Privacy Policy

This Privacy Policy explains how CramLoop collects, uses, protects, and shares information when teachers, students, schools, and other users access the service.

Information we collect

Depending on how CramLoop is used, we may process account information such as name and email address; teacher and student profile information; teacher-created tests, questions, assignments, and resources; student responses, scores, attempt history, study activity, and integrity events; and limited technical information needed to operate, secure, and troubleshoot the service.

CramLoop is not designed to collect precise geolocation, biometric identifiers, contact lists, or advertising identifiers from students.

How information is used

We use information to authenticate users, deliver tests and practice activities, calculate and save results, provide teacher reporting, connect students with authorized teachers, save progress, prevent abuse, troubleshoot problems, protect accounts, and improve the reliability and security of CramLoop.

Student and school data

Student information is used to provide educational features requested by the student, teacher, or school. CramLoop does not sell student personal information and does not use student information for targeted advertising. Teachers can access student information that is reasonably necessary to manage assignments, attempts, grades, and reports for students connected to them.

When a school uses CramLoop, the school remains responsible for determining whether parental consent, a data-processing agreement, or other authorization is required under its policies or applicable law. CramLoop will work with schools on reasonable privacy and security review requests.

Service providers

CramLoop relies on service providers to operate the platform. Current core infrastructure includes Vercel for application hosting and delivery and Supabase for authentication and database services. Service providers receive information only as needed to provide their contracted services and are subject to their own security and privacy obligations.

Sharing of information

We do not sell personal information. We may disclose information to service providers that help operate CramLoop, when directed or authorized by a school or user with appropriate authority, when required by law, or when reasonably necessary to protect users, investigate abuse, or secure the service.

Data retention and deletion

We retain information for as long as reasonably necessary to provide the service, maintain educational records requested by users or schools, protect platform security, resolve disputes, and meet legal obligations. Schools and users may request correction or deletion of eligible account or student information. Some records may be retained when required for security, legal, or legitimate recordkeeping purposes.

Security

CramLoop uses HTTPS encryption in transit, authenticated access, database access controls, and role-based application controls intended to limit access to information. No online service can guarantee absolute security, but we work to reduce unnecessary access and protect teacher-only and student information.

Children and minors

CramLoop is an educational service that may be used by minors through a teacher, school, parent, or guardian. Schools and teachers should use CramLoop in accordance with applicable student-privacy requirements and their district policies. CramLoop does not knowingly use student information for advertising or unrelated commercial profiling.

International and state-specific rights

Privacy rights can vary by location. Where applicable, users or authorized school representatives may request access, correction, deletion, or other action concerning eligible personal information.

Changes to this policy

We may update this policy as CramLoop changes or legal requirements evolve. Material revisions will be posted with an updated effective date.