Curio Time – Terms & Privacy Policy

1. Who We Are

Curio Time is operated internationally by Curio Time OÜ.

2. Information We Collect

We collect only the information necessary to provide, secure and operate our Services.

• Account information: name, email address, password, organization and user role.
• User and work-related data: time registrations, attendance records, work logs, shift information, absence records, holiday requests, sick-leave requests and other information entered or submitted by users.
• GPS location data: when GPS features are enabled, we may record the user’s location at the moment of clocking in or clocking out. We do not use continuous GPS tracking or background location monitoring.
• Technical data: IP address, browser type, app version, device information and basic technical logs required for security, support and system operation.
• Payment data: if you are a subscriber or customer responsible for billing, payment-related data may be processed by our payment providers. Curio Time does not store full payment card details.
• Cookies and website analytics: our websites may use cookies and analytics tools to improve functionality, measure website performance and understand general usage.

3. How We Use Information

We use information to:

• Provide and operate the Services.
• Authenticate users and protect accounts.
• Record working time, attendance, shifts, absences and requests.
• Verify clock-in and clock-out location when GPS is enabled.
• Enable reporting, payroll preparation and integrations with external systems.
• Provide customer support and communicate service updates.
• Maintain security, prevent misuse and improve reliability.
• Comply with legal, accounting and employment-related obligations.

We do not sell personal data to third parties.

4. Sharing of Information

We may share data only when necessary:

• With your employer or organization, if you use Curio Time as part of a workplace account.
• With trusted service providers who help us operate the Services, such as hosting, infrastructure, support, analytics, email delivery and payment processing providers.
• With payroll, accounting or other third-party systems when enabled by your organization.
• When required by law, regulation or legal process, or to protect our rights, users, systems or services.

Service providers may only process data according to our instructions and for the purposes described in these Terms.

5. GPS and Location Data

Curio Time may use GPS location data to verify where a user is located when clocking in or clocking out.

• Location data is only recorded at the time of the clock-in or clock-out action.
• Curio Time does not continuously track users.
• Curio Time does not monitor user movement in the background.
• Location data is not used for advertising or tracking across apps or websites.

6. Security and Data Storage

We use reasonable technical and organizational measures to protect personal data.

• Data is encrypted in transit using secure connections where applicable.
• Access to systems is restricted to authorized users.
• No system can be guaranteed to be completely secure.
• Data may be processed in the EU/EEA or in other countries where trusted service providers operate, subject to appropriate safeguards and applicable data protection laws, including GDPR where applicable.

7. Cookies and Analytics

Our websites may use cookies and analytics tools to improve the user experience, understand website usage and maintain service performance.

You can disable cookies in your browser settings, but some website features may not work correctly.

Analytics data is used to improve the Services and is not used to sell personal information.

8. Your Rights

Depending on your location and applicable law, including GDPR, you may have the right to:

• Access a copy of your personal data.
• Request correction of inaccurate data.
• Request deletion of personal data.
• Restrict or object to certain processing.
• Withdraw consent where processing is based on consent.
• Request export of your data where technically feasible.

To exercise your rights, contact us at info@curiotime.is.

Some workplace-related records may be controlled by your employer or organization. In such cases, we may direct your request to the relevant organization.

9. Account Deletion and Data Retention

If an account is closed, we remove or deactivate personal data where possible.

Some records may need to be retained for legal, accounting, payroll, employment, audit or compliance purposes. This may include attendance records, time registrations, GPS clock-in/out logs, payroll-related data and historical activity records.

Retention periods may depend on the laws and requirements that apply to the relevant employer, organization or country.

10. Third-Party Services

Curio Time may integrate with third-party services such as payroll, accounting, hosting, analytics, authentication or payment systems.

When you or your organization use third-party services with Curio Time, the privacy policies and terms of those third-party providers may also apply.

We are not responsible for the privacy practices of third-party services outside our control.

11. Children

Curio Time is intended for workplace and business use. The Services are not directed at children.

12. Updates to These Terms

We may update these Terms from time to time.

If changes are material, we will notify users by email, within the app or through the website before the changes take effect, where required.

Continued use of the Services after the effective date of updated Terms means that you accept the updated Terms.

13. Contact

Copyright © 2015–2026 Curio Time OÜ. All rights reserved.