Legal
Privacy Policy
CurryStudio is an AI-powered platform. When you submit prompts, your input is processed by Anthropic (Claude), OpenAI (ChatGPT), and Google (Gemini). By using the Service you consent to this processing. See Section 5.
This Privacy Policy explains how CurryStudio ("we", "our", "us") collects, uses, shares, and protects your personal data when you use our platform at curry.studio.
Who We Are
CurryStudio is operated by AI for Good, incorporated under the laws of India.
AI for Good
Eknath Homes, Morla Link Road, Gadiara 93
Palampur, Himachal Pradesh — 176061, India
privacy@curry.studio · curry.studio
In accordance with the IT Act 2000 and DPDP Act 2023:
Definitions
| Term | Meaning |
|---|---|
| Personal Data | Any information relating to an identified or identifiable natural person. |
| Data Fiduciary | CurryStudio — determines the purpose and means of processing your data. |
| Data Principal | You — the individual whose data is being processed. |
| AI Processor | Third-party AI providers (Anthropic, OpenAI, Google). |
| Prompt | Any text or instruction you submit to generate AI responses. |
| Service | The CurryStudio platform at curry.studio. |
Data We Collect
- Full name and email from Google OAuth
- Google profile identifier for session authentication
- Profile picture URL (optional)
- Prompts and questions you submit
- AI-generated responses and chat history
- Saved content and session data
- Name and billing email for invoicing
- Card details handled exclusively by Razorpay — we never store them
- Transaction IDs, amounts, and subscription status
- IP address, browser type, device type
- Error logs and usage analytics
How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Account creation and authentication | Contract performance |
| Delivering the AI learning service | Contract performance |
| Processing payments and subscriptions | Contract performance |
| Personalising your learning experience | Legitimate interest |
| Sending marketing communications | Consent (opt-in only) |
| Improving the platform | Legitimate interest |
| Security and fraud prevention | Legitimate interest |
| Legal and regulatory compliance | Legal obligation |
Third-Party AI Processing
CurryStudio routes your prompts through Anthropic (Claude), OpenAI (GPT-4), and Google (Gemini). By using CurryStudio you explicitly consent to this processing. We send only prompt text — not your name, email, or payment data — unless you include them in your prompts.
| Provider | Data Sent | Their Policy |
|---|---|---|
| Anthropic, Inc. | Prompt text and session context | anthropic.com/legal/privacy |
| OpenAI, LLC | Prompt text and session context | openai.com/policies/privacy-policy |
| Google LLC | Prompt text and session context | cloud.google.com/privacy/gdpr |
How We Share Your Data
We do not sell, rent, or trade your personal data.
| Recipient | Purpose |
|---|---|
| Anthropic / OpenAI / Google | AI prompt processing (DPA in place) |
| Razorpay / Stripe | Payment processing (PCI DSS compliant) |
| Google (OAuth) | Authentication — name, email, profile ID only |
| Analytics providers | Anonymised usage data only |
| Law enforcement | Only when required by law |
Cookies and Tracking
We use strictly necessary cookies (session, CSRF, consent), functional cookies (theme, language), and optional analytics cookies (Google Analytics). See our Cookie Policy for full details.
Data Retention
| Category | Retention Period |
|---|---|
| Account and identity data | Duration of account + 3 years after deletion |
| Prompt and chat history | Duration of account; deleted within 30 days of closure |
| Payment records | 8 years (Indian tax law) |
| Technical logs | 90 days rolling |
| Support communications | 3 years from closure |
Your Rights
Depending on your location: Access, Correction, Erasure, Portability, Withdraw Consent, Object to Processing, Opt out of Marketing, Lodge a Complaint. Email privacy@curry.studio or use our Data Request Form. We respond within 30 days.
Additional Rights — EEA, UK & Switzerland (GDPR)
Legal bases: Article 6(1)(b) contract, 6(1)(c) legal obligation, 6(1)(f) legitimate interest, 6(1)(a) consent. International transfers protected by Standard Contractual Clauses. UK users may complain to the ICO.
Additional Rights — California (CCPA/CPRA)
We do not sell your personal information. You have rights to know, delete, correct, opt-out, and non-discrimination. Contact privacy@curry.studio or use the Data Request Form.
India — DPDP Act 2023
We comply with the Digital Personal Data Protection Act 2023. We do not collect data of children under 18 without verified parental consent. Contact privacy@curry.studio to withdraw consent or raise concerns.
Security
- HTTPS encryption in transit (TLS 1.2+)
- Encryption at rest for databases
- Access controls — authorised personnel only
- Payment data — never touches our servers
- Regular security reviews and incident response procedures
Third-Party Links
This Policy applies only to CurryStudio. We are not responsible for third-party websites linked from the Service.
Changes to This Policy
We notify you of material changes by email and in-app notice at least 30 days in advance. Continued use constitutes acceptance.
Contact Us
This Privacy Policy is published by AI for Good on behalf of CurryStudio. Effective 1 April 2026. Not legal advice.