Legal

Privacy Policy

Effective October 22, 2026. Last updated October 22, 2026.

Cube & Curve LLC (“Cube & Curve,” “we,” “us”) is an Illinois limited liability company formed in 2026. This policy describes how personal information is handled when you use our software or visit cubeandcurve.com (the “Services”). Anyone can open this page. It is ordinary HTML, not a PDF, and it does not ask you to sign in.

Our Terms govern use of the Services. A separate page explains how to delete an account.

Who we are

The developer and operator of the Services is Cube & Curve LLC.

Cube & Curve LLC
Chicago, IL
Email: hello@cubeandcurve.com

Your organization and our role

If you use the Services through a customer organization, that organization generally decides why its records are processed and is the controller of that personal information (and, where the California Consumer Privacy Act applies, the business). Cube & Curve LLC processes that information as the organization’s service provider, on the organization’s instructions, to provide the Services. For messages you send to hello@cubeandcurve.com, Cube & Curve LLC is the controller. This website does not have user accounts.

Information we collect

We collect personal information in these categories:

Account and identity information from your work sign-in provider, used to recognize you and your organization.
Information your organization or you enter, such as employee, HR, time, project, and business records, which may include contact details and other personal information. We use this to provide the features your organization uses.
Device and technical information, including device identifiers for notifications, IP address, and logs. We use this to run, secure, and troubleshoot the Services, and to deliver notifications you or your organization allow.
Location, approximate or precise, only if you choose to use a location feature. You can turn location off in your device settings.

If you email us, we receive the address you write from and the message, so we can reply. This website does not ask you to create an account. The site host may keep standard connection logs, such as IP address, browser type, date, and the page requested.

We do not sell personal information. We do not use it for advertising, and we do not track you across other companies’ apps and websites. We do not collect biometric identifiers. See “Biometric information.” We do not receive full payment card numbers. If a store processes a purchase, the store handles the payment and tells us whether it is active.

How we use information

We use personal information to provide, secure, and support the Services; to recognize an account; to deliver notifications; to reply to you; to follow your organization’s instructions; and to comply with law. We do not use personal information to determine creditworthiness or for lending.

Where information is stored

We store personal information in the United States. Your organization may also keep copies under its own control.

Service providers

We use service providers in these categories. Each receives only what it needs for that role. When a provider processes personal information for us, we require protection equal to the safeguards in this policy, or stronger, and use limited to the service we asked for.

Cloud hosting and infrastructure, to store and transmit information in the United States and to protect the Services.
Authentication, through your organization’s sign-in provider, to confirm your work account.
Push notifications, which receive a device token and the notification, to deliver it.
AI processing for optional features. If you use an optional assistant, the information you submit for that request may be sent to a provider that returns the response.
Mapping. If you use a map, the mapping service may receive your IP address and the area shown, in order to display the map.
Accounting integrations you choose to connect. If your organization connects one, the business records needed for that connection are shared with it.

We do not use third-party advertising, analytics, or crash-reporting services to track people across apps.

We share personal information only as follows:

Your organization, whose administrators can see the records it controls.
Service providers in the categories above, for the purpose described there.
App stores, when you download an app or the store processes a purchase. The store’s terms govern distribution, billing, and refunds.
Legal and safety. We may disclose information if the law requires it, or if we reasonably believe it is needed to protect the rights, safety, and integrity of an organization, its people, the public, or Cube & Curve.
A business transfer. If Cube & Curve LLC is involved in a merger, acquisition, financing, or sale of assets, information may transfer as part of that transaction. We will give notice if the law requires it.

We do not sell personal information for money. We do not share it for advertising or with data brokers.

Google user data

We do not access Google user data through Google APIs. If we ever receive information from Google APIs, our use and transfer of that information will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies and tracking

This website does not use analytics cookies or advertising cookies, and it does not use tracking pixels. The apps do not track you across apps and websites owned by other companies, and they do not use advertising identifiers. We do not request permission to track. If that ever changes, we will update this policy first and, on iOS, ask through Apple’s App Tracking Transparency prompt before any tracking starts.

You can refuse location and notifications in the device settings. Refusing one of those permissions turns off the feature that needs it. It does not by itself delete records your organization already holds.

Work-account access is authorized by your organization. The organization can withdraw that access. You can turn off location and notifications in the device settings. You can also email hello@cubeandcurve.com with the subject “Withdraw consent.” Where your organization is the controller, we follow its instructions. Revoking consent does not affect processing that was lawful before you revoked it.

Data retention

We keep personal information for as long as needed to provide the Services, or as the customer organization directs, and then we delete or anonymize it, except where the law requires us to keep it. Backups age out on a rolling schedule. A deleted record may remain in a backup until that backup ages out, and we do not use it for ordinary operations.

Account and data deletion

You can delete your account, and the personal information associated with it, without an account on this website.

In the app. Use the deletion control, for example in account settings.
On the web. Follow the account deletion page. It does not require a login. A store can link to that page.
By email. Email hello@cubeandcurve.com with the subject “Delete my account.” Include your organization and the work email on the account.

Your organization can also remove your access. We aim to respond within 30 days. Because your organization generally controls its records, we may ask the organization to confirm what to delete.

We delete the account and the personal information associated with it, except records the organization directs us to keep, information we must keep for a legal reason, and copies in backups until those backups age out. If we cannot complete a request, we explain why. You will not be treated differently for asking.

Where the GDPR or UK GDPR applies to an organization’s records, the organization is generally the controller and Cube & Curve LLC is the processor. Requests about those records should go to the organization. We assist the organization. You may lodge a complaint with a supervisory authority. The Services are not directed to children under 16 in the European Economic Area.

For information we control, including email you send us, you may ask us to give you access, correct it, delete it, restrict it, or provide a copy, and you may object where the law allows. Email the address above. We respond within 30 days, or within the time the law requires. We rely on a contract, consent, a legal obligation, or legitimate interests in running and securing the Services, balanced against your rights. You may withdraw consent where processing is based on consent.

California privacy rights

This section uses the California Consumer Privacy Act, as amended by the California Privacy Rights Act. For personal information an organization controls, that organization is the business and Cube & Curve is its service provider. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

The categories we process are those in “Information we collect”: identifiers, professional and employment information an organization enters, commercial or business records it enters, and device or internet information such as a notification token, IP address, and logs. We do not use sensitive personal information to infer characteristics about you, and we do not use it beyond what is needed to provide the Services.

You, or an authorized agent with signed permission, may ask to know, delete, or correct personal information, and may ask us to limit the use of sensitive personal information. We will not discriminate against you for asking. Email hello@cubeandcurve.com. Where your organization is the business, we direct the request to the organization or act on its instruction.

Biometric information

We do not collect biometric identifiers or biometric information as those terms are used in the Illinois Biometric Information Privacy Act. That includes fingerprints, voiceprints, scans of hand or face geometry, and retina or iris scans. We do not receive them from a device or from a platform.

If you unlock a device with a face, fingerprint, or similar feature, that check stays on the device. Cube & Curve does not receive the biometric template. We will not start collecting biometric identifiers unless this policy is updated first to state the purpose and the retention schedule, and unless we obtain any written release the law requires.

Children’s privacy

The Services are not directed to children under 13, or under 16 in the European Economic Area. We do not knowingly collect personal information from children under 13, consistent with the Children’s Online Privacy Protection Act. If you believe we have, email hello@cubeandcurve.com. If we learn that we have, we will delete it.

International transfers

We process personal information in the United States. If you use the Services from another country, your information may be transferred to and processed in the United States, where privacy laws may differ from the laws where you live.

Where the law requires a safeguard for a transfer from the European Economic Area, the United Kingdom, or Switzerland, we use an approved mechanism, such as standard contractual clauses.

Security

We use administrative and technical safeguards designed to protect personal information. Access is limited to people who need it to provide the Services. No method of storage or transmission is completely secure. If a breach of personal information that we hold occurs, we will notify affected people and organizations as required by the Illinois Personal Information Protection Act and any other breach-notification law that applies.

Changes to this policy

We may update this policy. We will change the “Last updated” date and post the new version on this page. If a change materially expands how we use personal information, we will give further notice when that is reasonable or required. Where the law requires consent for a new use, we will ask for it.

Governing law

This policy is governed by the laws of the State of Illinois, United States, without regard to conflict-of-law rules. Disputes are subject to the venue described in the Terms, in Cook County, Illinois, except where a privacy law where you live applies and cannot be waived, including the rights described above for California, the European Economic Area, the United Kingdom, and Switzerland.

Contact

Privacy requests, including deletion, access, correction, and withdrawal of consent, go to: