Curbi LLC ("Curbi," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Curbi mobile application. By using Curbi, you consent to the practices described here.
1. Information We Collect
Information you provide directly:
- Identity: Full name and profile photo.
- Contact: Email address and phone number.
- Credentials: Password (stored hashed — we never see your plaintext password).
- Listing info (Hosts): Address, photos, description, pricing, and availability.
- Vehicle info (Drivers): Make, model, color, and license plate (optional).
- Communications: Messages and support requests you send us.
- Reviews: Ratings and feedback you submit about other users.
Information collected automatically:
- Location: With your permission, approximate or precise device location to show nearby spaces. You can revoke this at any time in device settings.
- Device info: Device type, OS, unique identifiers, and crash data.
- Usage data: Pages viewed, features used, search queries, and in-app interactions.
Payment information:
Card details are collected and processed directly by Stripe. Curbi never stores your full card number, CVV, or bank account details. We receive only a tokenized reference and limited metadata (last 4 digits, card brand, expiry) from Stripe.
2. How We Use Your Information
- Create and manage your account.
- Process bookings and payments between Hosts and Drivers.
- Display your listings and profile to other users.
- Send transactional notifications (booking confirmations, reminders, payout alerts).
- Provide customer support and resolve disputes.
- Detect and prevent fraud, abuse, and illegal activity.
- Improve and personalize the Curbi experience.
- Send promotional communications (with your consent; opt out any time).
- Comply with legal obligations.
3. How We Share Your Information
We do not sell your personal information. We share data only as follows:
- Between Hosts and Drivers: When a booking is made, limited profile info (name, photo, vehicle details for drivers; listing address for hosts) is shared to facilitate the transaction.
- Service providers: Third-party vendors who help us operate the platform (see Section 4). They are contractually prohibited from using your data for any other purpose.
- Legal requirements: If required by law, court order, or governmental authority.
- Business transfers: In the event of a merger, acquisition, or asset sale.
4. Third-Party Services
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Database, auth, file storage | Account data, listing photos. SOC 2 Type 2 compliant. |
| Stripe | Payment processing & payouts | Email, payment tokens. PCI-DSS Level 1 certified. |
| Google Maps | Location search & map display | Search queries, location. Subject to Google's Privacy Policy. |
| Expo | Push notifications | Device push tokens for notification delivery. |
| Resend | Transactional email | Email address, message content (verification codes, receipts). |
5. Data Retention
- Account data: Retained for the duration of your account, plus up to 3 years after closure for legal and audit purposes.
- Booking records: Retained for 7 years to comply with financial recordkeeping requirements.
- Profile photos: Deleted within 30 days of account closure or photo removal.
- Support tickets: Retained for 2 years.
After applicable retention periods, data is securely deleted or anonymized.
6. Your Rights and Choices
- Access: View your account information at any time within the app.
- Correction: Edit your name, phone, and vehicle info in the Profile section.
- Deletion: Request account and data deletion by emailing privacy@curbi.us. Processed within 30 days, subject to legal retention requirements.
- Location: Disable at any time in device settings.
- Push notifications: Disable in device settings or within the app.
- Marketing emails: Unsubscribe via any marketing email.
7. California Privacy Rights (CCPA / CPRA)
If you are a California resident, you have the following additional rights:
- Right to Know: Request information about the categories of personal information we collect, the purposes for which we use it, and the third parties with whom we share it.
- Right to Delete: Request deletion of your personal information, subject to certain exceptions.
- Right to Correct: Request correction of inaccurate personal information.
- Right to Opt Out of Sale: Curbi does not sell personal information and does not share it for cross-context behavioral advertising.
- Right to Non-Discrimination: Curbi will not discriminate against you for exercising your CCPA rights.
8. Children's Privacy
Curbi is not intended for users under 18. We do not knowingly collect personal information from children. If you believe we have done so, contact us at privacy@curbi.us and we will delete it promptly.
9. Data Security
We protect your data using:
- Encryption in transit (TLS) and at rest.
- Row-level security policies on our database.
- Least-privilege access controls — employees only access data they need.
No method of transmission or storage is 100% secure. We cannot guarantee absolute security.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent in-app notice. Continued use after changes take effect constitutes acceptance.
11. Contact Us
Curbi LLC — Attn: Privacy
[Your Address], [City], CT [ZIP]
privacy@curbi.us