How we handle your information
This page is maintained by Cura Well Plan to answer common security and privacy questions about the app. It describes controls that are in place today. It is not a certification or a substitute for our Privacy and Terms.
Last updated October 22, 2026
What we build, and what we don't do
Cura Well Plan is an educational health information hub with an AI assistant. It provides plain-language explanations and suggested questions for your doctor. It is not a medical device, not a diagnosis, and not a replacement for professional care.
We do not sell your data, and we do not share your questions for marketing.
Accounts
Most of Cura needs no account and no sign-in. The one exception is Cura Check, which offers an optional account so you can save your check results over time.
Data storage & access controls
We store anonymous question logs with no name, no account, and no identity attached. Automated filters remove some identifiers, but free text may still identify you in context, so do not type identifying details. We review these logs in aggregate to run and improve Cura, and Tim Hayden, who operates Cura Well Plan, can review the anonymous question log. If you gave us your email address for an optional email, we store it only to send what you asked for. Access to these systems is limited to the people who need it to operate the service. See the Privacy Policy for details on retention and deletion.
Encryption in transit
The site is served over HTTPS. Requests to our AI provider and email provider are made over TLS.
Subprocessors we rely on
We use a small number of vetted providers to run the service:
- Lovable Cloud, application hosting, database, authentication, and email delivery infrastructure.
- Anthropic (Claude), the AI model that generates answers and intake summaries. Prompt content is sent to Anthropic to produce a response.
- Lovable AI and Google Gemini, AI processing for document readings and topic classification.
- Stripe, payment processing for donations on our Support page. Cura does not see or store your card details.
- Google Search Console, read-only search analytics for the marketing site.
Email you receive from us
Any email you receive from us is one you asked for by providing your email address. The optional emails are the weekly brief, the first-visit checklist, waiting-results guides, and the blog digest. Every email includes an unsubscribe link at the bottom. Click it to stop at any time.
Reporting a security concern
If you think you have found a security issue, or you want to report something that looks wrong with how your information is handled, email us at hello@curawellplan.com. Please avoid sharing sensitive personal health details in the initial report.
For a medical emergency, call 911 or go to the nearest emergency room. Do not use email or the AI assistant for urgent care.