Privacy policy

What we collect

When you generate a study set, we receive the text you paste or the PDF you upload. We extract the text, send it to our AI provider to create your study material, and store only the generated result so it can be opened from its share link. We don't keep the original file.

To limit abuse we store a one-way hash of your IP address with the time of each generation. We don't store your IP address itself.

If you sign in with Google, we receive and store your name, email address and profile picture, plus a record of how many generations you've used. We don't get access to your Google files or contacts.

Google user data

Sign-in with Google only asks for your basic profile (name, email address and profile picture). We use it to create your account, show who is signed in and link your purchases to you. We don't use Google user data for advertising, don't sell it and don't share it with anyone except as needed to run the service or when the law requires. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Cookies

We use one cookie to keep you signed in and a short-lived one to protect the sign-in step. If you accept analytics, Google Analytics and Microsoft Clarity set their own cookies. We don't use advertising cookies.

Payments

Purchases are processed by Creem, our merchant of record. Creem collects your payment details and billing address; we only receive your email, your customer ID and what you bought, so we can activate your plan.

AI processing

Your material is processed by a third-party AI model provider under its API terms. Don't upload material containing personal information about other people, such as student records.

Sharing

Anyone with a study set's link can view it. Share links aren't listed in search engines.

Analytics

We use Google Analytics and Microsoft Clarity to understand how the site is used — which pages people visit, where they get stuck, and whether a feature works. Clarity can record anonymized page interactions such as clicks and scrolling; text you type into the generator isn't sent to either service. Visitors in the EEA, UK and Switzerland are asked before Google Analytics sets cookies, Clarity only runs for visitors who accept, and anyone can decline in the banner. We don't use advertising cookies and don't sell personal information.

How long we keep data

Account details and usage records are kept while your account is open. Generated study sets are kept so their share links keep working. The hashed IP records are used only for daily limits. When you ask us to delete your account, we delete your account details, sessions and study sets within 30 days; payment records may be kept by Creem as tax law requires.

Children

Accounts are for people aged 13 and over. Younger students can use Cramsmith through a parent or teacher. If you believe a child under 13 has given us personal information, contact us and we'll delete it.

Changes

If we change this policy we'll update the date above, and tell signed-in users about significant changes.

Contact

Questions or deletion requests: [email protected].