Privacy Policy
1. Introduction
Cura & Byway LLC ("Cura") provides software that listens to client sessions and automates note taking for mental health professionals such as therapists, so they can spend less time on administrative work. This Privacy Policy explains what personal information Cura collects, how it is used, and your rights regarding that information. By using curanote.co or the CuraNote service, or otherwise providing personal information to us, you agree to the collection, use, and disclosure of your information as described here.
2. Information Collected by Cura
On curanote.co, if you join the alpha waitlist we collect one thing: your email address. Our servers briefly process your IP address to prevent abuse and to confirm your location is in the United States; it is not stored or shared.
In the CuraNote service, Cura collects the following categories of personal information:
- Identifiers: name and email address of the practitioner
- Protected Health Information (PHI): client names and session details entered or captured while a practitioner uses the service, protected under HIPAA
- Usage data: information about how the service is used
- Billing information (payment details for CuraNote subscriptions): collected only if paid plans launch, and never stored on our own servers
Cura collects this information directly from users when they sign up, use the service, or contact us. Usage data is collected automatically through use of the service.
3. Use of Personal Information
- To provide the CuraNote service to users
- To contact waitlist members about alpha access
- To respond to user inquiries and requests
- To improve Cura's products and services
Your sessions and notes are never used to train AI models.
4. Disclosure of Personal Information
Cura does not sell personal information to third parties under any circumstances. Cura shares personal information only as necessary to provide the service: with Microsoft Azure, which hosts the service under a signed Business Associate Agreement, and with Google solely to authenticate your sign-in (no PHI is sent to Google). Information is encrypted in transit and at rest. No other sharing or disclosure of personal information to third parties occurs.
5. User Rights
- Right to access your personal information
- Right to request deletion of your personal information
- Clients of practitioners can request access to their information through their practitioner
To exercise these rights, contact Cura at zarren@curanote.co.
6. Data Security
Cura implements reasonable security practices to help protect personal information, including encryption of PHI at rest and in transit. However, no system is completely secure and we cannot guarantee the security of information.
7. Changes to This Privacy Policy
Cura may update this Privacy Policy from time to time. We will notify users of material changes through the service or by other means.
8. Contact Information
If you have questions about Cura's privacy practices, contact us at zarren@curanote.co.
9. Privacy Notice for California Residents
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to know what personal information we collect (described in Section 2), to request access to or deletion of that information (Section 5), and to not be discriminated against for exercising these rights. Cura does not sell or share personal information as those terms are defined under California law, so no opt-out is required.