Privacy Policy

1. Introduction

Cramigo LLC (“Cramigo,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and share your personal information when you use the Cramigo platform (the “Service”). By using the Service, you consent to the practices described in this policy.

2. Information We Collect

We collect information in the following categories:

Account Data

When you register for an account, we collect your email address, display name, and timezone preference. This information is necessary to create and maintain your account and personalize your experience.

Usage Data

As you use the Service, we automatically collect data about your study activity, including quiz results, study session durations, review progress, achievement milestones, and content interactions. This data powers our adaptive learning features and helps us improve the Service.

Payment Information

When you subscribe, payment processing is handled entirely by Stripe, a PCI DSS Level 1 certified payment processor. We never receive, store, or have access to your full credit card number, CVV, or other sensitive payment details. We only receive a customer identifier and subscription status to manage your account access.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service, including adaptive quizzes, review scheduling, and personalized study recommendations.
• Process your subscription and manage your account access.
• Track your study progress, streaks, XP, and achievements.
• Send transactional communications such as subscription confirmations, billing receipts, and account security alerts.
• Respond to your support requests, feedback, and content flag reports.
• Analyze aggregate usage patterns to improve content quality and platform performance.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Third-Party Services

We use trusted third-party services to operate the platform. Each has its own privacy policy governing how they handle data:

• Cloud infrastructure providers — for application hosting, database storage, and content delivery. Your account data and study records are stored in managed, enterprise-grade cloud infrastructure.
• Stripe — for payment processing and subscription management. Stripe handles all payment card data under PCI DSS Level 1 compliance.
• AI services — We use AI models to assist in generating study content. Your personal data is not sent to AI providers; only source reference materials are used for content creation.

5. Data Storage & Security

We take the security of your data seriously and implement industry-standard protections:

• All data is encrypted in transit and at rest using industry-standard encryption.
• Access controls are enforced at the database level, ensuring users can only access their own data.
• Passwords are securely hashed and are never stored in plaintext.

For more details, see our Security Policy.

6. Cookies & Tracking

Cramigo uses minimal cookies, limited to what is necessary for the Service to function:

• Authentication cookies — Session tokens that keep you signed in across sessions. These are essential for the Service to work and cannot be disabled.

We do not use third-party tracking cookies, advertising pixels, or analytics trackers that follow you across other websites. There is no cross-site tracking on Cramigo.

7. Your Rights

You have the following rights regarding your personal data:

• Access — You can view your profile information and study data at any time through the Settings and Dashboard pages.
• Correction — You can update your display name and timezone in Settings. Contact us for other corrections.
• Deletion — You can delete your account directly from your Settings page, or by contacting us at the email below. Personal data is permanently removed; anonymized, de-identified usage data may be retained as described in Section 8.
• Data Export — You can request a copy of your personal data in a machine-readable format.

To exercise any of these rights, contact us at legal@cramigo.com. We will respond to all requests within 30 days.

8. Data Retention

We retain your data for as long as your account is active and as needed to provide you the Service. Specifically:

• Active accounts — All account data, study progress, and usage history are retained for the duration of your account.
• Canceled subscriptions — Your account and data remain accessible until the end of your paid period. After that, your account enters a read-only state but data is preserved in case you resubscribe.
• Deleted accounts — When you delete your account, all personal data (name, email, payment information, social connections) is permanently deleted. Anonymized, de-identified usage data such as quiz performance statistics and content interaction metrics may be retained to improve our platform. This data cannot be linked back to you or any individual.

9. Children's Privacy

The Service is intended for users who are at least 18 years of age or the age of majority in their jurisdiction. We do not knowingly collect personal information from anyone under the age of 18. If we learn that we have collected personal data from a person under 18, we will delete that information promptly. If you believe a minor has provided us with personal data, please contact us at legal@cramigo.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide at least 30 days' notice via email to the address associated with your account or by posting a prominent notice on the Service. Your continued use of the Service after such notice constitutes acceptance of the updated policy. If you do not agree to the changes, you must stop using the Service before they take effect.

11. Contact Information

If you have any questions about this Privacy Policy or your personal data, please contact us: