Privacy Policy

Maky Software Inc. ("we", "us", or "our") operates Cima ("the Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy. We are committed to protecting your privacy and ensuring transparency about our data practices.

We collect different types of information to provide and improve our Service:

Account Information

When you create an account via Google OAuth, we receive:

• Email address (for account identification)
• Display name (for personalization)
• Profile picture URL (for your avatar)

Usage Data

We automatically collect:

• Session information (climbing sessions you log)
• Problem data (grades, attempts, completions)
• Goals and achievements
• Device information (browser type, IP address)

Video Content

When you upload climbing videos for AI analysis, we temporarily store and process these videos to provide technique feedback. Video data is handled with strict security measures.

We use the collected information for:

• Providing and maintaining the Service
• Authenticating your identity and managing your account
• Displaying your progress, analytics, and achievements
• Processing videos through AI for technique analysis
• Improving our Service and AI models (using anonymized data)
• Communicating with you about updates or support
• Detecting and preventing fraud or abuse

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit using SSL/TLS
• Data at rest is encrypted in our PostgreSQL database
• OAuth tokens are securely stored and never exposed
• Videos are stored in secure cloud storage (AWS S3)
• Regular security audits and monitoring

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

We use the following third-party services:

Google OAuth

We use Google OAuth for authentication. When you sign in with Google, we only request access to your basic profile information (email, name, profile picture). We do not access your Google Drive, Gmail, Calendar, or any other Google services.

AI Analysis Provider

Videos you upload are processed using AI services to provide technique feedback. Video content is not retained by AI providers after analysis is complete.

Cloud Infrastructure

We use Amazon Web Services (AWS) for hosting and storage. Data is stored in secure, compliant data centers.

We retain your personal data for as long as your account is active or as needed to provide you with our services:

• Account data: Retained until you delete your account
• Session and climbing data: Retained until you delete your account
• Videos: Retained for 90 days after analysis, then automatically deleted
• Anonymized analytics: May be retained indefinitely for service improvement

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and data
• Export: Request a copy of your data in a portable format
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, please contact us at makysoftwareinc@gmail.com. We will respond within 30 days.

For users in the European Economic Area (EEA), we process your data based on the following legal bases:

• Contract: Processing necessary to provide the Service you requested
• Consent: Processing based on your explicit consent (e.g., video analysis)
• Legitimate Interest: Processing for service improvement and security

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal data, please contact us immediately.

We use the following types of cookies:

• Essential cookies: Required for authentication and core functionality
• Preference cookies: Remember your settings (language, theme)

We do not use third-party tracking cookies or advertising cookies.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Maky Software Inc.
makysoftwareinc@gmail.com

For GDPR-related inquiries, you may also contact your local data protection authority.