Privacy Policy

This policy describes what Tarmac collects, why, and who processes it on our behalf. Tarmac is operated by Cayman Pty Ltd (ABN 69 622 061 429). Questions: [email protected].

What we collect

• Your email address, used to sign you in (a one-time code is emailed to it; we store no password) and to send the emails described below.
• Your career target: the role, level and country you say you're aiming for, the skills you tell us you have, and any resume text you paste so we can read those skills for you.
• Your practice activity: the questions you attempt, your answers, scores, per-topic mastery, streaks, and the job descriptions you paste to build a quiz.
• Code you submit for the coding questions, which runs in an isolated execution container to grade it.
• Billing details if you buy Pro. Card data is collected and stored by Stripe, not by us; we keep only your Stripe customer and subscription identifiers and the resulting plan status.
• Product and error telemetry: usage events and crash reports, used to keep the service working and to decide what to improve.

Processors we use

We share the minimum data each of these needs to do its job, and nothing else:

• Railway: hosting, the database, and the sandbox that runs the code you submit.
• Stripe: payment processing and card storage.
• OpenRouter: the gateway to the language models that read a pasted job description or resume into skills and grade open-ended answers. It routes those requests to the model providers we pick, currently DeepSeek, Zhipu AI and Moonshot AI. Only the text needed for that one job is sent, and we send it for that job alone.
• Resend: delivery of the emails you receive, including your sign-in codes.
• Cloudflare Turnstile: the bot check on the newsletter sign-up form.
• PostHog and Sentry: product analytics and error monitoring.

Emails you get, and how to stop them

We send a weekly progress digest, session summaries, notes when the market moves on a role you're aiming at, and the occasional product email. Every one of those carries an unsubscribe link, and following it stops them. We still send the essential ones, your sign-in codes and billing receipts, because the service can't work without them.

Your data: export and deletion

You can export your practice history from the app as a downloadable file. To delete your account and the data tied to it, email [email protected] from your account address and we will remove it, except for records we are legally required to keep (such as billing records held by Stripe).

Retention

We keep your account and practice data while your account is open, so the mastery loop and your history stay intact. We delete it on request, or after a prolonged period of inactivity.

Changes

If this policy changes materially, we will update the date above and, where the change affects you, tell you by email.