Privacy Policy

What we collect

We collect only what the product needs to function:

• Account data — your email address (used for magic-link sign-in) and optional profile details such as a display name or target interview date.
• Assessment data — your answers to diagnostic and verification questions, the automated grading verdicts and feedback on them, and your per-topic scores and progress history.
• Waitlist data — if you join a waitlist, your email and which track you signed up for.
• Technical usage data — model-usage records (token counts, costs, latency) for the AI features you use, kept for cost accounting.

What we deliberately don't do

We do not sell or rent your personal data. We do not show ads or share data with ad networks. We do not use third-party analytics cookies. We do not profile you for anything other than showing you your own knowledge map.

AI processing of your answers

Grading is the product. When you submit a free-form answer, its text is sent to our AI provider (Anthropic) together with the question's grading rubric, and the returned verdict — score, missed criteria, feedback — is stored with your answer. Per our provider agreement, data sent through the API is not used to train their models.

Grading verdicts are automated and are estimates: they exist to guide your preparation, not to certify you. See the Terms for what they do and don't promise.

Cookies

We use only functional cookies — no tracking or advertising cookies:

• Authentication cookies (Supabase) — keep you signed in after a magic link.
• gm_claim — a random token that lets you take a diagnostic anonymously and claim the result if you later sign up. It expires after 30 days and identifies a session, not a person.

Where your data lives and who processes it

Data is stored in a Supabase-managed PostgreSQL database hosted in the EU (AWS eu-central-1, Frankfurt). Service providers that process data on our behalf: Supabase (database and authentication), Anthropic (AI grading of answer text), and our hosting provider for serving the site. Each receives only what its function requires.

How long we keep it

For as long as you have an account — your progress history is the product's value to you, so we don't auto-expire it. Anonymous diagnostics that are never claimed are periodically cleaned up. Waitlist entries are kept until the relevant track launches or you ask us to remove you.

Deleting your data

You can delete your account yourself on the Account page — no email, no waiting. Deletion is immediate and permanent: your profile, answers, transcripts, scores, history, and login are removed in one transaction. Aggregate AI-usage cost records are kept for accounting but are anonymized — stripped of any link to you.

Your rights

You can access everything we hold about you (your map, history, and account data are visible in the product), correct your profile, and delete your account at any time. If you want a copy of your data, a correction we don't expose in the UI, or anything else — email us and we'll handle it.

This service is not intended for children under 16.

Changes and contact

If this policy changes in a way that matters, we'll note it here with a new date. Questions, requests, complaints: bogdan@gapmap.dev.