Privacy Policy
We will never sell your personal information…period. To be clear, Curio does not sell student data. Curio does not use student data for behavioral advertising. Student data is never shared with advertising platforms.
Curio is committed to protecting the privacy of its visitors, educational partners, and users (“you”).
This policy applies to our websites, apps, services, and other software that may be downloaded to, or accessed by you or by any mobile or computing device you own or control in connection with our services (the “Services”).
Your privacy is important to us. This Privacy Policy (“Policy”) applies to services provided by Curio (“we”, “us”, or “Company”) and our website, product pages, mobile or web applications, or other digital products that link to or reference this Policy (collectively, the “Services”) and explains what information we collect from users of our Services (a “user”, “you”, or “your”), including information that may be used to personally identify you (“Personal Information”) and how we use it. We encourage you to read the details below. This Policy applies to any visitor to or user of our Services.
We may collect different types of information from you depending on how you use our Services, including Personal Information. When we say “Personal Information,” we mean identifiable information about you, like your name, email, support queries, community comments, information about yourself that you share via the Services, and so on. This notice doesn’t apply to information that cannot be used to identify you (e.g. where personal data has been aggregated and anonymized).
This policy is effective from the date set out above. We may need to update this notice from time to time. You should check this policy periodically. Your continued use of our Services after we post any modifications to this policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified policy. Where a change is significant, we’ll make sure to let you know – by either sending you an email to the email address you provided us or by placing a prominent notice on our Services.
Who are "we"?
When we refer to “we,” “our,” or “us,” we mean VR in Schools Foundation and Curio XR.
- We do not collect any more Personal Information than is necessary to provide our Services.
- We only use your Personal Information for the purposes we specify in this Privacy Policy unless you agree otherwise.
- We do not keep your Personal Information if it is no longer needed.
- Other than as specified in this Privacy Policy, we do not share your Personal Information with third parties.
Student Data and Educational Institution Use
Curio may provide services to schools, school districts, colleges, universities, and other authorized educational institutions. When Curio processes student information on behalf of an educational institution, Curio acts as a service provider and processes such information solely for authorized educational purposes and as directed by the applicable educational institution.
Educational institutions retain ownership and control of student education records, including education records as defined under the Family Educational Rights and Privacy Act (“FERPA”), where applicable.
Curio does not sell student data. Curio does not use student data for behavioral advertising. Student data is never shared with advertising platforms.
What information do we collect?
Identifiers: We may collect your first and last name, email address, IP address, country, time zone, and/or display name.
Student information: When Curio is used by or on behalf of an educational institution, we may process student name, school-provided identifier, email, and usage activity, as authorized by the applicable educational institution and as necessary to provide the Services.
Voice data: We may receive voice data when you use microphone-enabled features of the Services. Voice data may be used to provide real-time communication, interactive learning features, moderation, support, accessibility, or other functionality made available through the Services. In certain public or moderated environments, voice data may be processed for safety, moderation, or service functionality. Where third-party processing is used, we limit such processing to service-related purposes and apply appropriate safeguards. In private or institution-controlled environments, voice data is processed only as necessary to provide the Services or as otherwise authorized by the applicable user, organization, or educational institution.
Recorded sessions: We may record your session, which includes a video feed of your virtual reality avatar and first name, voice data, and other audio of the session. We may use information obtained from recorded sessions for our internal training and academic research purposes.
How we collect your data
When you visit or use our Services, we collect Personal Information. The ways we collect it can be broadly categorized into the following:
Information you provide to us directly: When you visit or use some parts of our Services we might ask you to provide Personal Information to us. For example, we ask for your contact information when you sign up to use our Services, contact us with questions, or request support. If you don’t want to provide us with Personal Information, you don’t have to, but it might mean you can’t use some parts of our Services. When you choose to use your device’s microphone for voice chat.
Where we collect Personal Information, we’ll only process it:
- To provide the Services or to perform any other service for or with you;
- Where we have legitimate interests to process the Personal Information and they’re not overridden by your rights;
- In accordance with a legal obligation; and/or
- Where we have your consent.
If we don’t collect your Personal Information, we may be unable to provide you with all our Services, and some functions and features of our Services may not be available to you.
How we use your data
First and foremost, we use your Personal Information to operate and provide you with our Services and to manage our relationship with you. We also use your Personal Information for other purposes, which may include:
Communications – This may include:
- Providing you with the information you’ve requested from us or information we are required to send you;
- Operational communications, like changes to our Services, security updates or assistance in using our Services;
Support – This may include assisting with the resolution of technical support issues or other issues relating to the Services, whether by email, live chat, in-app support, or otherwise.
Service Enhancement – By tracking and monitoring your use of our Services we can keep improving, or by carrying out technical analysis of our Services so that we can optimize your user experience and provide you with more efficient tools. To deliver and improve the Services and your overall user experience.
Protection – By tracking and monitoring the use of our Services, we aim to detect and prevent any fraudulent or malicious activity, and make sure that everyone is using our Services fairly and in accordance with our terms and conditions.
Analysis and Reporting – We may use the Personal Information we collect about you and other users of our Services to produce aggregated and anonymized analytics and reports. We may also use such aggregated and anonymized data in a number of ways, including research, internal analysis, analytics, or other legally permissible purposes.
How we can share your data
There will be times when we need to share your Personal Information with third parties. We will only disclose your Personal Information to:
- Third-party service providers and collaborators who, for example, support the delivery of or provide functionality on the Services,
- Regulators, law enforcement bodies, government agencies, courts or other third parties where we think it is necessary to comply with applicable laws or regulations. Where possible and appropriate, we will notify you of this type of disclosure;
- Other people where we have your consent, including as part of educational research projects.
International Data Transfers
We do not send data from the United States to foreign countries. For international users, we do send data from other countries to our servers in the United States.
For individuals in the European Economic Area (EEA), this means that your data may be transferred outside of the EEA. Where your Personal Information is transferred outside the EEA, it will only be transferred to the United States.
Security
The security of your Personal Information is very important to us. We use commercially reasonable administrative, technical, and organizational safeguards designed to protect Personal Information. These safeguards may include encryption in transit, encryption at rest, access controls, least-privilege access practices, authentication protections, monitoring, and other measures designed to protect against unauthorized access, disclosure, alteration, or destruction of Personal Information.
Retention
The length of time we keep your Personal Information depends on what it is and whether we have an ongoing need to retain it (for example, to provide you with a service you’ve requested, as part of a long-term research study, or to comply with applicable legal, tax or accounting requirements).
We’ll retain your personal data for as long as we have a relationship with you and for a period of time afterward where we have an ongoing need to retain it, in accordance with our data retention policies and practices. Following that period, we’ll make sure it’s deleted or anonymized. We will endeavor to keep your Personal Information for the minimum period possible.
Student Data Deletion
Upon written request from a school, district, or authorized educational institution, Curio will delete applicable student data under that institution’s control within 30 days, unless retention is required by law, necessary for security, legal, or compliance purposes, otherwise authorized by the school, district, parent, or guardian as permitted by applicable law, or the data is being retained as part of a study or research project that was previously authorized by the school, district, or authorized educational institution. In that case, Curio will delete the applicable student data as soon as the study or research project is completed, unless continued retention is legally required or otherwise authorized.
Unauthorized Disclosure of Student Information
In the event Curio confirms an unauthorized disclosure of student personal information, Curio will notify the applicable educational institution promptly and without unreasonable delay, consistent with applicable law, contractual obligations, and the needs of any investigation, remediation, or security response.
Your Rights
It’s your Personal Information and you have certain rights relating to it. When it comes to marketing communications, you can ask us to not send you these at any time by following the unsubscribe instructions in our marketing communications, you can also email us directly at info@curioxr.org. You also have rights to:
- know what personal data we hold about you, and to make sure it’s correct and up to date;
- request a copy of your personal data, or ask us to restrict processing of your personal data or delete it; and
- object to our continued processing of your personal data.
You can exercise these rights at any time by making a request by emailing us directly at info@curioxr.org. If you are not happy with how we are managing your Personal Information, please let us know by getting in touch with us at info@curioxr.org. We will review and investigate your complaint and do our best to get back to you in a reasonable time. You can also complain to your local data protection authority. They will be able to advise you on how to submit a complaint.
Children's Privacy
Curio is only designed for users age 13 and older.
Student Surveys
Curio does not conduct student surveys directly. Any student surveys, consent processes, or survey governance are handled by the school or district, in accordance with its own policies and applicable law.
How to Contact Us
If you have any questions about this Privacy Policy, please contact us at info@curioxr.org.