Privacy
Effective August 7, 2026 · applies to crammed.study and the Crammed mobile apps
The short version:
Your documents are processed and immediately deleted — never stored, never used to train AI.
We collect your email address (if you sign in) and your study data (so it can sync). That's the list.
No ads, no data selling, no third-party trackers. Deleting your account actually deletes it.
Your documents
When you upload a PDF (or paste text), it is processed to generate flashcards and then deleted immediately. We do not keep your documents, and they are never used to train AI models. Card generation uses Anthropic's API as a processor; under the API terms we use, submitted content is not used for model training.
What we collect
- Your email address, if you create an account. It is the whole of your identity here — no name, no password, no profile. If you sign in with Google, we request only your verified email address, nothing else.
- Your study data — decks, cards, and review history — stored so it can sync across your devices. As a guest, this data lives only on your device and never reaches our servers.
- A payment reference, if you subscribe. Payments run through Stripe as merchant of record; card numbers never touch our servers.
- Product usage events — first-party, tied to a random device identifier: things like "a deck was created" with counts attached. These events are filtered by an allowlist so they can never contain your card text, document text, or anything you wrote. We use no third-party analytics and no advertising trackers.
The app stores a session token and a random device identifier in your browser's local storage. There are no tracking cookies.
Sharing decks
A deck is private until you create a share link for it. A shared deck is readable by anyone with the link until you revoke it (one tap, next to where you created it) or delete your account, either of which removes it immediately.
Deleting your account
You can delete your account from inside the app — no email, no waiting. Deletion removes your email address, your decks, cards, review history, share links, sign-in tokens, and device records from our servers, and cancels any active subscription. One honest exception: anonymous usage counts are kept (how many generations a device ran, with no account attached) — without them, deleting and recreating accounts would bypass the free tier's limits. Those rows contain no content and no identity.
Where your data lives
Servers are hosted on Railway in the United States. The services that touch data, each only for its job: Anthropic (card generation), Stripe (payments, as merchant of record), Resend (delivering sign-in emails), Google (optional sign-in). None of them receive your data for advertising, and we sell data to no one, ever.
Odds and ends
- Crammed is not directed at children under 13.
- Sign-in sessions last 60 days; signing out ends them on that device, and deleting your account ends them everywhere.
- If this policy materially changes, the date above changes and we will say so in the product — not bury it.
Contact
Questions, or anything this page should answer and doesn't: hello@crammed.study.