Privacy Policy

BeatLabs FZE LLC ("Beat Labs", "we", "our", or "us"), a company registered in Ajman Media City, United Arab Emirates, operates the Curb mobile application (the "App") and is the data controller responsible for your information. This Privacy Policy explains how we collect, use, and protect your information when you use the App.

1. Information We Collect

1.1 Account Information

When you sign in using Apple Sign In or Google Sign In, we receive:

• Your email address
• Your display name (if provided)
• A unique user identifier assigned by the authentication provider

We do not receive or store your password. Authentication is handled entirely by Apple or Google.

If you choose a public username so that other people can share subscriptions with you, that username is stored in our cloud database and is visible to other Curb users.

1.2 Subscription Data

The App allows you to manually enter information about your personal subscriptions, including:

• Subscription name, price, currency, and billing cycle
• Category, status, and renewal dates
• Optional notes

This data is stored locally on your device and, if you are signed in, synced to our cloud database (Google Firebase Firestore) to enable access across multiple devices.

1.3 Purchase Information

If you purchase Curb Pro (a one-time purchase), your payment is processed entirely by Apple (App Store) or Google (Google Play). We do not collect or store your payment method, credit card number, or billing address. We only receive confirmation of whether you have purchased Curb Pro.

1.4 Push Notification Tokens

If you allow notifications, Firebase Cloud Messaging assigns your device a push token, which we store so that we can notify you when someone shares a subscription with you. Renewal reminders are scheduled locally on your device and do not use this token.

1.5 API Keys and Audit Log

If you create an API key to use Curb's optional read-only public API, we store the key and its name under your account, together with an audit log of the requests made with it (date and time, endpoint, and result). Audit log entries are kept for 90 days for security and abuse prevention.

1.6 Crash and Diagnostic Data

The App uses Google Firebase Crashlytics to collect crash reports and basic diagnostics — such as crash stack traces, device model, operating-system version, and a Crashlytics installation identifier — so that we can detect and fix stability problems. This data is used solely to improve the reliability of the App. Crash reporting is enabled by default and the App does not currently offer an in-app option to turn it off.

We do not use advertising trackers or marketing analytics, and we do not sell your information or use it for advertising. This website uses no analytics or marketing scripts.

2. How We Use Your Information

We use the information we collect solely to:

• Provide and maintain the App's functionality
• Sync your subscription data across your devices
• Manage your Curb Pro purchase status
• Notify you when someone shares a subscription with you
• Operate and secure the optional public API
• Send you local push notifications about upcoming renewals (only if you enable notifications)
• Diagnose crashes and improve the App's stability and performance

We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes.

3. Data Storage and Security

• Local storage: Your subscription data is stored on your device using the operating system's secure database.
• Cloud storage: If signed in, your data is stored in Google Firebase Firestore, hosted in secure data centers with encryption at rest and in transit.
• Authentication tokens: Managed by Firebase Authentication with industry-standard security practices.

We implement appropriate technical and organizational measures to protect your data. However, no method of electronic storage is 100% secure.

4. Data Retention

• Your data is retained as long as your account is active.
• When you delete a synced item, we keep a small deletion marker (a "tombstone" with the item identifier and the deletion date) for up to 180 days, so that your other devices do not restore it.
• API audit log entries are kept for 90 days.
• If you delete your account through the App, all associated cloud data (subscriptions, profiles, username, API keys, and audit log) is permanently deleted.
• Local data on your device is removed when you uninstall the App.

5. Your Rights

You have the right to:

• Access your data at any time through the App
• Export your data in JSON or CSV format using the App's export feature
• Delete your account and all associated data through the App's Settings
• Opt out of cloud sync by using the App without signing in

6. Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

7. Third-Party Services

The App uses the following third-party services:

• Firebase Authentication (Google LLC) — for user sign-in
• Firebase Firestore (Google LLC) — for cloud data storage
• Firebase Cloud Messaging (Google LLC) — for push notifications about shared subscriptions
• Firebase Crashlytics (Google LLC) — for crash reporting and stability diagnostics
• Apple Sign In (Apple Inc.) — for authentication on iOS
• Frankfurter API — for currency exchange rates (no personal data is sent)
• Apple App Store / Google Play Billing (Apple Inc. / Google LLC) — for processing the one-time Curb Pro purchase
• Google Fonts (Google LLC) — for the web fonts on this website; Google receives your IP address and browser information when the font files load

Each service is governed by its own privacy policy.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at: