Privacy Policy
We minimize collection and explain purpose. This page summarizes how we handle personal data (including health data) and your GDPR rights. Last updated: 2026-01-04.
Company
Registered company name: Cureqi Limited
Address: Unit 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE
Official email: hello@cureqi.com
What we collect
If you sign in with Google, we receive basic profile info (name, email, avatar, and a Google subject identifier). We may also collect a phone number if you choose to provide it (e.g., for account verification/recovery). We collect the wellness/health information you enter (e.g., symptoms, sleep, stress, digestion, energy, lifestyle notes) and necessary usage/security logs.
Health data (sensitive) and consent
Health-related information is treated as sensitive and may be considered special category data under GDPR. We process it only with your explicit consent and to provide personalized wellness and health guidance (not medical advice, not for diagnosis or treatment). You can withdraw your consent at any time.
How we use data
Authentication and account management, delivering personalized guidance and content recommendations, responding to support requests, preventing abuse/fraud, and improving product quality. We do not sell personal data and do not use health data for advertising profiling.
Legal bases (GDPR)
Where GDPR applies, our processing is generally based on: contract (providing the service), your consent (health data and optional phone number), and legitimate interests (security, operations, and product improvement). If you withdraw consent, we stop the related processing unless required otherwise by law.
Security and encryption
We use reasonable technical and organizational measures, including encryption in transit, encrypted storage for sensitive health data, access controls, and least-privilege practices. No method of transmission or storage is 100% secure, but we continuously improve our safeguards.
Sharing, third parties, and transfers
We do not sell personal data or share it with third parties for their independent marketing purposes. To operate the service, we may share the minimum necessary data with trusted providers (e.g., Google for sign-in, hosting/infrastructure/email) under confidentiality and security obligations. Where cross-border transfers apply, we use appropriate safeguards (such as Standard Contractual Clauses).
Retention and deletion
We keep personal data only as long as needed for the purposes above. You can request access, correction, or deletion; when you close your account or request deletion, we delete or anonymize data where legally permitted (unless we must retain certain records for legal/compliance reasons).
Your rights and contact
Depending on your location (including GDPR), you may have rights to access, correct, delete, restrict processing, object, data portability, and withdraw consent, and you may lodge a complaint with your supervisory authority. Contact us at hello@cureqi.com for privacy requests.
Payments and Stripe
Online payments are processed by Stripe, Inc., a PCI DSS Level 1 service provider. When you purchase a questionnaire bundle report, your card details are collected and processed directly by Stripe and never stored on Cureqi servers. We only retain the order ID, the email address you provide for delivery, the purchase timestamp, the amount, and the currency — strictly to deliver your report, issue receipts, and process refunds or disputes. Stripe's own processing of your payment data is governed by the Stripe Privacy Policy at https://stripe.com/privacy.
Health-related sensitive data — additional safeguards
Your questionnaire answers (sleep, stress, digestion, energy, lifestyle notes, constitution signals) are treated as sensitive personal data and used only to generate your report, deliver it to you, and respond to support requests you initiate. We do not use health-related data for advertising, profiling, lookalike targeting, or training third-party models. Health data is never shared with Stripe or any payment processor — payment systems only see the order and email. You can request export or deletion at any time at hello@cureqi.com.