Privacy Policy

1. Information We Collect

Depending on how you use Cima, we may collect the following categories of information.

Account Information

This may include:

• Name
• Display name
• Email address
• Password or authentication information
• Profile photograph
• Account type
• Age or age range
• Parent or guardian information where applicable

Educational Information

Cima may collect information about a student's use of the platform, including:

• Exams selected
• Subjects
• Grade or academic year
• Exam dates
• Diagnostic results
• Practice answers
• Practice scores
• Questions attempted
• Correct and incorrect answers
• Lesson completion
• XP
• Streaks
• Levels
• Crowns
• Study time
• Learning goals
• Progress
• Areas where additional practice may be useful

Payment Information

Payments are processed through Stripe.

Cima does not intentionally store complete payment-card numbers in its own database when payment processing is handled by Stripe.

Technical Information

We may automatically collect certain technical information, including:

• IP address
• Device type
• Browser type
• Operating system
• App version
• Approximate location derived from IP address
• Login information
• Error logs
• Security information

Usage Information

We may collect information about how users interact with Cima, including:

• Lessons opened
• Questions attempted
• Features used
• Session activity
• Subscription activity
• Notification interactions
• General product usage

2. How We Use Information

We use information to operate, maintain, secure, and improve Cima.

Providing the Services

We use information to:

• Create and manage accounts
• Authenticate users
• Deliver educational content
• Track educational progress
• Maintain learning paths
• Calculate XP and streaks
• Track levels and achievements
• Provide personalized study recommendations
• Provide parent dashboards
• Provide tutoring
• Provide university preparation tools

Improving Cima

We may use information to:

• Identify bugs
• Improve lessons
• Improve educational content
• Understand how features are used
• Improve the user experience
• Monitor platform performance
• Develop new features

Communications

We may use contact information to send:

• Account notifications
• Security notifications
• Subscription communications
• Educational reminders
• Daily practice reminders
• Service announcements

Security

We may use information to:

• Prevent fraud
• Detect abuse
• Protect accounts
• Secure our systems
• Investigate security incidents
• Enforce our Terms

3. Artificial Intelligence

Cima may use artificial intelligence ("AI") tools during the development and preparation of certain educational materials.

AI may be used to assist with the creation of:

• Practice questions
• Answer choices
• Explanations
• Examples
• Exercises
• Study materials
• Other educational content

AI-assisted content may be reviewed, edited, tested, and curated by Cima before being made available to users.

Because AI-generated content can contain errors, Cima does not guarantee that every AI-assisted question, answer, explanation, or educational recommendation is error-free.

Student information and AI

Cima does not currently use students' personal information to generate educational content through third-party generative AI services.

In particular, Cima does not currently intend to send a student's name, email address, profile information, or other identifying information to a generative AI provider merely because the student uses the core learning experience.

Cima may change its use of AI technologies as the Services develop.

If Cima begins using generative AI services to process students' personal information, written responses, essays, or other user-generated content, Cima will update this Privacy Policy and provide any notices or obtain any consent required by applicable law.

4. Student and Children's Privacy

Cima may be used by students under 18.

If Cima is subject to laws governing the collection of personal information from children, including the Children's Online Privacy Protection Act ("COPPA"), we will follow applicable requirements.

Where legally required, Cima may require parental or guardian consent before collecting certain personal information from younger users.

Parents and legal guardians may have rights concerning information collected from their children, including rights to request:

• Access
• Correction
• Deletion
• Withdrawal of consent where applicable

We may require reasonable verification before fulfilling a request involving a child's account or information.

5. Educational Personalization

Cima may use information about a student's performance to personalize their educational experience.

For example, Cima may identify that a student has repeatedly struggled with a particular topic and recommend additional practice.

Educational performance information is used to improve the student's learning experience.

Cima's educational recommendations are not intended to constitute medical, psychological, or other professional diagnoses.

6. How We Share Information

Cima does not sell students' personal information.

We may share information with service providers that process information on our behalf when necessary to operate Cima.

These providers may include:

Stripe

Stripe processes payments and related payment information.

Supabase

Supabase provides database, authentication, and application infrastructure used by Cima.

Cloudflare

Cloudflare provides network, security, performance, and infrastructure-related services.

Other Service Providers

Cima may also use providers for:

• Email delivery
• Customer support
• Authentication
• Analytics
• Security
• Infrastructure
• Scheduling
• Other services necessary to operate Cima

These providers receive only the information reasonably necessary to provide their services to Cima, subject to applicable contractual and legal requirements.

7. Educational Data

Educational data is an important part of Cima's functionality.

For example, Cima may use a student's previous performance to determine which topics or questions should be recommended next.

We may use aggregated or de-identified information to:

• Analyze overall platform performance
• Improve educational materials
• Understand usage patterns
• Improve Cima's products and Services

We do not sell individual student academic records to advertisers.

8. Leaderboards and Public Profiles

Cima may provide optional leaderboards and public-facing profile elements.

Depending on the feature, other users may see:

• Username or display name
• Avatar
• XP
• Rank
• League
• Certain achievements

We encourage users to avoid placing sensitive personal information in public profile fields.

Parents and guardians should consider this when helping younger students establish their profiles.

9. Cookies and Similar Technologies

Cima may use cookies and similar technologies for:

• Authentication
• Security
• Session management
• User preferences
• Product functionality
• Analytics
• Performance monitoring

Where required by applicable law, Cima will provide appropriate consent mechanisms for non-essential cookies and similar technologies.

10. Email and Notifications

Cima may send:

• Account-related emails
• Security notifications
• Payment and subscription communications
• Educational reminders
• Daily practice reminders
• Service announcements

Users may disable optional reminders through the settings available within Cima.

Certain transactional, security, or service-related communications may continue because they are necessary to operate the account.

11. Payment Information

Cima uses Stripe to process payments.

Payment information submitted during checkout may be collected and processed directly by Stripe.

Cima does not intentionally store complete payment-card numbers in its own database.

Stripe maintains its own privacy practices concerning information submitted to Stripe.

12. Hosting and Infrastructure

Cima uses Supabase for database, authentication, and application infrastructure.

Cima uses Cloudflare for networking, security, performance, and related infrastructure.

Personal information may therefore be processed by these providers as necessary to provide and secure Cima.

13. International Data Transfers

Cima is operated from California and may provide Services to users throughout the United States, Latin America, and other countries.

Personal information may therefore be transferred to and processed in the United States or other countries where Cima or its service providers operate.

Where required by applicable law, Cima will use appropriate safeguards for international data transfers.

14. Data Retention

Cima retains personal information for as long as reasonably necessary to:

• Provide the Services
• Maintain accounts
• Maintain educational progress
• Process subscriptions
• Provide customer support
• Meet legal obligations
• Resolve disputes
• Prevent fraud
• Enforce agreements
• Protect the Services

When information is no longer reasonably necessary, Cima may delete or anonymize it, subject to applicable legal, security, and operational requirements.

15. Data Security

Cima uses reasonable technical, administrative, and organizational safeguards designed to protect personal information.

These safeguards may include:

• Encryption in transit
• Authentication controls
• Database access controls
• Secure infrastructure
• Monitoring
• Restricted administrative access
• Security procedures

However, no internet-based service can guarantee absolute security.

16. California Privacy Rights

If California privacy law applies to you, you may have certain rights regarding your personal information.

Depending on applicable law, these rights may include:

• The right to know or access personal information
• The right to delete personal information
• The right to correct inaccurate personal information
• The right to obtain information about certain disclosures
• The right to opt out of certain sales or sharing of personal information
• The right to limit certain uses of sensitive personal information where applicable
• The right not to receive discriminatory treatment for exercising applicable privacy rights

Cima does not sell students' personal information.

To submit a privacy request, contact:

privacy@cima.app

We may need to verify your identity before processing certain requests.

17. California "Do Not Sell or Share" Rights

Cima does not sell personal information.

If Cima engages in activities that constitute "sharing" under applicable California privacy law, including certain forms of cross-context behavioral advertising, Cima will provide the applicable opt-out mechanisms required by law.

Cima does not intend to use student educational information for targeted advertising.

18. Parent and Guardian Privacy Rights

Parents and legal guardians may contact Cima regarding information associated with a child's account where legally applicable.

Depending on applicable law, requests may include:

• Access to information
• Correction of information
• Deletion of information
• Withdrawal of consent
• Questions regarding our privacy practices

We may require reasonable documentation or verification to confirm that a person is authorized to make a request concerning a child's information.

19. Your Privacy Choices

Depending on your account and applicable law, you may be able to:

• Edit your profile
• Change your display name
• Change your profile photograph
• Adjust notification settings
• Disable optional reminder emails
• Change learning preferences
• Delete your account
• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of personal information

To submit a privacy request that cannot be completed through the Cima application, contact:

privacy@cima.app

20. Third-Party Websites and Services

Cima may contain links to third-party websites or services.

Cima is not responsible for the privacy practices, security, or content of third-party websites.

We encourage users to review the privacy policies of third-party services before providing them with personal information.

21. Changes to This Privacy Policy

We may update this Privacy Policy as Cima develops.

If we make material changes, we will provide appropriate notice where required.

The "Last Updated" date at the beginning of this Privacy Policy indicates when the policy was most recently revised.

22. Contact Us

If you have questions about this Privacy Policy, Cima's privacy practices, or your personal information, please contact us.

Cima

Operated by Alan Dominguez

California, United States

Privacy Email: privacy@cima.app

Support Email: support@cima.app