Privacy Policy

This Privacy Policy explains how Curicat (Hong Kong) Technology Limited (registered address: Room 721A, 7/F, Star House, 3 Salisbury Road, Tsim Sha Tsui, Hong Kong; "the Company", "we", "us") collects, uses, retains, discloses and protects your personal data. We comply fully with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO").

1. Data we collect

1.1 Data you provide to us

• Account data: the email address, nickname and password (stored in encrypted form) you provide when registering;
• Transaction data: credit top-up and spending records, unlock orders, payment times, amounts, currencies and order statuses (full card details are processed directly by licensed third-party payment providers — we do not collect or store them);
• Support communications: information you provide and the content of communications when you contact us by email.

1.2 Data collected automatically

• Device model, operating system version and app version;
• IP address and language settings;
• Usage records: viewing and unlock history and operation logs, used to keep the Service running and improve the product.

2. How we collect data

We collect the above data when you register an account, make a purchase, contact support or use the app. We do not buy your personal data from third parties without your knowledge.

3. How we use data

We use your personal data only for the following purposes:

• creating and managing your account and providing video playback and content unlocking;
• processing payments, verifying transactions and handling refund requests;
• answering your enquiries and providing customer support;
• detecting, preventing and addressing fraud, piracy and breaches of the Terms of Service;
• analysing usage in aggregated, anonymous form to improve the product and content (never to identify you individually);
• complying with applicable laws and the requirements of regulators;
• sending you marketing related to the Service if you have explicitly opted in (see Section 6).

4. Retention

We keep your personal data only as long as necessary for the purposes it was collected:

• Account data: until you request account deletion;
• Transaction and payment records: kept for at least 7 years as required by Hong Kong tax rules under the Inland Revenue Ordinance;
• Support communications: for a reasonable period after the enquiry is closed;
• Technical logs: for a reasonable period (generally no more than 12 months).

Data exceeding its retention period is securely deleted or anonymised.

5. Disclosure and sharing

We do not sell your personal data. We disclose it only in these situations:

• Payment providers: transaction data is processed by licensed payment providers to handle payments and refunds;
• Service suppliers: suppliers of cloud storage, infrastructure and other technical services, who may process the data only to perform their services for us;
• Legal requirements: where required by applicable law, court order, or the lawful demands of regulators or law enforcement with jurisdiction;
• Business transfers: in a merger, acquisition or asset sale, your data may be transferred as part of that transaction; we will ensure the recipient remains bound by standards equivalent to this Policy.

6. Direct marketing

Under the PDPO, we will not use your personal data for direct marketing without your explicit consent. If you opt in and later change your mind, you may opt out free of charge at any time by emailing support@curicat.vip, and we will stop using your data for that purpose.

7. Cross-border transfers

Your data may be stored or processed on servers outside Hong Kong. In such cases we take contractual and other reasonable safeguards to ensure the data is protected in line with this Policy and the requirements of the PDPO.

8. Data security

We apply practicable technical and organisational measures to protect your personal data, including TLS encryption in transit, encrypted password storage and access controls. No internet transmission can be guaranteed as absolutely secure; if you discover any security issue, please contact us immediately.

9. Your rights

• Access: under sections 18 and 22 of the PDPO, you may request confirmation of whether we hold your personal data and obtain a copy;
• Correction: you may request correction of inaccurate personal data;
• Deletion: you may request deletion of your account and associated personal data (except records we must retain by law);
• Opt-out of direct marketing: you may refuse the use of your data for direct marketing at any time.

To exercise these rights, email support@curicat.vip. We will respond within a reasonable period (generally no more than 40 days); a reasonable fee may apply (we will inform you in advance if so).

10. Children's privacy

The Service is not directed at children under 16 and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Cookies and similar technologies

For details on how we use cookies and similar technologies, see our Cookie Policy.

12. Changes to this Policy

We may update this Policy from time to time. Updates will be published on this page with a revised "Last updated" date; material changes will be highlighted in the app or by other reasonable means.

13. Contact

For any questions, complaints or requests about this Policy or our handling of personal data, email support@curicat.vip. You also have the right to complain to the Hong Kong Office of the Privacy Commissioner for Personal Data about our privacy practices.