Privacy policy.

Information Curly processes

Curly may process verified email addresses or phone numbers, trip membership, itinerary and lodging details, shared expenses and balances, shared trip context, messages sent directly to Curly, consent records, and technical or security information needed to protect and operate the service.

How information is used

Curly uses information to verify access, operate private trip workspaces, prepare reviewable drafts, maintain shared trip records, provide requested planning assistance, deliver optional SMS messages, prevent abuse, and improve service reliability. Email verification codes are sent only through Curly’s transactional provider for eligible approved hosts and invited travelers. Curly does not passively monitor or ingest members’ existing group conversations.

Pilot-access requests

If you request pilot access, Curly collects the contact and prospective-trip information you choose to provide so the pilot team can evaluate your request and reply by email. Curly’s email-delivery provider processes the submission only to deliver it privately to the pilot team. Submitting the form does not create a trip workspace, subscribe you to marketing, or authorize calls or SMS messages.

Marketing-site analytics

Curly uses Cloudflare Web Analytics on its public marketing site to understand aggregate visits, page performance, and broad traffic patterns. This privacy-first analytics service does not collect or use visitors’ personal data. It is limited to the public marketing site and does not monitor private trip workspaces, private messages, or shared trip records.

Trip information and service providers

Trip information is available only to verified members of that trip and service providers that Curly uses to operate the service. When a member requests weather or recommendations, Curly may send the minimum information needed to an approved provider. Curly does not send a member’s private conversation or the complete shared trip record for those requests.

When a member uses place suggestions, Curly sends the typed place query and the trip’s public destination to the location provider configured for the app. Curly does not send account contact details, membership, private trip context, ledger data, or messages for this lookup. With Google Maps Platform, provider-supplied names and addresses are displayed temporarily with attribution; Curly stores only the selected Place ID and fields the member types and explicitly saves. When Geoapify is configured, Geoapify suggestions selected by a member may populate the name and address fields, remain editable before saving, and enter shared trip state only when the member presses Save or Add. Provider attribution remains visible. Google and Geoapify process lookup data under their respective Google Privacy Policy, Google Maps terms, and Geoapify Privacy Policy.

Mobile information and SMS consent

SMS is optional and limited to private 1:1 trip-coordination interactions. Curly does not sell or share mobile phone numbers, SMS opt-in data, or SMS consent records with third parties for promotional or marketing purposes. Curly may disclose mobile information to messaging providers and carriers only as needed to deliver messages, maintain consent records, prevent fraud, and comply with law.

Reply STOP to end Curly SMS messages without losing access to the private web workspace. Reply HELP for support. Message frequency varies, and message and data rates may apply.

Retention, security, and choices

Curly retains information only as long as reasonably needed to operate the pilot, protect members, maintain required consent and audit records, and meet legal obligations. Curly uses member-scoped access controls, server-side credentials, and review steps for shared money and itinerary changes. No system is perfectly secure.

For privacy questions or requests to access or delete information, email hello@usecurly.com.