Privacy policy

Cram.ai (cramai.study) turns the notes, slides and past papers you upload into a study plan and practice questions. This page says what we collect to do that, who handles it for us, and what you can ask us to do. We never sell your data, and we never use it for advertising.

What we collect

• Your account. Your email address, and your name if you sign in with Google. From Google we only ask for your email address and name, and we use them to sign you in and to show you your own account.
• Your study materials. The files you upload and the text we extract from them, plus the exams, plans, questions, answers and progress built from them.
• Payments. If you buy a pass, which pass and when. We never see or store your card number.
• Usage records. How much AI work each account uses, so we can keep costs and limits fair.
• Analytics. Page views and a short list of named events, such as “started a session”. After you sign in, they are tied to an anonymous account id rather than your email or name. We switch off click capture and screen recording, so nothing you type or read on screen is sent to analytics.

Who handles it for us

• Supabase stores accounts, study data and uploaded files, and runs sign-in.
• Anthropic receives passages from your materials, and your questions, so its Claude models can write the plan, practice questions and answers. Your materials are not used to advertise to you.
• Google signs you in when you choose “Continue with Google”.
• Resend delivers the one-time sign-in code to your inbox.
• Stripe takes payment for passes. You enter your card details on Stripe’s own page, so they never reach us. We keep only the record that a payment was made.
• PostHog provides the analytics described above.
• Our hosting provider runs the website itself.

These services act on our behalf and under their own privacy terms. We share your data with no one else unless a law or court order requires it.

Cookies and local storage

We use a sign-in cookie, which the site cannot work without, and a small identifier in your browser’s storage for analytics. There are no advertising cookies and no cross-site tracking.

How long we keep it

• Uploaded files are deleted 14 days after the exam date you set. The extracted text, plan and progress stay in your account so you can review them.
• Everything else stays until you ask us to delete your account.
• Backups can hold deleted data for a short time before they roll off.

Your choices

You can ask to see, correct, export or delete the data we hold about you, and deleting your account removes your study data too. We will answer within a reasonable time.

Children

Cram.ai is not meant for children under 13, and we do not knowingly collect their data.

Changes

If we change this policy in a way that matters, we will update the date at the top and tell signed-in users before it takes effect.