Curio ✿

Privacy Policy

Last updated: July 2026

Curio (“we”, “us”) is a Shopify app that lets merchants run an aesthetic quiz that recommends their products to shoppers. This policy explains what data the app processes, why, and how it’s protected.

Data controller: Curio, operated by the app developer.
Contact: swcrypto26@gmail.com

1. What we collect

From the merchant (store), via Shopify:

• Store domain and a Shopify access token, used to operate the app on your behalf.
• App settings you configure (enabled aesthetics, plan, quiz configuration).
• Product information (title, tags, images, and the curio.moods metafield) used to match products to aesthetics.

From shoppers who take the quiz:

• Quiz answers and the resulting aesthetic (“mood”).
• An email address, only if the shopper chooses to enter it to save their result (zero-party data).

We do not collect payment card details, and we do not track shoppers across other sites.

2. How we use it

• To operate the quiz and recommend the merchant’s products.
• To let the merchant see aggregate results and collected emails in the app (Insights).

3. Where it’s stored

Data is stored in our application database (Neon, US region) and processed on our hosting infrastructure (a private server managed with Coolify). Access is restricted to the app.

4. Sharing

We share data only with the infrastructure providers strictly needed to run the app (Shopify, and our database and hosting providers). We do not sell personal data.

5. Retention & deletion

• Shopper emails and quiz responses are kept until the merchant deletes them, the shopper requests deletion, or the app is uninstalled.
• We honor Shopify’s mandatory data-protection requests: customer data requests (we surface the data we hold), customer redact (we delete that customer’s quiz data), and shop redact (we delete all of the store’s data after uninstall).

6. Shopper rights

Shoppers can request access to, or deletion of, their data by contacting the store they interacted with, or us at swcrypto26@gmail.com. Requests routed through Shopify are handled automatically (section 5).

7. Security

Access tokens and data are stored in a secured database, and connections use TLS. We follow reasonable measures to protect data, though no method is 100% secure.

8. Changes

We may update this policy; the “last updated” date will change accordingly.

9. Contact

Questions? Email swcrypto26@gmail.com.