Privacy Policy
Last updated November 1, 2026
Curiami is a Chrome extension and the website curiami.com. They are run by SimpleStack (심플스택), a sole proprietorship in the Republic of Korea (“we”). This policy covers both, and is written to meet the Korean Personal Information Protection Act (PIPA) and the EU and UK General Data Protection Regulation (GDPR).
What we keep
| What | Why | How long |
|---|---|---|
| Your Google account’s email address, name and profile picture, as Google shares them when you sign in | To create and identify your account | Until you delete your account |
| Your questions, the answers, follow-up questions, and names you give them | They are your records: the reason Curiami exists | Until you delete them or your account |
| For each video you asked about: its YouTube ID, title, channel and length, and the moment and chapter of each question | To show your records with their video and return you to the moment | Until you delete the records or your account |
| For each question: the model, the number of tokens, what it cost, whether it succeeded, and how long it took. Never the question itself | To apply your plan’s monthly limit, and to keep the service running | Details for 90 days; monthly totals until you delete your account |
| A one-way hash of your Google account ID, and which models it has had its free question with | To give each person one free question per model, also across a deleted and re-created account | Kept after you delete your account, while the free plan exists. It can’t be turned back into your identity |
| Your plan and subscription status, and Paddle’s IDs for your customer record and subscription | To give you what you pay for | Until you delete your account, then as tax law requires (kept by Paddle) |
When you delete a record, it stays for 30 days so you can undo it, then it is deleted for good. Deleting erases the data from the database so it can’t be recovered.
What we never keep
- Frames. When you ask, the extension sends the frame on screen with your question so the model can see it. It is used for that answer and not stored, by us or in your records.
- Captions. The captions on screen at that moment are sent the same way, and dropped the same way.
- What you watch. The extension only knows about videos you ask about. Nothing about other videos leaves your browser.
- Your payment details. Card and billing details go to Paddle and never reach us.
Who processes it for us
| Company | What they do | Where |
|---|---|---|
| Supabase | Our database, sign-in and server | United States |
| Anthropic | Answers questions sent to Claude models | United States |
| OpenAI | Answers questions sent to ChatGPT models | United States |
| Paddle | Sells the paid plans as merchant of record: checkout, billing, tax, invoices, refunds | United Kingdom and United States |
| Signs you in, and runs our email | United States | |
| Cloudflare | Serves this website | Worldwide |
Anthropic and OpenAI receive your question, the frame and captions, the earlier questions and answers in the same thread, and the video’s title, channel and chapter, and the moment you asked at. Under their API terms they don’t use it to train their models. OpenAI is asked not to store it; both may keep it for a limited time to detect abuse.
Paddle is the seller of record for purchases and processes your payment under its own privacy notice.
Your data is stored and processed in the United States, and goes there as you use Curiami: when you sign in, ask, or pay. Where the GDPR applies, transfers rely on the providers’ Standard Contractual Clauses or the EU–US Data Privacy Framework. You can refuse these transfers, but Curiami can’t answer or keep records without them; you can stop at any time by deleting your account.
We don’t sell your data, share it for advertising, or use it to train models.
Legal basis (GDPR)
- To provide the service you signed up for (contract): your account, records, answers and plan.
- Legitimate interests: keeping the service secure, preventing abuse of free questions, and applying usage limits.
- Legal obligation: tax and accounting records for purchases, kept by Paddle.
Your choices and rights
- See and export your records at any time: the extension exports them as Markdown.
- Correct or delete a record from the extension, or delete your account and everything in it from your account page. Deleting the account takes effect at once; copies in backups are gone within 7 days.
- Ask us to access, correct, delete or restrict your data, to object to how we process it, or to receive it in a portable form: write to contact@curiami.com. We answer within 10 days.
- Complain to a data protection authority: in Korea the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972); in the EU or UK, the authority where you live.
Your browser
The extension keeps your settings, and your sign-in session in storage that only the extension can read. This website keeps your sign-in session in your browser’s local storage while you’re signed in. Neither uses tracking or advertising cookies. Visits to this website are counted with Cloudflare Web Analytics, which sets no cookies and doesn’t identify you: we see totals, such as which pages were viewed, which sites visitors came from and their countries.
Security
Connections are encrypted. Every record is readable only by the account it belongs to, enforced in the database. The pages you visit on YouTube can’t read your sign-in session.
Children
Curiami is not for children under 14.
Changes
If we change this policy, we’ll update it here and change the date above. If a change matters to how your data is used, we’ll tell you in the extension or by email before it applies.
Contact
Privacy questions and requests: SimpleStack (심플스택), Privacy, contact@curiami.com