Last updated 9 October 2026
Privacy policy
The Kuriosa app collects no data about you. This page explains what that means, and what applies to this website and to email.
In short
- The Kuriosa app has no account, no server, no analytics, no advertising, and no crash reporting of its own.
- Your collection is stored encrypted on your iPhone, or in a folder you choose. We never receive it and cannot read it.
- The app's one connection to the internet loads the public exchange rates of the European Central Bank. Nothing about you or your collection is sent with it, and you can turn it off.
- This website sets no cookies. It counts visits with Cloudflare Web Analytics, which shows us only totals and does not keep your internet address.
Who is responsible
Kuriosa is made by an independent developer. For any question about privacy, write to support@kuriosa.app.
The app
Your collection
Everything you enter in Kuriosa, including photos, documents, notes, and the history of changes, is stored on your device in encrypted form. It opens only on your device or with your recovery key, which only you have.
When you choose a folder for your library, for example in iCloud Drive, or save a backup, the encrypted files are stored where you choose. If that is iCloud Drive, Apple stores them under your Apple Account and Apple's privacy policy; the files are encrypted, so neither Apple nor we can read them. We have no server, and we cannot see, access, or restore your collection.
Photos and documents
Location, camera, author, and other hidden details are removed from every photo and document when you add it. Removing the background of a photo happens on your iPhone.
Permissions
Kuriosa asks for access only when you use a feature that needs it: the camera to take photos, scan documents, and read labels, codes, and your recovery key; your photo library to choose photos; notifications for the reminders you set; and Face ID for the app lock. Everything the camera reads is processed on your iPhone.
Exchange rates
When your collection has prices in more than one currency and Convert totals is on, Kuriosa downloads the euro reference rates that the European Central Bank publishes for everyone, at most every 12 hours. The request contains nothing about you or your collection. Like every request on the internet, it reaches the bank's server from your device's internet address. You can turn it off in Settings › Display › Convert totals.
Links
Links you store, for example to a shop, are opened in Safari only when you tap them. Kuriosa never loads them itself.
Purchases
Purchases are made through Apple's App Store. Apple processes the payment; we do not receive your name or your payment details.
Crash reports and statistics
Kuriosa contains no code for analytics or crash reporting. If you have chosen in your iPhone's settings to share analytics with app developers, Apple may give us anonymous crash reports and usage figures, as Apple describes in its own privacy information.
Files you share
PDF and CSV exports are not encrypted, so that others can read them. Whom you send them to is up to you. Kuriosa deletes its own copy when you close the share screen.
This website
kuriosa.app is hosted by Cloudflare, which delivers the pages and protects the site against attacks. To do so, Cloudflare processes technical data such as your internet address, your browser, and the page you request. We do not receive these data; we see only the visit totals described below. Cloudflare's privacy policy applies to this processing.
Visit statistics
To know how many people visit the website, we use Cloudflare Web Analytics. When a page opens, a small script from Cloudflare records which page it is, the page you came from, how quickly it loaded, and your type of browser, system, and device; Cloudflare adds the country from your internet address. Cloudflare Web Analytics sets no cookies, stores nothing on your device, does not recognize you on a later visit, and does not keep your internet address. We see only totals, such as visits per page or per country, never a single person.
Cookies and scripts
The website sets no cookies and loads no fonts or pictures from other servers. Apart from Cloudflare's statistics script, it uses only scripts of its own: they choose the language of the home page on your first visit, from your browser's language, close the menus, and filter the help topics. They store nothing and send nothing.
When you write to support@kuriosa.app, we use your address and your message only to answer you, and delete them when they are no longer needed. Mail to this address is forwarded to our mailbox by Cloudflare's email routing.
Please never send us your recovery key, a photo of your emergency sheet, or a password. We will never ask for them.
Your rights
The app gives us no data about you, so there is nothing about you on our side to see, correct, or delete; your collection stays under your control in the app. About an email you sent us, you can ask us at any time what we keep and to delete it. You can also contact the data protection authority of your country.
Changes
If this policy changes, the new version is published on this page with its date.