Privacy Policy

1. Who we are

CramBrief ("CramBrief", "we", "us") is provided by CramBrief, who is responsible for your personal information under this policy. You can contact us at crambrief@gmail.com.

2. What we collect

Information you give us

• Account details: your email address and name. If you sign in with Apple or Google, we receive your name and email (or Apple's private relay address) from them.
• Study and business material: the files you upload (PDFs, Word and text documents, spreadsheets such as CSV and Excel files, and photos of notes, which may include anything visible in the photo) and the names you give them.
• Chats: the questions you ask about your files and the answers you receive.
• Voice chats: when you use voice chat, your voice is streamed in real time so the tutor can hear and answer you. We save a text transcript of the conversation to your file's history. We don't keep recordings of your voice.
• Phone numbers: if you add phone numbers to call your tutor, we store them with a label you choose.
• Invites: your invite code and, if a friend joins with it, their first name so you can see who joined.
• Support messages you send us.

Information created as you use CramBrief

• Processed content: text we extract from your files (including text read from photos and scanned pages), the page structure, and search data ("embeddings") that let us find the right pages for your questions.
• Credits and plans: your credit balance and history (for example "Summary · Biology", "Bought 150 credits"), your plan, and its renewal date.
• Purchases: records of your in-app purchases from Apple or Google, through our payments provider. We never see or store your card details.
• Device and settings: a notification token if you allow push notifications, your language, theme and app preferences, the app version you use, and your device model and operating system version.
• Device identifier: a random identifier created by the app and stored on your device. We only receive a one-way (hashed) version of it, which we use to prevent abuse, such as the same device repeatedly claiming free trials. It is not an advertising identifier and is not shared with anyone.

We don't collect your precise location, contacts, browsing history or advertising identifiers, and we don't use analytics or advertising trackers.

3. How we use it

• To run your account and sign you in.
• To read, organise and display your files, and to create summaries, answers, extracted text and voice replies about your material.
• To keep track of credits, plans and purchases, and to prevent fraud and abuse.
• To send you service messages: sign-in codes, and notifications you've allowed (for example when a file is ready or credits are added).
• To provide support and to keep CramBrief secure and working properly.

We use your information only to provide CramBrief. We do not sell it, use it for advertising, or use your files to train AI models.

Legal bases. Where the Nigeria Data Protection Act 2023, the GDPR or similar laws apply, we rely on: performing our contract with you (to provide the app); our legitimate interests (security, fraud prevention, improving reliability); your consent (for example push notifications and microphone access, which you can withdraw in your device settings); and legal obligations (for example keeping purchase records).

4. Who we share it with

We share information only with service providers that run CramBrief on our behalf, under contracts that limit their use of it:

OpenAI processes requests under its API terms, which don't allow it to use your data to train its models; it may keep request data for a limited time (up to 30 days) to detect abuse. We may also disclose information if the law requires it, to protect our users or our rights, or as part of a merger or sale of the service (and we'll tell you if that happens).

5. Where your data is stored

Our main database and file processing are in the European Union. Some providers (such as OpenAI) process data in the United States and other countries. When your information is transferred outside your country, we rely on safeguards such as the providers' data processing agreements and standard contractual clauses.

6. How long we keep it

• Files, extracted text and chats: until you delete them or your account.
• Voice chats: no audio is kept; transcripts stay in your file's history until you delete the file or your account.
• Credit and purchase records: as long as your account exists, and longer where the law requires (for example for tax and accounting).
• Backups: deleted data can remain in encrypted backups for up to 30 days before it's overwritten.

7. Your rights and choices

Depending on where you live, you can ask to access, correct, export or delete your personal information, object to or restrict some processing, and withdraw consent. You can:

• Delete individual files (with their pages and chats) in the app.
• Delete your account and its data from the app's Settings, or by emailing us.
• Turn notifications and microphone access off in your device settings.
• Contact us at crambrief@gmail.com for any other request. We'll reply within 30 days.

If you're in Nigeria you can also complain to the Nigeria Data Protection Commission, and in the EU or UK to your local data protection authority.

8. Security

We use encryption in transit (HTTPS), access controls that let each account see only its own data, and providers with strong security practices. No system is perfectly secure, so please keep your email account and devices protected too.

9. Children

CramBrief is for people aged 13 and over. We don't knowingly collect personal information from children under 13. If you believe a child under 13 has given us information, contact us and we'll delete it. Where local law requires a higher age for consent, a parent or guardian must agree on the user's behalf.

10. Changes to this policy

We may update this policy as CramBrief changes. We'll post the new version here with a new effective date, and tell you in the app or by email about important changes.

11. Contact

CramBrief
Email: crambrief@gmail.com