The privacy record
Privacy on the record.
Curtis is local-first. Your conversations, exports, and settings live in a data directory you control — on your machine or your own server. There is no Curtis account, no cloud database, and no analytics pipeline.
- data storage
- on your device or your self-hosted server
- accounts
- none — a single access password you set
- AI providers
- bring your own key — you choose who receives prompts
- we sell your data
- no — never
- ads / trackers
- none
What Curtis collects.
Nothing. The app runs on infrastructure you own or control. The web interface sets one session cookie so you stay signed in; it contains no identifiers beyond an expiry time. We do not run telemetry, analytics, or advertising of any kind.
Where your records live.
Conversations, exports, receipts, and settings are written to the data directory configured when Curtis is deployed. If you self-host — as this instance does — that directory is on your server. Deleting a record in the app removes it from storage.
AI providers (bring your own key).
Curtis does not operate AI models. When you send a prompt, Curtis relays the request — with the API key you configured — to the third-party AI provider you selected, such as Anthropic, OpenAI, or Google. That provider processes the request under its own privacy policy, and its handling of your prompts and keys is governed by your account and agreement with that provider. Curtis never routes your prompts anywhere you have not explicitly configured.
No sale of data.
We do not sell, rent, trade, or monetize your data in any form. There is no third-party data sharing beyond the AI relay described above.
Network security.
This instance is served over HTTPS through Cloudflare. Access to the app is gated by a password with automatic lockout after repeated failed attempts. Review the security of your own deployment if you host Curtis elsewhere.
Changes.
If this policy changes, the updated version will be published at this address with a revised date below. See also the terms of service and licenses.
Questions — [email protected] · Effective 2026-10-14