Privacy Notice

What we collect, why, and your rights.

Last updated: 3 May 2026

This page tells you what data Curauti collects, why we collect it, who has access, how long we keep it, and your rights under Singapore's Personal Data Protection Act (PDPA). Plain language. No legalese. If anything is unclear, write to curautiteam@gmail.com and a human will reply.

Sections

  1. What we collect
  2. Why we collect it
  3. Who has access
  4. How long we keep it
  5. Your rights under PDPA
  6. Cookies, localStorage, and analytics
  7. Children's data
  8. Where your data goes
  9. Security
  10. Changes to this notice
  11. Visitors from outside Singapore
  12. About this notice

1. What we collect

  • Email addresses you submit through any of the four forms on this site (newly diagnosed signup, article subscription, account signup, worksheet download).
  • A locally stored record of your saved items, language preference, and theme preference. This stays in your browser only. We do not read it remotely.
  • Standard server logs from our host Netlify (your IP address, page accessed, timestamp). Used only for security and abuse prevention.
  • Nothing about your child. Ever. We do not collect health data, diagnostic information, therapy notes, or any data about minors. This is a permanent design decision.

2. Why we collect it

  • To deliver the resource you requested (for example, the First Weeks Guide PDF).
  • To send occasional updates if you opted in for them.
  • To respond to your messages.
  • We do not sell, share, or rent your email address. Period.

3. Who has access

Two groups:

  • The Curauti team (currently the founder, reachable at curautiteam@gmail.com).
  • Service providers who help operate the site:
    • Netlify (hosting, form submissions). United States. According to Netlify's published documentation, they offer industry standard security practices and safeguards for cross border data transfer.
    • Anthropic (powers the Growth Snapshot AI tool). United States. Submissions to the tool are not stored after the response is generated.
    • Google Workspace (the inbox at curautiteam@gmail.com). United States. Standard Google privacy and security terms apply.

We do not use any advertising networks, data brokers, or fingerprinting tools.

4. How long we keep it

  • We aim to keep email addresses for no longer than 3 years on a best effort basis. Curauti is currently a solo operated personal project, so we cannot guarantee that every record will be reviewed and removed within that window. There may be delays.
  • If you want your data removed at any time, or want confirmation that it has been deleted, write to curautiteam@gmail.com. We confirm action within 14 days.
  • Server logs from Netlify are retained per Netlify's published policy, typically up to 30 days.

5. Your rights under PDPA

Under Singapore's Personal Data Protection Act, you have the right to:

  • Ask what personal data we hold about you.
  • Correct anything that is wrong.
  • Withdraw consent for further processing. This means we stop emailing you and remove your address from active systems.

To exercise any of these rights, write to curautiteam@gmail.com. We respond within 14 days. We always try to resolve concerns directly with you, so please reach out to us first.

6. Cookies, localStorage, and analytics

  • Curauti does not use third party tracking cookies.
  • We use browser localStorage to remember your language preference, your saved items, and your theme. This stays on your device only. We do not read it remotely or transmit it to any server.
  • We are planning to add Google Analytics 4 (GA4) in a future release for aggregate, anonymous traffic measurement (page views, country, device type). When this is added, this notice will be updated and a clear notice will appear on first visit. You will be able to opt out.
  • No advertising trackers. No fingerprinting. No data brokers.

7. Children's data

  • Curauti is for parents, therapists, and creators. The audience is adults.
  • We do not knowingly collect personal data of any person under 18.
  • We do not collect data about children, including the children of our subscribers. The platform exists for parents to learn from each other; we do not log or store anything you write to us about your child.
  • If you are under 18 and have submitted information, write to curautiteam@gmail.com and we will delete it within 14 days.

8. Where your data goes

  • Form submissions are processed by Netlify's servers (United States) and emailed to curautiteam@gmail.com (Google Workspace, also United States).
  • Singapore's PDPA permits cross border transfer when comparable protection is in place. Based on Netlify's and Google's publicly published privacy documentation at the time of writing, both providers state that they offer Standard Contractual Clauses and other safeguards intended to align with regimes like PDPA. We rely on those public commitments and are not in a position to independently verify them. If you need higher certainty, we recommend reviewing each provider's privacy documentation directly.
  • If our subprocessors or transfer arrangements change in ways we are aware of, this notice will be updated.

9. Security

  • HTTPS on every page (Let's Encrypt automatic SSL).
  • Email submissions are encrypted in transit.
  • The site has no user accounts or passwords yet. There is no membership system to breach.
  • We take reasonable measures to keep our admin accounts and infrastructure secure.
  • If we become aware of a security incident that affects your personal data, we will work to inform you as soon as we reasonably can. Where the incident meets the threshold for mandatory notification under the PDPA, we will work to meet those obligations on a best effort basis.

10. Changes to this notice

  • This notice may be updated as Curauti evolves. For example, when GA4 is added, when membership accounts launch, or if Curauti is privatized into a registered Singapore company.
  • The "Last updated" date at the top changes when we revise.
  • Material changes will be communicated by email to subscribers and posted as a notice on the homepage.
  • Continued use of the site after a change is acceptance of the revised notice.

11. Visitors from outside Singapore

  • Curauti is hand built in Singapore and primarily aligned with Singapore's PDPA. We welcome visitors from anywhere, including the United States, the United Kingdom, the European Union, and beyond.
  • For visitors in the UK or EU (UK GDPR, EU GDPR): the rights described above are similar in spirit to what UK and EU GDPR grant. You may exercise those rights by emailing curautiteam@gmail.com. We will respond on a best-effort basis. We do not currently have a designated EU representative; if that becomes necessary as the platform grows, this notice will be updated.
  • For visitors in the United States (COPPA, state privacy laws): Curauti does not knowingly collect personal information from anyone under 13. We also do not collect personal information about children, including the children of our adult subscribers. If you are a parent or guardian who believes a child has submitted information to us, write to us and we will delete it.
  • Whatever jurisdiction you are visiting from, the underlying practice is the same: minimal data, no child data, no advertising trackers, manual deletion on request.

12. About this notice

  • Curauti is currently operated as a personal project by the founder, contactable at curautiteam@gmail.com. There is no incorporated entity behind it yet.
  • Curauti may be transferred to a registered Singapore company in the future. If that happens, this notice will be reissued under that entity. Your data rights remain unchanged through any transfer, and you will be notified.
  • Governing law: Singapore.
  • For questions, requests, or complaints: curautiteam@gmail.com.

This notice is written in plain language for clarity. We recommend keeping a copy for your records. See also our Terms of Use.