Notice to Parents & Parental Permission

Curie is a child-directed product. Every child profile is created and managed by an adult account holder — you — who confirms you are the child's parent or legal guardian, or otherwise have authority to consent on the child's behalf. Your child does not create or control their own account.

This notice tells you what happens if you go ahead and create a profile for your child, before you're asked to authorise it.

Operator details: Curie is operated by Friedland Group Ltd.. A registered postal address will be published here before public launch. A registered postal address and a contact telephone or postal route for parents will be published before public launch and are not yet finalised. Until they are, this notice should not be treated as a complete COPPA direct-notice document, and you can reach us in the meantime at support@curie-ai.co or via the Contact & Data Requests page.

• Display name or nickname, age or age band, chosen interests/subjects, an optional avatar, and the settings you choose — used to run the profile and personalise answers to your child's age.
• An optional 4-digit PIN to switch into your child's profile, if you set one — stored as a salted one-way hash plus a separately encrypted copy that only your signed-in account can ask us to recover, never in plain text.
• Your child's question text and activity details (mode, world/subject, time, and any awareness flag), but only if you switch saved history on — used so you and your child can look back at what's been asked. Curie's generated answer text is not currently saved as part of this history.
• Spoken audio and a transcript, transiently, while your child uses read-aloud or live voice — used to produce that conversation, not to build a voiceprint or identify your child.
• Technical and security metadata (such as timestamps and basic device/error information) — used to keep the service working and secure.
• Your own account, payment and email details — held separately from your child's profile data, and never used to email your child directly.

To generate an answer or speech, your child's question or audio — together with limited context like age band and interests — is sent to OpenAI, which processes it to produce the response. Supabase hosts Curie's own account and database. Stripe handles your payment as the adult account holder. Resend sends account and billing email to you, the adult — your child is never sent marketing or any other email directly.

Curie does not sell your child's information, does not use it for targeted or behavioural advertising, does not build a public profile of your child, and does not share it with anyone for their own independent marketing purposes.

In live voice conversation, your child's device streams audio directly to OpenAI to carry out the conversation; for read-aloud, audio or text passes through to OpenAI in the same way. Curie does not intentionally store raw voice recordings in its own database once a conversation turn has been handled, and OpenAI requests are sent statelessly (`store: false`) where supported. That does not mean the turn is forgotten everywhere: OpenAI may still retain request data for a limited period under its own API data-retention terms, unless Curie's OpenAI account has been separately confirmed as using an eligible modified or zero-retention configuration — which Curie does not currently claim.

Saved history is optional and entirely under your control. If you turn history on, your child's question text and activity details (mode, world/subject, time and any awareness flag) are saved so you can look back at what's been asked; Curie's generated answer text is not currently saved as part of this. If you turn history off, new turns stop being added to saved history from that point forward — the question or audio for that turn is still sent to OpenAI to produce the response, it just isn't added to your account's saved history. Turning history off does not, by itself, delete history already saved. You can clear or delete existing history separately at any time from the Parent area, or by contacting us, and it is deleted automatically if you remove the child profile.

At any time, from the Parent area or by contacting us, you can:

• Review what has been collected about your child, and export saved history.
• Correct your child's profile details.
• Stop further collection or use of your child's information going forward, by turning off a feature (such as voice or history) or by contacting us.
• Revoke any optional permission you previously gave.
• Delete your child's profile entirely.
• Delete your whole account.

None of this affects your statutory rights, which are described more fully in the Privacy Notice and Children's Privacy Notice.

• No targeted or behavioural advertising to your child or to you based on your child's activity.
• No sale of your child's personal information.
• No public profile for your child.
• No direct email to your child.
• No collection of precise or real-time geolocation.
• No requirement to give more personal information than a feature reasonably needs — optional features can simply be left off.

When you tick a box or press a button to authorise a child profile, you are giving Curie your permission, as the parent or guardian, for your child to use the product and for Curie to collect and use the categories of information described above, on the terms of this notice, the Privacy Notice, the Children's Privacy Notice and the Terms of Service.

During the current beta, that in-product authorisation is a pre-launch product-permission mechanism only, and is not represented as verifiable parental consent (VPC) for the purposes of US COPPA. Before Curie is available to the public, Curie will put in place the parental verification method that is legally appropriate for the jurisdiction and the sensitivity of the data involved (for example, a COPPA-compliant VPC method), consistent with the AI & Safety and Privacy Notice pages. Nothing here should be read as a claim that Curie is currently certified, approved or reviewed by the FTC, the ICO, COPPA, UK GDPR, the Children's Code, Apple, or any other body.