Privacy policy
Last updated 19 October 2026
Cursy is an AI teacher for Windows, made by Cursy ("we", "us"). This policy explains what Cursy collects, why, who it is shared with, and the choices you have. If anything here is unclear, write to us at heycursy@gmail.com.
The short version
- Cursy looks at your screen and listens to you only while it is helping with something you asked.
- Cursy never saves pictures of your screen or recordings of your voice.
- Your conversation history stays on your PC, encrypted by Windows.
- We do not sell your data and we do not show ads. We do not train AI models ourselves; to keep Cursy free, OpenAI may use what Cursy sends it to improve its models, but never anything from your Google account or other connected apps (section 2).
- Cursy points and you click: in this version it never clicks, types or changes anything on your PC by itself.
- Connecting other apps, such as Gmail, is not in this version yet. When it comes, nothing will be sent or changed there until you say yes (section 3).
1. Your account
You sign in to Cursy with your Google account. Google gives us your name, your email address, your profile picture and an id for your account. We use them to recognise you, to apply the daily limits of the free allowance, and to contact you about your account. Sign-in is run for us by Supabase.
While Cursy is in early access, we may also check your email address against a list of people invited to use it, and against the few accounts whose daily limits we lift. We never use your email address to identify you to the other services listed below: they know you only by your Cursy user id, or by a short code made from it.
2. When you ask Cursy for help
Cursy works when you hold Ctrl and Alt and ask, and during a lesson you started. To help you, it sends some of what is happening to services that do the work:
| What | Where it goes, and why | Kept by us? |
|---|---|---|
| Your voice, while you hold the keys | Streamed to AssemblyAI, which turns it into text. | No. |
| What you said, as text | Sent through our server to OpenAI, to understand what you want and to answer. | Only in the history on your PC (section 4). |
| A picture of your screen, when the answer needs it | Sent through our server to OpenAI, so the answer is about what you are looking at. | No, never saved. |
| During a lesson: the names of the buttons and menus on your screen, and whether your last click landed on the one Cursy pointed at (yes or no, never where) | Sent through our server to OpenAI with the picture of your screen, to work out the next step and whether the last one worked. | No, never saved. |
| Cursy's answer | Spoken by ElevenLabs, through our server, or by Windows on your PC. | Only in the history on your PC. |
| A record of each AI call: which model answered, which part of Cursy asked, how many tokens it used and how long it took. Never what you said, your screen, or the answer. | Sent by our server to LangSmith (by LangChain), so we can see how Cursy uses AI and keep it within budget. You appear only as a short code that cannot be turned back into your account. | In LangSmith, for its standard retention period. |
| A web search of a few words, when an answer needs today's facts | Sent to Composio, which searches the web with Exa and DuckDuckGo. | The search and what it found, for up to 10 minutes, so the same search is not repeated. It does not say who asked. |
| At the start of a lesson: the app you are using, its version, and the task | Sent to Composio to find the app's own documentation, and to OpenAI to summarise it. | The summary, for up to 30 days, for anyone asking the same thing in the same app. It does not say who asked. |
| The first time you use an app with Cursy running: the app's name and version, never what is in it | Sent to Composio to find that app's own documentation, and to OpenAI to summarise it, so lessons in it follow the app's own words. | The summary, for up to 30 days, for anyone using the same app. It does not say who asked. A copy is kept on your PC. |
These companies process this data to provide their service to us. Some may keep requests for a limited time, for example to detect abuse; their own privacy policies explain how.
How Cursy stays free. Cursy runs on OpenAI's free daily allowance, which OpenAI gives on the condition that it may use the requests it receives to improve its models. That includes what you said and, when an answer needs it, the picture of your screen. Before asking Cursy about something on your screen, close anything you would not want shared, such as passwords or private documents. Anything from your Google account or other connected apps is never part of this: it goes to OpenAI through a separate account that does not share it.
Each request to OpenAI also carries a short code made from your Cursy user id, never your name or email, as OpenAI asks of apps with many users: if one person misuses Cursy, OpenAI can deal with that person without stopping Cursy for everyone.
3. Apps you connect (coming later)
This version of Cursy cannot connect to other apps yet. When it can, this is how it will work. You will be able to connect Gmail, Google Calendar, Slack or Notion so Cursy can help with them. The connection is made and kept by Composio, which knows you only by your Cursy user id.
- When you ask about them, Cursy reads what it needs, such as your latest emails or today's events, and sends it to OpenAI to answer you. We do not store it.
- Cursy never sends, books, posts or changes anything until you say yes to the exact action it describes, and it only asks within a few minutes of proposing it.
- You can remove Cursy's access at any time from your Google, Slack or Notion account settings, or by asking us.
Cursy's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use information from your Google account for advertising, we do not sell it, and we do not use it, or let anyone use it, to train or improve AI models: it is sent to OpenAI only through an account that does not share it for that.
4. What stays on your PC
- Your conversation history with Cursy, encrypted with Windows' own data protection so only your Windows account can read it.
- Things you ask Cursy to remember, such as a name to call you or how you like to be taught.
- Your settings, and your sign-in, which is kept in Windows Credential Manager.
- Summaries of the documentation of apps you use, so they are not fetched again.
- Logs that record what Cursy did and how long it took. They never contain what you said, what was on your screen, or anything from your apps.
These stay until you delete them. They live in your Windows user folder. Uninstalling Cursy removes your sign-in from Windows Credential Manager and stops Cursy starting with Windows; to remove the rest too, delete the Cursy folders in %AppData% and %LocalAppData%.
5. What we keep on our server
- Your user id, your name as Google gives it, and when you first and last used Cursy.
- How much of the daily free allowance you used each day (AI tokens, times listened and characters spoken), to apply the limits.
- The short-lived search results and documentation summaries described in section 2.
- Logs of what the server did, such as timings and error codes. They never contain what you said, your screen or your mail.
Our server runs on Amazon Web Services. Our database and sign-in are run by Supabase.
6. Who we share data with
Only the services that make Cursy work, each for the purpose above:
- Supabase: sign-in and our database.
- Amazon Web Services: hosting our server.
- OpenAI: understanding your question, your screen and your apps, and answering.
- AssemblyAI: turning your voice into text.
- ElevenLabs: speaking Cursy's answers.
- Composio: web search, documentation search and the apps you connect.
- Google: signing you in.
We do not sell personal data. We may disclose information if the law requires it, or to protect people from harm.
7. How long we keep it
- Your account and your daily usage counts: while your account exists.
- When you ask us to delete your account, we delete it and the data linked to it within 30 days.
- Search results: up to 10 minutes. Documentation summaries: up to 30 days.
8. Your choices and rights
- Sign out of Cursy at any time from its icon in the Windows tray.
- Ask us for a copy of your data, to correct it, or to delete your account, by writing to heycursy@gmail.com.
- Depending on where you live, for example under India's Digital Personal Data Protection Act, 2023, or the EU's GDPR, you may have more rights. We will honour them.
- For a complaint about how we handle your data, write to Cursy at heycursy@gmail.com. We will reply within 30 days.
9. Children
Cursy is not meant for children. To use it you must be 18 or older, or use it with the consent of your parent or guardian.
10. Security
The keys for the services above are held only on our server, never on your PC. Everything travels encrypted. Your sign-in is kept by Windows. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects it.
11. Changes
When this policy changes, we will update the date at the top. If a change is important, we will tell you in Cursy or by email before it applies.
12. Contact
Cursy, Bengaluru, Karnataka, India. Email heycursy@gmail.com.