Privacy Policy
Last Updated: May 15, 2026 PRIME MERIDIAN AI HK LIMITED ("Company," "we," "us," or "our") operates Curabay, a lightweight mobile application designed to help users keep personal skin photo records, notes, visual comparisons, and optional PDF exports. This Privacy Policy explains how we collect, use, store, protect, and delete information when you use our app and related services. 1 Product Positioning and Important Notice Curabay is designed for personal record keeping only. The app does not provide medical advice, diagnosis, treatment recommendations, risk scores, healing assessments, or emergency services. The photos, notes, and exported PDFs created in the app may be sensitive. Please review this Privacy Policy carefully before using the app. 2 No Account Required for Basic Features You do not need to create an account, enter an email address, or log in to use the app's basic local record-keeping features. Basic features may include taking or importing photos, saving notes, viewing timelines, comparing photos, and exporting a personal PDF record. If we later offer optional cloud backup, multi-device sync, subscription management, or account-based restore features, account sign-in may be required only for those optional features. 3 Information We May Process Depending on how you use the app, the following types of information may be processed:
● Photos you take or import into the app. ● Body area labels selected by you, such as arm, foot, leg, hand, abdomen, or back. ● Notes you write in the app. ● Record dates, timestamps, and app-generated timeline information. ● Photo comparison settings and export preferences. ● PDF files generated by you through the app. ● Device-level permissions, such as camera and photo library access, when you choose to grant them.
For the first version of the app, we recommend that photos, notes, and records be stored locally on your device by default and not uploaded to our servers unless a separate optional backup feature is clearly enabled by the user. 4 Local-First Storage By default, your records are stored on your device. We do not require you to upload your photos or notes to our servers to use the app's basic features. If you delete the app, reset your device, lose your device, or change devices without creating your own backup, your locally stored records may be lost. The app may provide export options, such as PDF export, so you can save a personal copy of selected records. 5 Sensitivity of Photos and Skin Records Skin and wound-related photos may reveal sensitive information about your body, health, daily care, family members, or living environment. You should only upload or save photos that you are comfortable storing on your device. If you take or save photos of another person, you are responsible for obtaining any necessary permission from that person or their parent/legal guardian. 6 PDF Export The app may allow you to export a personal PDF record. A PDF may include photos, notes, dates, body area labels, comparison pages, and neutral trend summaries based on records saved by you. The PDF export is created at your request. You decide whether to preview, save, print, or share the PDF through your device's sharing options. We do not require you to email the PDF to us or to any third party. Please review the PDF before sharing it. Exported PDFs may contain sensitive photos and personal notes. Once you save or share a PDF outside the app, we may not be able to control how that PDF is stored, copied, forwarded, or used by others. 7 Camera, Photo Library, and File Permissions The app may request access to your camera so you can take new photos. The app may request access to your photo library so you can import existing photos or save exported files. You can manage app permissions through your device settings. If you deny camera or photo access, certain features may not work. 8 How We Use Information We use information processed in the app to provide and improve user-facing features, including:
● Saving personal skin photo records. ● Organizing records by body area and date. ● Showing timelines and side-by-side comparisons. ● Generating personal PDF exports at your request. ● Maintaining app functionality, security, and troubleshooting.
We do not use your locally stored photos or notes for advertising targeting. We do not sell your photos or personal notes. 9 Not Used for AI Training or Advertising Targeting Unless we provide a clear, separate notice and obtain any required consent, we do not use your photos, notes, or exported PDFs to train artificial intelligence models. We do not use your skin photos or notes for cross-app advertising tracking. 10 Third-Party Services The app may use limited third-party services to operate or improve the app, such as app store distribution, crash reporting, payment processing, or analytics. We recommend using privacy-minimized configurations and avoiding advertising SDKs in the first version. If third-party tools are used, the privacy policy should identify the categories of service providers and the types of data they may process. Third-party platforms, such as Apple App Store, Google Play, Apple iCloud, Google Drive, or your device's sharing tools, may process information according to their own privacy policies when you choose to use those services. 11 Optional Backup or Synchronization (If Offered in the Future) The first version of the app is designed to be local-first. If we later offer optional cloud backup, restore, or synchronization, we will explain what data will be uploaded, how it is protected, whether an account is required, how long it is stored, and how you can delete it. Cloud backup or synchronization should be off by default unless the user clearly chooses to enable it. 12 Data Sharing We do not sell your personal information. We do not share your locally stored photos or notes with third parties for advertising purposes. We may share limited information only in the following situations:
● With service providers that help operate the app, subject to appropriate contractual restrictions. ● If required by law, legal process, or to protect rights, safety, and security. ● In connection with a business transfer, such as a merger, acquisition, or sale of assets, subject to applicable law. ● With your direction, such as when you choose to share an exported PDF through your device.
13 Data Security We use reasonable administrative, technical, and organizational safeguards designed to protect information processed by the app. However, no method of storage or transmission is completely secure. For local records, device security is important. We recommend that you use a strong device passcode, biometric lock, and device-level encryption where available. 14 Data Retention Locally stored records remain on your device until you delete them, delete the app, or erase your device. Exported PDFs remain wherever you choose to save or share them. If optional account-based backup is later introduced, the privacy policy should specify cloud retention periods and account deletion procedures. 15 Data Deletion You may delete individual records within the app if the app provides that feature. You may also delete the app from your device, which may remove locally stored app data depending on your device operating system and backup settings. If you exported a PDF or shared data outside the app, you are responsible for deleting those copies from the places where you saved or shared them. If account-based features are introduced, users should be able to request account deletion and deletion of cloud-stored records by contacting [Privacy Contact Email] or through an in-app deletion flow. 16 Children's Privacy The app is not intended for children under 13. We do not knowingly collect personal information from children under 13. If a parent or guardian believes that a child under 13 has provided personal information through the app, please contact us at support@curabay.com. If we learn that we have collected personal information from a child under 13 without appropriate consent, we will take reasonable steps to delete it. If users save photos or notes about a child, they should do so only as a parent/legal guardian or with appropriate permission. 17 U.S. State Privacy Rights Depending on where you live and the laws that apply, you may have certain privacy rights, such as the right to know, access, correct, delete, or obtain a copy of personal information, and the right to opt out of certain sharing or targeted advertising. Because the first version of the app is designed to store records locally by default, we may not be able to access or delete records stored only on your device. You can manage local records directly in the app or on your device. To submit a privacy request, contact us at support@curabay.com. 18 Health Breach Notification and Security Incidents If we maintain unsecured identifiable health-related information and a breach occurs, we will evaluate our obligations under applicable laws, which may include notifying affected users, regulators, and other parties where required. For a local-first version that does not upload photos or notes to our servers, many data risks remain under the user's device control, but any server-side or third-party processing should still be reviewed carefully. 19 International Users and Data Transfers This app is designed primarily for users in the United States. If you use the app outside the United States or if future cloud services are introduced, your information may be processed in locations where our service providers operate, subject to applicable law. 20 Updates to This Privacy Policy We may update this Privacy Policy from time to time. The updated version will be indicated by an updated "Last Updated" date. If we make material changes, we may provide additional notice within the app or through other appropriate means. 21 Contact Us If you have questions about this Privacy Policy or privacy requests, please contact us: Company Name: PRIME MERIDIAN AI HK LIMITED Privacy Contact Email: support@curabay.com