Privacy Policy

1. Introduction

Cramigo LLC (“Cramigo,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and share your personal information when you use the Cramigo platform (the “Service”). By using the Service, you consent to the practices described in this policy.

2. Information We Collect

We collect information in the following categories:

Account Data

When you register for an account, we collect your email address, display name, and timezone preference. This information is necessary to create and maintain your account and personalize your experience.

Usage Data

As you use the Service, we automatically collect data about your study activity, including quiz results, study session durations, spaced repetition progress, achievement milestones, and content interactions. This data powers our adaptive learning features and helps us improve the Service.

Payment Information

When you subscribe, payment processing is handled entirely by Stripe, our third-party payment processor. We never receive, store, or have access to your full credit card number, CVV, or other sensitive payment details. We do receive your Stripe customer ID and subscription status to manage your account access.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service, including adaptive quizzes, spaced repetition scheduling, and personalized study recommendations.
• Process your subscription and manage your account access.
• Track your study progress, streaks, XP, and achievements.
• Send transactional communications such as subscription confirmations, billing receipts, and account security alerts.
• Respond to your support requests, feedback, and content flag reports.
• Analyze aggregate usage patterns to improve content quality and platform performance.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Third-Party Services

We use the following trusted third-party services to operate the platform. Each has its own privacy policy governing how they handle data:

• Supabase — Authentication, database hosting, and file storage. Your account credentials and study data are stored in Supabase's managed PostgreSQL infrastructure.
• Stripe — Payment processing and subscription management. Stripe handles all payment card data under PCI DSS Level 1 compliance.
• Vercel — Application hosting and delivery. Vercel serves the Cramigo web application through its global edge network.
• Anthropic — AI content generation. We use Anthropic's Claude models to assist in generating study content. Your personal data is not sent to Anthropic; only source reference materials are used for content creation.

5. Data Storage & Security

We take the security of your data seriously and implement industry-standard protections:

• All data is encrypted in transit using TLS 1.2 or higher.
• Data at rest is encrypted using AES-256 encryption through our infrastructure providers (Supabase and Vercel).
• Database access is protected by PostgreSQL Row-Level Security (RLS) policies, ensuring users can only access their own data.
• Passwords are hashed using bcrypt and are never stored in plaintext.

For more details on our security practices, see our Security Policy.

6. Cookies & Tracking

Cramigo uses minimal cookies, limited to what is necessary for the Service to function:

• Authentication cookies — Supabase auth tokens that keep you signed in across sessions. These are essential for the Service to work and cannot be disabled.

We do not use third-party tracking cookies, advertising pixels, or analytics trackers that follow you across other websites. There is no cross-site tracking on Cramigo.

7. Your Rights

You have the following rights regarding your personal data:

• Access — You can view your profile information and study data at any time through the Settings and Dashboard pages.
• Correction — You can update your display name and timezone in Settings. Contact us for other corrections.
• Deletion — You can request full deletion of your account and all associated data by contacting us at the email below.
• Data Export — You can request a copy of your personal data in a machine-readable format.

To exercise any of these rights, contact us at legal@cramigo.com. We will respond to all requests within 30 days.

8. Data Retention

We retain your data for as long as your account is active and as needed to provide you the Service. Specifically:

• Active accounts — All account data, study progress, and usage history are retained for the duration of your account.
• Canceled subscriptions — Your account and data remain accessible until the end of your paid period. After that, your account enters a read-only state but data is preserved in case you resubscribe.
• Deleted accounts — When you request account deletion, all personal data, study progress, and associated records are permanently purged from our systems within 30 days.

9. Children's Privacy

The Service is intended for users who are at least 18 years of age or the age of majority in their jurisdiction. We do not knowingly collect personal information from anyone under the age of 18. If we learn that we have collected personal data from a person under 18, we will delete that information promptly. If you believe a minor has provided us with personal data, please contact us at legal@cramigo.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide at least 30 days' notice via email to the address associated with your account or by posting a prominent notice on the Service. Your continued use of the Service after such notice constitutes acceptance of the updated policy. If you do not agree to the changes, you must stop using the Service before they take effect.

11. Contact Information

If you have any questions about this Privacy Policy or your personal data, please contact us: