Data and privacy
Draft. We will publish the full version before the first group starts.
What we store and for how long
| What | Where | How long |
|---|---|---|
| Email, sign-in method | with us, in a separate table | while you have an account |
| The language the coach answers you in (Russian or English) | in your account; included in your data export | while you have an account |
| Your role in one word, program topic, how you work with AI (as you describe it: in chat, with agents, or building systems) | with us | while you have an account |
| Your place in the program, techniques completed | with us | while you have an account |
| Practice logs: technique, whether it helped, self-assessment, minutes | with us, without text | 30 days |
| Receiving a task, logging practice, saving a playbook: only the day in UTC, which of the three actions it was, and the task category | with us, without text; included in your data export | 30 days or until you delete your account, whichever comes first |
| 4-minute checks: the text you checked, answer hash, scores, level | with us, without the answer text | levels — indefinitely |
| Playbooks: name, slots, check, version (up to 4,000 characters) | with us, in structured form, without client data | while you have an account; export with one button |
| Work sign-in with your company's Google account: email, company domain, when access was confirmed, whether it was revoked | with us | while you have an account |
| Scenario marks: which scenario, the day, the outcome you picked, how often to repeat | with us, no text; included in the export | while you have an account |
| Counts of scenario opens and marks — no names, no accounts | with us | 400 days |
| Biography, projects, style, conversations | in Claude / ChatGPT memory | not with us |
Who and where
- The service operator is Tariq Academy.
- The service runs on a server in Finland (EU), at Hetzner's data center in Helsinki. The database is on the same server.
- Backups are made once a day and kept on the same server for 14 days. The service owner keeps an encrypted copy of the backups for 30 days so that a server breach cannot erase everything.
- Only the service owner has access to the server and data.
The 4-minute check without signing in
- A check taken without signing in is linked to a random signed identifier in a cookie. The cookie lasts 30 days. We use it to show you your result.
- The site remembers your chosen language (Russian or English) in a cookie for one year; it contains nothing else.
- The result moves to your account when you connect the coach in the same browser, open the coach's personal link to the check, or send the coach the line from the result page. That browser is linked to your account for 30 days: checks taken there go straight to your account.
- We store the text you checked, the answer hash, score, level, time, and number of times you leave the tab. These are statistics, not an assessment of you. We do not store the answer text. The attempt key is not stored: the server derives it again when you submit.
- A challenge link shows only the number found, the number of errors, and the time, without a name.
- The “Open in Claude” button on the install page sends one signal: the platform and whether the app opened.
Rules
- There is no free-form text on the server. Short fields are stripped of names and secrets before they are stored.
- Sign-in data and progress are linked only by an internal identifier.
- You can export or delete your data with one button on your data page. The coach gives you a link to it. Deletion requires confirmation. “Delete my data” erases everything we hold. Data will be removed from backups automatically within 30 days. Delete anything the AI remembers about you in Claude or ChatGPT there. The coach can show you how.
- Only you can see your level. You decide whether to share it, and you can withdraw it.
- Targets, region and other values you type into a scenario stay in your browser and never reach us.
- An account with no activity for 12 months is deleted.