Privacy Policy

1. Information We Collect

We collect the following information when you use TARMAC:

• Account information: Name, email address, and password (hashed — we never store it in plain text).
• Usage data: Practice sessions, questions answered, scores, and AI chat conversations — used to power your personalized study experience.
• Payment information: Billing is handled entirely by Stripe. We do not store your credit card number. We receive a Stripe customer ID and subscription status only.
• Device/browser data: Standard server logs including IP address, browser type, and pages visited, used for security and performance monitoring.

2. How We Use Your Information

• To provide and improve the Service (personalized practice, weak-area detection, AI tutoring)
• To manage your account and subscription
• To send transactional emails (exam results, billing receipts)
• To monitor for abuse and maintain security
• To analyze aggregate usage patterns to improve the platform

We do not sell your personal information to third parties.

3. Third-Party Services

We use the following trusted third parties to operate the Service:

• Supabase — database and authentication hosting
• Stripe — payment processing
• Anthropic — AI-powered explanations and tutoring (your messages may be processed by Anthropic's API)
• Resend — transactional email delivery
• Vercel — application hosting and edge infrastructure

Each of these providers has their own privacy policy governing data they receive.

4. AI Chat and Data Processing

When you use the AI Tutor, your messages are sent to Anthropic's API for processing. We do not use your chat history to train AI models. Conversations are stored in our database to provide session continuity and are associated with your account.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

6. Cookies and Local Storage

We use session cookies required for authentication (via Supabase). We also use browser localStorage to track free-tier usage limits (e.g., AI message count). We do not use third-party advertising cookies or tracking pixels.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format (upon request)

To exercise any of these rights, email us at mewing713@gmail.com.

8. Security

We use industry-standard security measures including HTTPS encryption, hashed passwords, and row-level security in our database. No method of transmission over the internet is 100% secure — we cannot guarantee absolute security, but we take reasonable precautions to protect your data.

9. Children's Privacy

TARMAC is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date. Continued use of the Service constitutes acceptance of the updated policy.

11. Contact

Questions or concerns about your privacy? Contact us at mewing713@gmail.com.