves, except where required by law.
06International Transfers
We are based in the United Kingdom and primarily store data in the UK and the European Economic Area. Where a service provider processes data outside the UK or EEA, we rely on adequacy regulations or appropriate safeguards such as the International Data Transfer Agreement or Standard Contractual Clauses with the UK Addendum.
07How Long We Keep Data
| Data | Retention period |
|---|---|
| Sparks & Content | Sparks expire and are deleted from active systems 30 days after expiry, unless retention is required for an active safety or legal matter |
| Account Data | Kept while your account is active and deleted or anonymised within 90 days of account deletion, except where law requires longer retention |
| Verification Records | Identity and age verification records linked to uploaded media are retained for a minimum of 7 years in line with our record-keeping obligations |
| Payment Records | Retained for 6 years to meet UK tax and accounting requirements |
| Support Communications | Retained for up to 2 years after the matter is closed |
08How We Protect Data
All media and text content is protected with AES-256 encryption and hashed storage, with encryption in transit across the platform. Access to personal data is restricted to staff who need it, protected by access controls and audit logging.
No system is perfectly secure. If we become aware of a personal data breach that risks your rights and freedoms, we will notify you and the Information Commissioner’s Office as required by law.
09Your Rights
Under UK GDPR you have the right to access the personal data we hold about you, to correct it, to have it deleted, to restrict or object to our processing of it, and to receive a copy in a portable format. Where processing is based on consent, you may withdraw consent at any time.
To exercise any of these rights, contact privacy@kuriuus.com. We will respond within one month. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk) if you are unhappy with how we handle your data.
10Children
Kuriuus is strictly for users aged 18 and over. We verify age at sign-up using a biometric facial estimation with a conservative threshold, falling back to identity document checks where the estimate is inconclusive. If we become aware that a person under 18 has created an account, we will delete the account and its data.
12Changes to This Policy
We may update this policy as Kuriuus evolves. If we make material changes, we will notify you in the app or by email before the changes take effect. The date at the top of this page shows when the policy was last updated.
13Contact Us
Questions about this policy or how we handle your data should be directed to our Data Protection Officer: