Early-stage product

Privacy Policy

Last updated: August 4, 2026 · Effective on publication

Klimbins is early-stage and still being built — we're publishing this policy now, ahead of most features being finished, so you always know what we collect and why. It will be revised as the product changes, and we'll update the date above whenever that happens. Questions or requests about your data can go to amtplified@gmail.com.

1. Information we collect

What we collect depends on which parts of Klimbins you use — the web app, the Chrome extension, or both.

Account information

Name, email address, and profile photo, from Google Sign-In or email/password registration.
Workspace details you provide during onboarding (role, how you heard about us, use case).

Content you create

Tasks, notes, decisions, preferences, and automations you build inside Klimbins.
Text you send to the "Ask Klimbins" assistant or use to build automations.

Screen recordings and screenshots

If you use the extension's recording feature, we capture the video (and, if you share it, audio) of whatever screen, window, or tab you select, only when you deliberately start a recording.
If you use the screenshot feature, the extension captures the visible tab when you trigger it.

Browsing activity (extension only, opt-in)

When you turn on Klimbins' "watch this browser" feature, the extension notes page titles and domains you visit so it can offer contextual suggestions. This is off by default and only runs on tabs where it's enabled.

Gmail data (only if you connect Gmail to an automation)

If you connect a Google account to power an email-based automation, we request read access to your mailbox (to detect new messages that should trigger an automation) and compose access (to draft or send messages your automation creates). We only request access to the messages needed for the automations you actually build.

Technical information

Basic device/browser information and IP address, as part of normal request handling and security logging.

⚠️ Legal review: confirm whether any additional disclosures are required for the specific Gmail scopes requested once Google's OAuth verification review is complete.

2. How we collect it

Directly from you — account setup, onboarding, typing into Klimbins, building automations, starting recordings.
Automatically — the extension's opt-in browsing-activity feature, and standard technical logs.
From Google — profile information and, where you've explicitly connected it, Gmail data, via Google's OAuth consent flow.

3. How we use your information

To run the core product — storing your tasks, notes, decisions, and automations, and running the automations you build.
To generate AI suggestions and answers — text you provide (and, if you ask Klimbins to analyze a recording, the recording itself) is sent to Google's Gemini API to produce a response, which is shown back to you.
To store and let you play back your own screen recordings and screenshots.
To power contextual, on-page suggestions from the extension, only where you've enabled that feature.
To maintain security, prevent abuse, and debug issues.
To communicate with you about your account or material changes to the product.

We do not use your data for advertising, and we do not sell or rent your personal information to anyone.

4. Legal basis for processing

⚠️ Legal review required — this section needs confirmation from a qualified attorney once Klimbins has a defined jurisdiction and user base, especially for EU/UK users under GDPR.

Where GDPR or similar law applies, we rely on: your consent (for optional features like recording, screenshots, browsing-activity tracking, and connecting Gmail), performance of a contract (running the core product you signed up for), and legitimate interests (security, fraud prevention, and product improvement).

We don't sell your data. We share it only with the service providers that make Klimbins work:

Supabase — hosts our database, file storage (for recordings/screenshots), and authentication.
Google — Sign-In, Gmail API (only for connected automations), and the Gemini API (for AI suggestions and recording analysis).

We may also disclose information if required by law, or to protect the rights, safety, or property of Klimbins or our users.

6. International data transfer

⚠️ Legal review required — final wording depends on where Supabase and Google process/store data relative to where our users are located.

Our infrastructure providers (Supabase, Google) may process data in countries other than your own. Where required, we rely on those providers' own compliance mechanisms (such as standard contractual clauses) for cross-border transfers.

7. Data retention

Account and workspace data — kept while your account is active.
Recordings and screenshots — kept until you delete them, or until you delete your account.
Browsing-activity signals used for suggestions — kept only as long as needed to power the current suggestion, and cleared on a rolling basis.
If you delete your account, we delete your associated data within a reasonable period, except where we're required to retain it for legal or security reasons.

⚠️ Legal review: set and publish exact retention windows once data-lifecycle handling is finalized.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent for optional features (recording, screenshots, browsing-activity tracking, Gmail connection) at any time from within the product or by disconnecting the relevant integration.

To exercise any of these rights today, email amtplified@gmail.com — we're pre-launch and handle these requests directly and personally rather than through an automated portal. We aim to respond within 30 days.

⚠️ Legal review required — formal rights language (GDPR Articles 15–21, CCPA/CPRA) should be finalized before this product is generally available.

9. Cookies and local storage

The web app uses browser local storage to keep you signed in and to cache your workspace data for a fast, offline-friendly experience. The extension uses Chrome's local storage APIs for the same purpose, plus your feature preferences (e.g. whether browsing-activity suggestions are on). We do not currently use third-party advertising or tracking cookies.

10. Security

We use industry-standard measures including encrypted connections (HTTPS), access-controlled databases (row-level security scoped to your account), and OAuth-based authentication rather than storing raw passwords for Google-linked accounts. No system is 100% secure, and we can't guarantee absolute security of information you provide.

11. Children's privacy

Klimbins is not directed at, and is not intended for use by, children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we'll delete it.

12. Google API services and limited use

Klimbins' use and transfer of information received from Google APIs (including Gmail) adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to power the automations you explicitly build, is never used for advertising, and is never shared except as necessary to provide that automation.

13. Changes to this policy

Because Klimbins is still being built, this policy will change as features are finished. We'll update the "Last updated" date above, and for material changes, we'll notify you by email or an in-app notice before they take effect.

14. Contact

Questions, requests, or concerns about this policy or your data: amtplified@gmail.com.