Terms of Service

Last updated: July 2026 · Version: 1.2

Curio provides encrypted email for regulated mental-health practitioners in Canada. These Terms of Service (“Terms”) govern your use of the Curio service. Please read them carefully. By creating an account and accepting these Terms during onboarding, you agree to be bound by them. If you do not agree, do not use the service.

These Terms work alongside two companion documents: our Privacy Policy (how we handle personal information) and our Electronic Service Provider Agreement (how we handle personal health information on your behalf). Where these Terms and either companion document address the same subject, the companion document governs for that subject.

1. Who We Are

Curio is operated by Gabriel Borges (sole proprietor) (“Curio”, “we”, “us”, “our”). You can reach us at hi@curio.health, or at the purpose-specific addresses in Section 19.

2. What Curio Does

Curio is an encrypted-email service for Canadian therapists who use Google Workspace:

  • Automatic encryption. Every outbound email you send through Curio is encrypted. Curio first checks whether the recipient’s mail server supports encrypted transport (TLS); the large majority do, in which case the message is delivered over an encrypted connection. If a recipient’s server does not support TLS, Curio routes the message through a secure portal where the recipient reads it.
  • Canadian audit trail. Every encrypted send is recorded in a Canadian audit log — recipient domain, encryption method, timestamp, and delivery outcome.
  • Secure storage and a client portal, to help you communicate with your clients in a way that supports your privacy-law obligations.

We may improve, change, or add features over time.

What Curio does not do. Curio is infrastructure, not a clinical or compliance product. Curio does not diagnose or treat any condition, does not provide legal or compliance advice, does not manage client consent for you, and does not replace your professional obligations as a health-information custodian. Using Curio does not, on its own, make your practice compliant with PHIPA, HIA, PIPA, or PIPEDA — email encryption is one part of your obligations.

3. Eligibility and Your Account

  1. To use Curio, you must be a regulated mental-health practitioner licensed to practise in a Canadian province or territory, and able to enter into a binding contract.
  2. You agree to provide accurate account information and to keep it current.
  3. Multi-factor authentication (MFA) is required on the Google account you sign in with. If you disable MFA, we may suspend your account until it is re-enabled.
  4. You are responsible for keeping your login credentials secure and for all activity under your account. One account per licensed practitioner; do not share credentials.
  5. For your clients’ protection, inactive sessions are automatically signed out after a period of inactivity.
  6. Notify us promptly at support@curio.health if you suspect unauthorized access to your account.

4. Your Responsibilities as a Custodian

  1. You will use Curio only for lawful purposes and in accordance with these Terms.
  2. You remain the health-information custodian (or equivalent) for the personal health information you handle. Curio acts as your service provider — an electronic service provider under Ontario’s PHIPA, an information manager under Alberta’s HIA, or a contracted service provider under BC’s PIPA and equivalent legislation elsewhere. Our handling of that information on your behalf is governed by the Electronic Service Provider Agreement.
  3. You are responsible for your own compliance with privacy law, including obtaining any consents your clients’ care requires, maintaining your clinical records for the period your college requires, and keeping your professional registration current.
  4. You are responsible for the content you send and store through Curio.

5. Electronic Service Provider Agreement

These Terms govern your general use of the service. A separate Electronic Service Provider Agreement governs how Curio processes personal health information on your behalf. Together, these Terms and that Agreement form the complete agreement between you and Curio; where they conflict on the handling of personal health information, the Electronic Service Provider Agreement controls. If you are a customer and have not accepted that Agreement, contact legal@curio.health.

6. Subscription and Payment

  1. Curio is offered on a subscription basis. You may choose monthly billing at CAD $15 per month or annual billing at CAD $153 per year.
  2. Subscriptions renew automatically on your chosen cadence until cancelled. You may switch between monthly and annual billing at any time from Settings → Manage billing, which opens a secure billing portal hosted by our payment provider, Stripe. The change takes effect on your subscription with standard proration.
  3. Some accounts hold lifetime access — a one-time entitlement granted by Curio with no recurring subscription and no charge. It is not sold in-app; where it applies, the recurring-billing clauses below do not.
  4. Payments are processed by our payment provider, Stripe. By subscribing, you authorize us, through Stripe, to charge your payment method for each billing period.
  5. Prices are exclusive of applicable taxes, which will be added where required.
  6. If a payment fails, we will notify you and retry. If it is not resolved within 14 days, we may suspend your account; your data is preserved during suspension, subject to Section 14.
  7. We will give you at least 30 days’ notice before any price change. If you do not agree, you may cancel before it takes effect.
  8. From the same billing portal you may update your payment method and view your invoice history. We do not store your full card details; they are held by Stripe.

7. Cancellation

You may cancel your subscription at any time from Settings → Manage billing, or by emailing support@curio.health. When you cancel, your subscription remains active until the end of the billing period you have already paid for, and it will not renew after that. We do not provide refunds for partial billing periods.

8. Acceptable Use

You agree not to:

  1. use Curio in violation of any law or any third party’s rights;
  2. send bulk or marketing email — Curio is not an email-marketing tool;
  3. attempt to gain unauthorized access to, interfere with, or disrupt the service, its security, or other users’ accounts or data;
  4. transmit malware or other harmful code;
  5. reverse engineer, decompile, or attempt to extract the source code of the service; or
  6. resell, sublicense, or provide the service to others as if it were your own.

If you violate these Terms, we may suspend or terminate your account. We will give notice when possible, but may act immediately where a violation poses a security risk to others.

9. Intellectual Property

Curio and all software, design, and content that make up the platform are owned by Gabriel Borges (operating as Curio) or our licensors. You retain all rights to the data and content you put into Curio; we claim no ownership of it and use it only to provide the service to you. We do not use customer data to train artificial-intelligence models, and we do not sell it.

10. Third-Party Services

Curio relies on third-party providers (for example, Stripe for payments). Your own integrations — such as a Google Workspace account you control — remain governed by your agreements with those providers, not by Curio. Our Privacy Policy lists the providers we use.

11. Service Availability

We work to keep Curio available and reliable, but the service is provided on an “as is” and “as available” basis. We do not guarantee uninterrupted or error-free operation. We will give at least 24 hours’ notice by email before planned maintenance that may affect the service. We are not responsible for Google Workspace outages, recipient mail-server behaviour, your own connectivity, or changes Google makes to its services. If Curio is unavailable, your email still sends through Gmail normally — it simply is not encrypted through Curio during the outage.

12. Disclaimers and Limitation of Liability

To the extent permitted by law, Curio is provided without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. To the extent permitted by law:

  1. we are not liable for compliance decisions you make or fail to make, or for whether a regulator considers your overall practice sufficient;
  2. our total aggregate liability arising from or relating to the service is limited to the amounts you paid us in the 12 months before the claim arose; and
  3. we are not liable for indirect, incidental, consequential, special, or punitive damages, including lost profits or lost data.

Nothing in these Terms limits liability that cannot be limited by law.

13. Indemnity

You agree to be responsible for, and to reimburse us against, third-party claims arising from your misuse of the service or your breach of these Terms. We agree to do the same for you in respect of claims arising from our breach of these Terms or our negligent handling of data within our control.

14. Data Handling on Termination

  1. When your account closes, your account information is deleted within 30 days.
  2. Audit records are retained for the minimum period required by privacy law (at least 10 years), on an append-only basis, then securely destroyed. These are a product record of encryption activity, not your clinical record — keeping the clinical record is your own professional duty.
  3. Before your account closes, you may request an export of your audit-trail data in a structured, machine-readable format by emailing support@curio.health. We will provide it within 30 days.
  4. Where you have an Electronic Service Provider Agreement, its data-return and destruction provisions also apply and take precedence over this section where they conflict.

15. Term and Termination

  1. These Terms apply for as long as you hold a Curio account.
  2. You may stop using Curio and close your account at any time, subject to Section 7.
  3. We may suspend or terminate your account if you materially breach these Terms, your payment is overdue beyond 14 days, we are required to by law, or continuing to serve you poses a security risk to others. When possible we give 30 days’ notice and an opportunity to export your data; we may act immediately where security or law requires.
  4. On termination, your right to use the service ends. The return and destruction of your data are governed by Section 14 and the Electronic Service Provider Agreement.

16. Changes to These Terms

We may update these Terms from time to time. The version and “last updated” date above identify the current Terms. If we make a material change, the next time you use Curio we will show you the updated Terms and ask you to accept them before you can continue using the service; if you decline, you will be signed out and may cancel your account. Changes we identify as non-material — corrections, clarifications, or formatting — take effect when published without a separate prompt.

17. Governing Law and Disputes

These Terms are governed by the laws of the Canadian province or territory in which you practise and the applicable laws of Canada. Before starting any formal proceeding, you and we agree to first attempt to resolve any dispute informally by contacting legal@curio.health; if that fails after 30 days, either party may pursue formal remedies.

18. General

  1. If any part of these Terms is found unenforceable, the rest remains in effect.
  2. These Terms, together with the Privacy Policy and the Electronic Service Provider Agreement, are the entire agreement between you and us regarding your use of Curio.
  3. You may not transfer your rights under these Terms without our consent; we may transfer ours in connection with a merger, acquisition, or sale of assets, on notice to you.
  4. If we do not enforce a provision of these Terms, that is not a waiver of our right to do so later.
  5. Neither party is liable for delays or failures caused by events beyond reasonable control.
  6. We send notices to the email on your account; you can send notices to legal@curio.health.

19. How to Contact Us