CURI Privacy Policy & Terms of Use

1. What Data We Get

We collect certain data from you directly, like information you enter yourself, data about your consumption of content, and data from third-party platforms you connect with CURI. We also collect some data automatically, like information about your device and what parts of our Services you interact with or spend time using. All data listed in this section is subject to the following processing activities: collecting, recording, structuring, storing, altering, retrieving, encrypting, pseudonymizing, erasing, combining, and transmitting.

1.1 Data You Provide to Us

We may collect different data from or about you depending on how you use the Services. Below are some examples to help you better understand the data we collect. When you create an account and use the Services, including through a third-party platform, we collect any data you provide directly, including:

Account Data

In order to use certain features (like accessing content), you need to create a user account, which requires us to collect and store your email address, password, and account settings. To create an instructor account, we collect and store your name, email address, password, and account settings. As you use certain features on the site, you may be prompted to submit additional information. For example, you may choose to provide your phone number for authentication purposes or information relevant to your learning interests, including occupation and skill interests, and if you apply to become an instructor, we may collect government ID information, verification photo, date of birth, race/ethnicity, and phone number. Upon account creation, we assign you a unique identifying number.

The data listed above is stored by us and associated with your account. CURI’s use and transfer to any other app of information received from Google APIs, like instructor uploaded content, will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Profile Data

You can also choose to provide profile information like a photo, headline, biography, language, website link, social media profiles, country, or other data. Your Profile Data will be publicly viewable by others.

Learning Data

When you access content, we collect certain data including which courses, assignments, labs, workspaces, and quizzes you’ve started and completed; content and subscription purchases and credits; subscriptions; completion certificates; badges; your exchanges with instructors, teaching assistants, and other students; and essays, answers to questions, and other items submitted to satisfy course and related content requirements.

Student Payment Data

If you make purchases, we collect certain data about your purchase (such as your name, billing address, and ZIP code) as necessary to process your order and which may optionally be saved to process future orders. You must provide certain payment and billing data directly to our payment service providers, including your name, credit card information, billing address, and ZIP code. We may also receive limited information, like the fact that you have a new card and the last four digits of that card, from payment service providers to facilitate payments. For security, CURI does not collect or store sensitive cardholder data, such as full credit card numbers or card authentication data.

Instructor Payment Data

If you are an instructor, we collect and use certain information, including your payment account email address, account ID, physical address, bank account number, mobile wallet number or other data necessary for us to send payments to your account.

Communications and Support

If you contact us for support or to report a problem or concern (regardless of whether you have created an account), we collect and store your contact information, messages, and other data about you like your name, email address, location, CURI user ID, and any other data you provide or that we collect through automated means (which we cover below). We use this data to respond to you and research your question or concern.

1.2 Data We Collect through Automated Means

When you access the Services (including browsing content), we collect certain data by automated means, including:

• Technical data about your device or internet connection (e.g., IP address, device type, operating system, browser type, and settings)
• Usage data about your interactions with the Services (e.g., pages visited, time spent on pages, features used, search queries, click data)
• Data collected through cookies, web beacons, and similar technologies

The data listed above ("Cookie Data") is collected through the use of server log files and tracking technologies, as detailed in the “Cookies and Data Collection Tools” section below. It is stored by us and associated with your account. Depending on your cookie and browser settings, the data listed above may also be transmitted to Google for advertising purposes, as provided in more detail below.

1.3 Data From Third Parties

If you are a CURI Business enterprise or corporate prospect, in addition to information you submit to us, we may collect certain business contact information from third-party commercial sources.

2. How We Get Data About You

We use tools like cookies, web beacons, and similar tracking technologies to gather the data listed above. Some of these tools offer you the ability to opt out of data collection.

2.1 Cookies and Data Collection Tools

CURI and service providers acting on our behalf (like Google Analytics and third-party advertisers) use server log files and automated data collection tools like cookies, tags, scripts, customized links, device or browser fingerprints, and web beacons (together, “Data Collection Tools“) when you access and use the Services. These Data Collection Tools automatically track and collect certain System Data, Usage Data, and Approximate Geographic Data when you use the Services. In some cases, we tie data gathered through those Data Collection Tools to other data that we collect as described in this Privacy Policy.

2.2 Why We Use Data Collection Tools

CURI uses the following types of Data Collection Tools for the purposes described:

• Strictly Necessary: These Data Collection Tools enable you to access the site, provide basic functionality (like logging in or accessing content), secure the site, protect against fraudulent logins, and detect and prevent abuse or unauthorized use of your account. These are required for the Services to work properly, so if you disable them, parts of the site will break or be unavailable.
• Functional: These Data Collection Tools remember data about your browser and your preferences, provide additional site functionality, customize content to be more relevant to you, and remember settings affecting the appearance and behavior of the Services (like your preferred language or volume level for video playback).
• Performance: These Data Collection Tools help measure and improve the Services by providing usage and performance data, visit counts, traffic sources, or where an application was downloaded from. These tools can help us test different versions of CURI to see which features or content users prefer and determine which email messages are opened.
• Advertising: These Data Collection Tools are used to deliver relevant ads (on the site and/or other sites) based on things we know about you like your Usage and System Data, and things that the ad service providers know about you based on their tracking data. The ads can be based on your recent activity or activity over time and across other sites and services. To help deliver tailored advertising, we may provide these service providers with a hashed, anonymized version of your email address (in a non-human-readable form) and content that you share publicly on the Services.
• Social Media: These Data Collection Tools enable social media functionality, like sharing content with friends and networks. These cookies may track a user or device across other sites and build a profile of user interests for targeted advertising purposes.

3. What We Use Your Data For

We use your data to do things like provide our Services, communicate with you, troubleshoot issues, secure against fraud and abuse, improve and update our Services, analyze how people use our Services, serve personalized advertising, and as required by law or necessary for safety and integrity. We retain your data for as long as it is needed to serve the purposes for which it was collected. If you have a CURI account, we will delete your data following account termination, or longer as required by law or necessary for safety and integrity.

We use the data we collect through your use of the Services to:

• Provide and administer the Services, including to facilitate participation in content, issue completion certificates, display customized content, and facilitate communication with other users;
• Process payments to instructors and other third parties;
• Process your requests and orders for content, products, specific services, information, or features; confirm delivery; detect fraud or abuse; and enforce CURI policies;
• Communicate with you about your account by responding to your questions and concerns, sending you administrative messages, and providing updates;
• Manage your account and account preferences and personalize your experience;
• Facilitate the Services’ technical functioning, including troubleshooting and resolving issues, securing the Services, and preventing fraud and abuse;
• Verify the identity of instructors;
• Solicit feedback from users;
• Market products, services, surveys, and promotions;
• Learn more about you by linking your data with additional data through third-party data providers and/or analyzing the data with the help of analytics service providers;
• Display and tailor advertisements shown in the Services, including across devices;
• Analyze trends and traffic, track purchases, and track usage data;
• Advertise the Services on third-party websites and applications;
• As required or permitted by law or as necessary to ensure the safety or integrity of our users, employees, third parties, the public, or our Services.

4. Who We Share Your Data With

We share certain data about you with instructors, other students, companies performing services for us, CURI affiliates, our business partners, analytics and data enrichment providers, your social media providers, companies helping us run promotions and surveys, and advertising companies who help us promote our Services. We may also share your data as needed for security, legal compliance, or as part of a corporate restructuring. Lastly, we can share data in other ways if it is aggregated or de-identified or if we get your consent.

We may share your data with third parties under the following circumstances or as otherwise described in this Privacy Policy:

• With Your Instructors: We share data that we have about you (except your email address) with instructors or teaching assistants for content you access or request information about, so they can improve their content for you and other students.
• With Other Students and Instructors: Depending on your settings, your Shared Content and profile data may be publicly viewable, including to other students and instructors.
• With Service Providers, Contractors, and Agents: We share your data with third-party companies who perform services on our behalf, like payment processing, fraud and abuse prevention, data analysis, marketing and advertising services, email and hosting services, and customer services and support.
• With CURI Affiliates: We may share your data within our corporate family of companies that are related by common ownership or control to enable or support us in providing the Services.
• With Business Partners: We have agreements with other websites and platforms to distribute our Services and drive traffic to CURI.
• With Analytics and Data Enrichment Services: We share certain contact information or de-identified data with third-party analytics tools and data enrichment services.
• To Power Social Media Features: The social media features in the Services may allow the third-party social media provider to collect certain data.
• To Administer Promotions and Surveys: We may share your data as necessary to administer, market, or sponsor promotions and surveys you choose to participate in.
• For Advertising: We may use and share certain Cookie Data with third-party advertisers and networks to show general demographic and preference information among our users.
• For Security and Legal Compliance: We may disclose your data to third parties if we have a good faith belief that the disclosure is required or permitted by law.
• During a Change in Control: If CURI undergoes a business transaction like a merger, acquisition, or sale of assets, we may share, disclose, or transfer all of your data to the successor organization.
• After Aggregation/De-identification: We may disclose or use aggregated or de-identified data for any purpose.
• With Your Permission: With your consent, we may share data to third parties outside the scope of this Privacy Policy.

5. Security

We use appropriate security based on the type and sensitivity of data being stored. As with any internet-enabled system, there is always a risk of unauthorized access, so it’s important to protect your password and to contact us if you suspect any unauthorized access to your account.

CURI takes appropriate security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal data that we collect and store. These measures vary based on the type and sensitivity of the data. Unfortunately, however, no system can be 100% secured, so we cannot guarantee that communications between you and CURI, the Services, or any information provided to us in connection with the data we collect through the Services will be free from unauthorized access by third parties. Your password is an important part of our security system, and it is your responsibility to protect it. You should not share your password with any third party, and if you believe your password or account has been compromised, you should change it immediately and contact our Support Team with any concerns.

6. Your Rights

You may have certain rights around the use of your data, including the ability to opt out of promotional emails, certain types of cookies, and collection of your data by certain third parties. You can update or terminate your account from within our Services and can also contact us for individual rights requests about your personal data. Parents who believe we’ve unintentionally collected personal data about their underage child should contact us for help deleting that information.

6.2 Accessing, Updating, and Deleting Your Personal Data

You can access and update your personal data that CURI collects and maintains as follows:

• Update or correct your data: To update data you provide directly, log into your account and update your account at any time.
• Delete your data: To terminate your account:
  • If you are a student, visit your profile settings page and delete your account data.
  • If you are an instructor, contact our customer support to delete all your courses and data.

Please note: even after your account is terminated, some or all of your data may still be visible to others, including without limitation any data that has been (a) copied, stored, or disseminated by other users (including comments on content); (b) shared or disseminated by you or others (including in your shared content); or (c) posted to a third-party platform. Even after your account is terminated, we retain your data for as long as we have a legitimate purpose to do so (and in accordance with applicable law), including to assist with legal obligations, resolve disputes, and enforce our agreements. We may retain and disclose such data pursuant to this Privacy Policy after your account has been terminated.

6.3 Our Policy Concerning Children

We recognize the privacy interests of children and encourage parents and guardians to take an active role in their children’s online activities and interests. Individuals younger than 18 years of age, but of the required age for consent to use online services where they live (for example, 13 in the US or 16 in Ireland), may not set up an account, but may have a parent or guardian open an account and help them access appropriate content. Individuals younger than the required age for consent to use online services may not use the Services. If we learn that we’ve collected personal data from a child under those ages, we will take reasonable steps to delete it.

7. Updates & Contact Info

When we make a material change to this policy, we’ll notify users via email, in-product notice, or another mechanism required by law. Changes become effective the day they’re posted. Please contact us via email or postal mail with any questions, concerns, or disputes.

7.1 Modifications to This Privacy Policy

From time to time, we may update this Privacy Policy. If we make any material change to it, we will notify you via email, through a notification posted on the Services, or as required by applicable law. Unless stated otherwise, modifications will become effective on the day they are posted.

As permitted by applicable law, if you continue to use the Services after the effective date of any change, then your access and/or use will be deemed an acceptance of (and agreement to follow and be bound by) the revised Privacy Policy. The revised Privacy Policy supersedes all previous Privacy Policies.

7.2 Interpretation

Any capitalized terms not defined in this policy are defined as specified in CURI’s Terms of Use. Any version of this Privacy Policy in a language other than English is provided for convenience. If there is any conflict with a non-English version, you agree that the English language version will control.

7.3 Questions

If you have any questions, concerns, or disputes regarding our Privacy Policy, please feel free to contact our support team.