Privacy Policy
Last updated: August 11, 2026
1. Who we are
Hypercurated ("we", "us", "the app") is operated by Bright Solutions. Contact: kraftxmedias@gmail.com.
2. Information we collect
- Account information you provide: name, email address and password (or Google Sign-In), date of birth, gender, pronouns, city/location, profile photo.
- Content you create: posts, comments, messages, goals, marketplace listings, community posts, polls, check-ins.
- Photos, videos and camera access: for profile pictures, post media, and (iOS only) room scans for the Design a Space feature.
- Approximate/precise location: to show nearby events, experiences, and place check-ins.
- Contacts (count only): with your permission, we read how many contacts are on your device to power the Relationships pillar of your Digital Twin. We never read or store contact names, numbers, or emails.
- Microphone recordings: only when you explicitly start a Voice IQ group clip, enroll your Digital Twin's cloned voice, or choose to listen live to a Twin-placed call.
- Payment and wallet information: top-up amount, Razorpay transaction/order IDs, and — if you request a withdrawal — bank account details (last 4 digits, IFSC, account holder name) for payout processing. We do not store full card or bank credentials; Razorpay processes payment instruments directly.
- Data from services you choose to connect: Apple Health (iOS only), Strava, Spotify, GitHub, Reddit, Gmail/Outlook (for the Twin's read-only email digest features), and Eventbrite — only after you explicitly authorize each one, and only to power your Digital Twin and personalization.
- Usage analytics: screen views, session length, feature interactions, and approximate location (country/region) — tied to your account, used only to improve the app. We do not use a third-party analytics SDK; this is collected and stored in our own backend.
- Device information: push notification token, device/OS version, crash diagnostics.
3. How we use your information
To operate core features (feed, matchmaking, messaging, communities, marketplace, wallet), to compute your Digital Twin and resonance/compatibility scores, to personalize recommendations, to process payments and payouts, and to keep the platform safe (reviewing reports, moderating content, preventing abuse).
4. What we never do
We never sell your personal data. We never use Health, Strava, or any connected-account data for advertising — the app shows no ads and includes no ad SDK. We do not share your private messages with third parties except as required by law.
5. Who we share data with
- Firebase / Google Cloud — authentication, database, backend functions, push notifications, hosting.
- Cloudinary — media (photo/video) hosting.
- Razorpay — payment processing for wallet top-ups and withdrawal payouts.
- AI providers (Google Vertex AI / Anthropic) — to power Digital Twin text generation, content suggestions, and search-grounded features. Conversations you have with your own Twin are processed to generate responses but are not used to train third-party models beyond what each provider's own enterprise terms specify.
- Tavus, ElevenLabs, Exotel, Recall.ai — only if you opt in to Twin video-avatar calling, voice cloning, phone calling, or meeting-join features respectively. Voice/video/call data is sent to these providers solely to deliver the feature you activated.
These providers act as our data processors under their own security commitments and are contractually restricted from using your data for their own purposes.
6. Your choices
You can disconnect any linked account at any time from Settings. You can control the visibility of your taste, tags, goals, and activity per-item (public / followers / Twin-only / private). You can request deletion of your account and associated data by contacting kraftxmedias@gmail.com.
7. Data retention
We retain your data for as long as your account is active. If your account is suspended or removed for violating our Terms of Service, we retain report and moderation records as needed to enforce that decision and prevent re-registration by the same individual.
8. Children's privacy
Hypercurated is not directed at children and requires users to be at least 17 years old. We do not knowingly collect data from anyone under 17.
9. Security
Data in transit is encrypted (HTTPS/TLS). Firestore access is governed by security rules scoped to each user's own data. Payment instruments are handled by Razorpay's PCI-DSS compliant infrastructure — we never see full card/bank credentials.
10. Changes to this policy
We may update this policy from time to time; continued use of the app after an update constitutes acceptance of the revised policy.