1. Introduction

Welcome to CramIt! This Privacy Policy explains how we collect, use, and protect your information when you use our service. Your privacy is important to us, and we are committed to being transparent about our data practices.

2. Information We Collect

2.1. Information You Provide

When you use CramIt, we collect the following information:

• Account Information: When you create an account, we collect your email address, username, and password (encrypted).
• Authentication Data: If you choose to sign in with Google, we receive your Google profile information including email address and display name.
• User Content: Text you input to generate quizzes, drawings created using our drawing tools, and quiz answers.
• User Preferences: Such as dark mode settings, language preferences, educational role (teacher, student, etc.), subjects of interest, grade level focus, feature preferences, and usage frequency.
• Special Instructions: Any custom instructions you provide for quiz generation.
• Referral Information: If you participate in our referral program, we generate unique referral links and track their usage to credit your account with bonuses.

2.2. Information Collected Automatically

To improve our service and ensure its functionality, we automatically collect the following information:

• Usage and Interaction Data: We collect information about how you interact with our service. This includes which features you use (e.g., quiz generation, flowchart creation), buttons you click, your session duration, and actions taken to enforce daily usage limits.
• Device and Connection Information: We collect technical information about the device and browser you use to access CramIt. This includes your browser type and version, operating system, device type (desktop or mobile), screen resolution, preferred language, timezone, and connection type. This helps us optimize the app for different devices and diagnose technical issues.
• Analytics Data: We use both our internal analytics system and Google Analytics to understand user behavior and improve the service. This data is aggregated and helps us understand trends, feature popularity, and conversion rates.

2.3. Cookies and Local Storage

We use browser local storage to:

• Store your quiz data and drawings
• Remember your dark mode preference
• Save special instructions
• Cache user data for faster loading and improved experience
• Store model preferences for premium users
• Store temporarily generated quiz content
• Maintain authentication state between sessions

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide Our Service: Generate quizzes based on your input, manage user accounts, and enable features like quiz sharing and saving.
• Process Content with AI: Your provided text and instructions are sent to third-party AI models to generate quiz questions and flowcharts. This content is not used to train the third-party models.
• Maintain and Improve: Fix bugs, analyze usage patterns, and enhance user experience.
• Enforce Daily Limits: Track usage to enforce daily usage limits based on your subscription level.
• Personalization: Save your preferences and settings to provide a customized experience, including educational role, subjects, grade level, and feature preferences.
• Security: Protect our service and users from fraudulent activity and ensure secure authentication.
• Communication: Send verification emails and important account notices.

4. Data Storage and Security

4.1. Where Your Data is Stored

• Firebase Authentication: We use Firebase Authentication to securely manage user accounts and authentication.
• Firestore Database: User data, including quiz content, preferences, and usage statistics, is stored in Firebase's Firestore database.
• Local Browser Storage: Some data is stored locally on your device using browser localStorage to improve performance and maintain state between sessions, including cached user data for faster authentication.

4.2. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Secure authentication processes with persistent session management
• Encryption of sensitive data
• Role-based access controls
• Regular security updates and monitoring

5. Data Sharing and Third Parties

5.1. Service Providers

We share information with the following third-party service providers to help us deliver our service:

• Google Firebase: For authentication, database, and hosting services.
• Stripe: To process payments and manage subscriptions. We do not store your full credit card information on our servers.
• OpenAI & Groq: To provide AI-powered features like quiz and flowchart generation. The content you provide is sent to these services for processing and is governed by their respective privacy policies.
• Google Analytics: For anonymized usage analytics to help us improve our service.

5.2. Legal Requirements

We may disclose your information if required by law, legal process, or governmental request.

5.3. Business Transfers

If CramIt is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You can access your account information through your profile.
• Correction: You can update your profile information and preferences at any time through the "Update Preferences" option in your profile.
• Deletion: You can request deletion of your account and associated data.
• Opt-Out: You can opt out of promotional communications.
• Data Export: You can download your saved quizzes and other content.

7. Children's Privacy

CramIt is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

8. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this policy.

9. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

[email protected]

10. California Privacy Rights

If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA). These include:

• The right to know what personal information we collect
• The right to request deletion of your personal information
• The right to opt-out of the sale of your personal information (note that we do not sell your personal information)

11. International Data Transfers

Your personal information may be stored and processed in any country where we have operations or where we engage service providers. By using CramIt, you consent to the transfer of information to countries outside of your country of residence, which may have different data protection rules.

12. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, CRAMIT AND ITS OPERATORS, OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING WITHOUT LIMITATION, LOSS OF PROFITS, DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES, RESULTING FROM:

• Your use or inability to use our service
• Any content generated through our service, including quiz content that may be inaccurate or objectionable
• Unauthorized access to or alteration of your data
• Statements or conduct of any third party on our service
• Any other matter relating to the service

Our total liability for any claims arising from or relating to these terms or the service is limited to the amount you paid us to use the service in the past 12 months.

13. User Responsibilities and Acceptable Use

As a user of CramIt, you are responsible for:

• The accuracy and appropriateness of content you input
• Maintaining the security of your account credentials
• Using the generated quizzes in accordance with applicable laws and regulations
• Not using our service for cheating, plagiarism, or other academic dishonesty

You agree not to use CramIt to:

• Generate or distribute harmful, offensive, or illegal content
• Infringe on intellectual property rights
• Attempt to breach or circumvent security measures
• Disrupt or degrade the performance of the service

14. Disclaimers

CramIt provides an AI-powered quiz generation service. While we strive for accuracy, we make no warranties or guarantees regarding:

• The accuracy, completeness, or reliability of generated quizzes
• The suitability of quizzes for educational or testing purposes
• Uninterrupted or error-free service

CRAMIT IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED.

15. Indemnification

You agree to defend, indemnify, and hold harmless CramIt and its operators from and against any claims, liabilities, damages, losses, and expenses, including reasonable attorneys' fees, arising out of or in any way connected with your:

• Access to or use of the service
• Violation of these terms
• Content you input or quizzes you generate
• Violation of any third-party right

16. User-Generated Content

By submitting content to our service:

• You retain ownership of your intellectual property
• You grant us a non-exclusive, royalty-free license to use, store, and process your content to provide the service
• You represent that you have all necessary rights to the content you submit
• You acknowledge that AI-generated content may be similar across users with similar inputs

17. Force Majeure

CramIt will not be liable for any failure to perform due to causes beyond its reasonable control including, but not limited to, acts of God, war, terrorism, pandemic, riots, embargoes, acts of civil or military authorities, fire, floods, accidents, network infrastructure failures, or strikes.

18. Severability

If any provision of these terms is found to be unenforceable or invalid, that provision will be limited or eliminated to the minimum extent necessary so that the remaining terms will continue in full force and effect.

19. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of the Philippines, without regard to its conflict of law provisions. Any legal disputes arising from this policy or our data practices shall be subject to the exclusive jurisdiction of the courts of the Philippines.

20. Changes to Terms

We reserve the right to modify these terms at any time. Your continued use of CramIt after such changes constitutes your acceptance of the new terms.