Privacy Policy

Tally never uploads your code, diffs, file contents, tool output or file paths. For each session in a repo you chose to track, it uploads:

• Your own prompts, with secrets removed and cut to 400 characters each. Fenced code in a prompt is replaced by a placeholder.
• Numeric stats such as turns, edits, test runs, retries and duration.
• Commit SHAs, so we can check them against your public GitHub history.

Run tally preview any time to see exactly what the next upload contains. Run tally pause to stop it, or add a .tallyignore file to a repo to exclude it. Nothing from a repo leaves your machine until you track that repo.

• Your GitHub identity (login, name, email) when you sign in with GitHub through Supabase.
• Public GitHub data about you: repositories, languages and commit metadata. We read it with our own read-only token; we do not store your GitHub access token.
• The preferences you set: location, work mode, pay floor, work authorization, stack and role types.
• Product analytics (pages visited, buttons used) through PostHog and Google Analytics.

A nightly job sends your uploaded prompts and stats to a language model to score how you work. The result is your skill profile: an overall score, six habit scores and a short summary. We keep raw prompts for 30 days, then delete them. Scores and stats stay until you delete your account.

Only if you turn on open to work. Before you accept an intro, a founder sees your first name and last initial, city, score, habit scores, stack, and a brief written from your stats. They never see your full name, contact details, employer or raw prompts. Your pay floor is used only to filter and is never shown as a number.

If you accept an intro, the founder gets your full name, email and GitHub profile for that role. You can decline, and you can turn off open to work at any time.

• Supabase: sign-in and database.
• Vercel: hosting.
• DeepSeek: scoring and written briefs. Receives redacted prompts and stats, not your name.
• NVIDIA: turns summaries into numeric embeddings for matching.
• Resend: intro emails.
• PostHog and Google Analytics: product analytics.

We do not sell your data.

On the settings page you can export everything we hold about you as JSON and delete your account. Deleting removes your profile, sessions, scores and device tokens. Your local ~/.tally folder stays on your machine until you delete it. If you are in the UK or EU you have the usual GDPR rights, including access, correction and withdrawing consent.

Questions? Email founder@berelentless.dev.