Privacy Policy
Effective date: October 22, 2026
Built with privacy in mind
Cura Well Plan was designed from the start to handle as little of your information as possible. In practice, that means:
- Most of Cura Well Plan needs no account and no name. Ask Cura, the guides, and the checklists work without signing in. Cura Check offers an optional account if you want to save your check results over time.
- We log the questions people ask, with no name, no account, and no identity attached. We review these anonymous logs in aggregate to run and improve Cura. Tim Hayden, who operates Cura Well Plan, can review the anonymous question log. Automated filters remove some identifiers, but they cannot catch everything, so do not include names or other identifying details in your questions.
- Information is transmitted over encrypted (TLS) connections and stored on managed cloud infrastructure with encryption at rest.
- We do not sell your data, and we do not share it for marketing. We do not share your questions with advertisers, pharmaceutical companies, health systems, or research partners.
What Cura Well Plan collects
We collect the questions you ask. Questions are logged with no name, no account, and no identity attached.
If you fill in a form on Cura, you provide the information on that form, and we use it only for what that form is for. For example, Bill Help details go to the independent professional who helps with your bill. The first-visit checklist form sends you the checklist. A waiting-results guide form sends you the guide. The blog digest signup sends you the digest.
We do not collect anything beyond this. We do not sell your data, and we do not share it for marketing.
Please do not include names, dates of birth, addresses, insurance member IDs, medical record numbers, or payment details in questions or uploads. Automated redaction cannot reliably remove every identifier from free text.
What Cura Well Plan keeps
We keep the text of questions and answers, with automated redaction of some identifiers. These logs are not tied to a name, an account, or an identity. We review them in aggregate to run and improve Cura, and Tim Hayden, who operates Cura Well Plan, can review the anonymous question log. Free text may still contain details you typed, so do not include identifying information.
If you gave us your email address for one of the optional emails described below, we keep it only to send those emails. We do not keep logs longer than needed to run and improve the service.
To have your email address and your questions removed, email hello@curawellplan.com. We aim to respond within 30 days.
Cura Check accounts (optional)
Cura Check is the one part of Cura that offers an account, and it is optional. A Cura Check account stores only your email address, the values you confirm, and the reports you generate, so you can track your results over time. Everything else on Cura works without an account. To delete your account and saved reports, email hello@curawellplan.com.
Documents and photos you upload
If you upload a document or photo, we use it only to generate your answer in that session. The file is then discarded. We do not store it. Text from an upload can appear in the anonymous question log described above, so remove identifying details before submitting.
Emails you ask for (optional)
Any email you receive from us is one you asked for by providing your email address. The optional emails are the weekly brief, the first-visit checklist, waiting-results guides, and the blog digest. We use your email address only to send what you asked for, and for nothing else.
You can stop any of these emails at any time. Click the unsubscribe link at the bottom of any email, or email hello@curawellplan.com and ask to be removed.
Unsubscribing stops the emails. To also have your email address and your questions deleted, email hello@curawellplan.com.
Service providers that process data for us
Cura Well Plan relies on a small number of providers to operate: cloud hosting and database, AI model providers, email delivery, and Stripe for donation payments. They process the limited information described above only to provide their service, under applicable contractual, security, and privacy terms.
Donations
If you choose to donate on our Support page, your payment is processed by Stripe. Cura Well Plan does not see or store your card details. Stripe processes your payment information under its own terms and privacy policy.
Security of your information
Information is transmitted over encrypted (TLS) connections and stored on managed cloud infrastructure with encryption at rest. Access to production systems is limited to the people who need it to operate the service.
No method of transmission or storage is completely secure. We design the service to hold as little of your information as possible, which is itself strong protection, but we cannot guarantee absolute security.
About HIPAA and health-data laws
People sometimes ask whether Cura Well Plan is "HIPAA compliant." We want to be straightforward about this rather than use a label that can be misleading.
Cura Well Plan operates as a standalone educational service, not as your healthcare provider or health plan. HIPAA generally governs healthcare providers, health plans, healthcare clearinghouses, and the vendors they contract with to handle protected health information. Using Cura on your own does not establish HIPAA coverage or a healthcare-provider relationship. Legal obligations depend on the actual relationship and information processing, not a website label.
We do not claim HIPAA certification or that these protections are equivalent to, or more restrictive than, HIPAA. Consumer privacy and health-data requirements may apply separately. Our educational disclaimer does not remove those obligations.
Consumer privacy and health-data laws may apply depending on your location and how information is processed. This policy describes our practices, not a certification of legal compliance.
Children and age requirements
Cura Well Plan is intended for adults 18 and older. It is not directed to children, and we do not knowingly collect information from anyone under 13. If you believe a child has provided us an email address, contact us at hello@curawellplan.com and we will delete it.
Your rights and choices
You can ask us to delete your email address and your questions at any time by emailing hello@curawellplan.com. Because question logs are not tied to a name or contact details, we may need extra context to find a particular entry. Please do not send unnecessary medical details when making a request.
We honor access, correction, deletion, and opt-out requests regardless of where you live. We do not sell your data and do not use it for targeted advertising, and we will not discriminate against you for exercising your rights.
We aim to respond within 30 days, or within the period required by applicable law.
How to contact us
Questions about this policy, or about anything Cura Well Plan does with information, can go to hello@curawellplan.com.
Changes to this policy
Cura Well Plan may update this privacy policy from time to time. Material changes will be reflected with an updated effective date at the top of this page.