Curv Health Privacy Policy

Last Updated: March 27, 2025

Curv Labs Inc. (“Curv,” “we,” “us,” or “our”) takes the privacy of personal information very seriously. This Privacy Policy describes the manner in which we collect, use, disclose and otherwise treat personal information. This Privacy Policy applies to personal information that we collect and process in the course of providing our platform (the “Platform”), which includes our mobile applications (collectively the “App”) and a website portal located at www.curvhealth.com (the “Website”).

About our Platform 

Our Platform allows individuals (“Clients”) to record, monitor and understand their movements, and obtain feedback, correction and guidance from us, or in some cases, personal trainers, physiotherapists, athletic therapists, coaches, nutritionists or other providers that we have direct contractual relationships with and that provide exercise, therapy, mental wellness therapy, performance therapy, nutrition care, rehabilitation and other similar programs and services to Clients, where the Client has authorized sharing of information collected from Curv to these Providers. Our Platform also allows Clients to view the Programs assigned to them by Curv or its Providers, to generate videos and assessments of their exercises and to share the videos and assessments with Providers, and to ask questions or otherwise communicate with Curv or their Provider. For the purposes of this Privacy Policy, “Users” shall mean Clients and/or Providers. 

What this Privacy Policy Covers

This Privacy Policy covers the following topics:

  • Collection and Use of Personal Information
  • Disclosure of Personal Information
  • Information Collected Automatically
  • Legal Base for Processing
  • Third Party Links 
  • Social Media
  • Security of Personal Information
  • Retention, Storage and International Transfer of Personal Information
  • Accessing and Updating Personal Information
  • Updated to Our Privacy Policy
  • Contact Us

Collection and Use of Personal Information

“Personal information” means information about an identifiable individual as described under applicable privacy laws.

Personal information does not include any business contact information that is solely used to communicate with you in relation to your employment, business or profession, such as your name, position name or title, work address, work telephone number, work fax number or work e-mail address. 

This Privacy Policy does not apply to the extent we process personal information in the role of a processor or service provider on behalf of a Provider. It is that Provider’s privacy statement that applies; we conduct such activities strictly in accordance with the Provider’s instructions and pursuant to our contractual arrangements with the Provider. If you are an end user or patient with an existing relationship with a Provider, you should refer to the Provider’s website to understand their privacy practices and policies.

We may collect, use, and disclose different types of personal information, depending on our relationship with you. Generally, we collect the following types of personal information (not all of which may apply to you):  

Account creation

In order to access the Platform, you are required to create an account with us. You must be at least 13 years of age to create an account. We collect your email address, password, full name, mobile phone number, and date of birth for the purposes of administering your account and verifying your age. Additional information may be requested within your profile to allow us to better customize the experience for you, but this information will be optional. We may use this information to administer your account and personalize your experience on the Platform, and to communicate with you.

Video assessments and exercises

Our App allows Clients to log their exercises. It also allows Clients and Providers (where applicable) to use their mobile devices to take videos of exercises and movements to measure movement related to performance and technique and to generate metrics including angles, distances, ratios and asymmetries throughout the body during the movements (i.e., “assessment data”). Our App will request permission to access the video and audio features on the mobile device for these purposes. Client video assessment data is by default, available publicly online on Curv’s leaderboards. Clients have the ability to opt out of this sharing of data via the platform. Client’s logged exercises and video assessments will be shared with the Client’s Providers (where applicable), unless the Client has revoked this access. A Provider may also generate video assessments of their Clients from the Provider’s device and can share the assessments with the Client. We use video content and assessment results only to provide Clients and permitted Providers with the features of the Platform.

Payment Information

While certain features on the Platform are free, Users may be required to pay a monthly membership fee for access to certain features of the Platform. Providers may also be required to pay fees based on specific, agreed-upon usage of the Platform with Clients. We collect your payment-card details (including payment card number, security code, expiration date, cardholder name and billing address) for the purposes of processing your membership payments.

Certifications

We may collect certifications from Providers who use our Platform for the purposes of verifying their credentials. This will include a certificate for personal trainers, diplomas/degrees for athletic therapists and physiotherapists or any other profession as we deem necessary.

Inquiries

If you contact us with an inquiry, you may be asked for information that identifies you, such as your name, address and a telephone number, along with additional information we need to help us promptly answer your inquiry. We may retain this information to assist you in the future and to improve our customer service and service offerings.

Feedback

We may collect and use feedback about our Platform to better understand users of the Platform and enhance our product and service offerings. With your consent, we may publish your feedback on our Website or other promotional materials.

Marketing Communications

We may use your personal information to send you newsletters and other promotional communications. You can opt-out of receiving promotional communications from us by following the opt-out or “unsubscribe” instructions provided in your email, or by contacting us as set out below. Please note that upon unsubscribing, you will continue to receive transactional and account-related electronic messages from us.

Push Notifications

If you provide your consent to receive push notifications, we may send push notifications to your mobile device to provide you with reminders, updates and information. If you wish to stop receiving push notifications from us, you can turn off push notifications for the App in the settings of your mobile device.

Aggregated and Anonymized Data

We also collect, use, and share aggregated and anonymized data for any purpose, including usage data relating to use of the App or Platform, or aggregated data generated from video assessments or exercises. This data helps us understand how our products and services are being used and allows us to optimize and improve our product and service offerings or develop new ones. Aggregated and anonymized data is not considered personal information because it cannot be used to identify you.

Disclosure of Personal Information

We generally identify to whom, and for what purposes, we will disclose your personal information (and we obtain your consent to such disclosure) at the time we collect your personal information. 

Service Providers

In connection with our Platform, we may transfer (or otherwise make available) personal information to third parties who provide services on our behalf. For example, we may use service providers to host our Platform, store data and provide back-up Platform (including cloud- based service providers), process payments, or provide data analytics. Personal information may be maintained and processed by us or our third party service providers in the US, Canada, or other jurisdictions. Our service providers are given the information they need to perform their designated functions, and we do not authorize them to use or disclose personal information for their own marketing or other purposes. For more information about the way in which our service providers treat personal information, please contact us as set out in the “Contact Us” section below.

Providers

If you are a Client, we provide your personal information to your Providers and share healthcare data between your Providers. This information includes your logged exercises, videos, goals, assessment results, and forms. You may revoke a Provider’s access to your information at any time via the settings tab on your profile.

Sale of Business

We may transfer personal information as an asset in connection with a prospective or completed merger, acquisition or sale (including transfers made as part of insolvency or bankruptcy proceeding) involving all or part of Curv or as part of a corporate reorganization or other change in corporate control.

Legal

Curv and our Canadian, US and other service providers may disclose your personal information in response to a search warrant or other legally valid inquiry or order to other organizations in the case of: investigating a breach of an agreement or contravention of law or detecting, suppressing or preventing fraud, or as otherwise required or permitted by applicable Canadian, US or other law. Orders may include lawful access by Canadian, US or other foreign governmental authorities, courts or law enforcement agencies.

Your Consent to the Collection, Use and Disclosure of Personal Information

We collect, use, and disclose your personal information with your consent or as permitted or required by law. How we obtain your consent, including whether it is expressed or implied, will depend on the circumstances and the sensitivity of the personal information in question. Generally, we will seek your consent at the time we collect your personal information, either orally, electronically, or in writing.

If you provide personal information about another individual to us, it is your responsibility to obtain the consent of that individual to enable us to collect, use and disclose their information as described in this Privacy Policy. 

If you wish to withdraw your consent to our collection, use or disclosure of your personal information, please contact us using the contact information in the “Contact Us” section below. We will accommodate your request to withdraw consent, subject to legal or contractual restrictions. Withdrawal of your consent may mean that we will no longer be able to provide you with certain products or services.

Information Collected Automatically

Visiting our Website

We collect the IP (Internet protocol) addresses of all visitors to our Website and other related information such as page requests, browser type, operating system and average time spent on our Website. We use this information to help us understand our Website activity and to improve our Website.

Using our App

When you use our App, we collect information regarding your device type, operating system and version, carrier provider, unique device identifier, language setting, and the date and time that the App accesses our servers. With your consent, we may also collect your location data. We use this information to help us understand the activity on our App and to monitor and improve our App.

Cookies

Our Website uses a technology called "cookies". A cookie is a tiny element of data that our Website sends to a user’s browser, which may then be stored on the user’s hard drive so that we can recognize the user when they return. We use cookies, and similar tracking technologies such as web beacons and pixels, to remember your preferences and to authenticate you. You may set your browser to notify you when you receive a cookie or to not accept certain cookies. However, if you decide not to accept cookies from our Website, you may not be able to take advantage of all of the Website features.

Analytics

We may use third party service providers like Google Analytics to collect information about your use of the Platform, such as the features used and time spent on the Platform, to help us better understand our users and improve our Platform. The information we gather is used in an aggregate, non-identifiable form. To know more about how information is processed in connection with Google Analytics please read the Google Analytics Policy here. You can opt out of Google Analytics by downloading and utilizing the Google Analytics Opt-out Browser Add-on

Third Party Sites

Third Party Links

Our Platform may contain links to other websites that Curv does not own or operate. We provide links to third party websites as a convenience to the user. These links are not intended as an endorsement of or referral to the linked websites. The linked websites have separate and independent privacy policies, notices and terms of use. We do not have any control over such websites, and therefore we have no responsibility or liability for the manner in which the organizations that operate such linked websites may collect, use or disclose, secure and otherwise treat personal information. We encourage you to read the privacy policy of every website you visit.

Social Media

We may offer you the opportunity to engage with Curv content on or through third-party social networking websites, plug-ins and applications. When you engage with us or our content on or through third-party social networking websites, plug-ins and applications, you may allow us to have access to certain information associated with your social media account (e.g., name, username, email address, profile picture, gender). We may use this information to personalize your experience on the Platform and on the third-party social networking websites, plug-ins and applications, and to provide you with other information you may request.

Security of Personal Information

We have implemented reasonable administrative, technical and physical safeguards in an effort to protect against unauthorized access, use, modification and disclosure of personal information in our custody and control.

Despite these measures, we cannot guarantee that our safeguards will always be effective. A breach of security safeguards can result in risks such as phishing and identity theft. In such cases, we will act promptly to mitigate the risks and to inform you where there is a real risk of significant harm, or as otherwise required by law.

We may also require that you assist us in safeguarding your personal information. For example, if you create an account through our website, the Platform or the App, you should use a unique and strong password and not share your password with others. 

If you have reason to believe that your personal information is no longer secure, please contact us immediately using the contact information in the “Contact Us” section below.

Retention, Storage and International Transfer of Personal Information

We will retain your personal information for as long as necessary to fulfill the purposes for which we collected it, and as permitted or required by law.

We may transfer your personal information outside of Canada to fulfil the purpose for which we collected it, including for processing and storage by service providers. While your personal information is outside of Canada, it is subject to the laws of the country in which it is located, which may have different data protection laws than Canada. Those laws may require disclosure of your personal information to authorities in that country. For more information about our policies and practices regarding service providers outside of Canada, contact us using the contact information in the “Contact Us” section below.

Accessing and Updating Personal Information

We expect you to supply us with updates to your personal information, when required. We will not routinely update your personal information unless such a process is necessary.  

You may make a request to review any personal information about you that we have collected, used, or disclosed, and we will provide you with any such personal information to the extent required by applicable laws. 

You may also challenge the accuracy or completeness of your personal information in our records. If you demonstrate that your personal information in our records is inaccurate, incomplete or equivocal, we will amend or delete your personal information as required. Where appropriate, we will transmit the amended information to third parties to whom we have disclosed your personal information.

We may require that you provide sufficient identification to fulfill your request to access or correct your personal information. Any such identifying information will be used only for this purpose. We will not charge you any fees to access your personal information in our records without first providing you with an estimate of the approximate fees, if any. 

If you object to how we handle your request, you may have the right to make a complaint to the Privacy Commissioner of Canada or the applicable provincial privacy commissioner.

If we are processing your personal information on behalf of our customer, we may refer your access or correction request to that customer.

Updates to our Privacy Policy

This Privacy Policy may be updated periodically to reflect changes to our personal information practices. The revised Privacy Policy will be posted on our Website and App. We strongly encourage you to please refer to this Privacy Policy often for the latest information about our personal information practices.

Contact Us

Please contact our Privacy Officer at privacy@curv.ai if you have any questions, comments or complaints about this Privacy Policy or the personal information practices of us or our service providers.