Privacy Policy

By Ava

Last updated: April 12, 2026

CramSnap ("we", "our", "us") respects your privacy. This policy explains how we collect, use, and protect your data when you use our mobile application.

1. Information We Collect

1.1 Account Information

• Email address — when you sign up or log in
• Display name — your chosen username
• Google account token — for Google Sign-In authentication

1.2 Data You Create

• Quizzes — questions, answers, categories you create and share
• Quiz results — your scores, completion status, time taken
• Community content — comments, ratings, shared quizzes

1.3 Usage Data

• App interaction events — quiz starts, completions, AI generation usage, battle activity (collected via Firebase Analytics)
• Device information — device model, OS version (anonymized)
• Crash reports — technical data when the app crashes (collected via Firebase Crashlytics)
• Daily streak data — app open dates, streak count (stored locally and synced to your account)

1.4 Data We Do NOT Collect

2. How We Use Your Data

• Provide and improve the CramSnap service
• Sync your quizzes and progress across devices
• Enable community features (sharing, battles, leaderboards)
• Send push notifications (streak reminders, battle challenges) — you can disable these in app settings
• Analyze usage patterns to improve the app (anonymized via Firebase Analytics)
• Detect and fix crashes (via Firebase Crashlytics)

2.1 Your AI Keys

CramSnap uses a "Bring Your Own Key" (BYOK) model for AI quiz generation. When you add an API key (e.g., Google Gemini, Groq), it is:

• Stored locally on your device only
• Never transmitted to our servers
• Used directly by your device to communicate with the AI provider
• Subject to the AI provider's own privacy policy

3. Advertising

CramSnap uses Google AdMob to show advertisements. AdMob may collect device identifiers and usage data to serve relevant ads. This data is governed by Google's Privacy Policy.

You can opt out of personalized ads in your device settings or within the app.

4. Data Sharing

We only share data with:

• Firebase (Google) — for authentication, analytics, crash reporting, and push notifications
• AdMob (Google) — for serving advertisements
• Other users — only the content you explicitly share (quizzes, comments, ratings, battle challenges)

We do NOT sell, rent, or trade your personal data.

5. Data Retention

• Your account data is retained while your account is active
• Analytics data is retained for 14 months (Firebase Analytics default)
• Crash reports are retained for 90 days (Firebase Crashlytics default)
• Deleted accounts are removed within 30 days

6. Your Rights (GDPR)

As a user in the UK/EEA, you have the right to:

• Access — request a copy of your data
• Rectification — correct inaccurate data
• Erasure — delete your account and all associated data (Settings → Delete Account, or email us)
• Data Portability — export your quizzes and data
• Object — opt out of analytics tracking
• Withdraw Consent — at any time via app settings or by contacting us

7. Data Security

We implement industry-standard security measures:

• Authentication via JWT tokens (JSON Web Tokens)
• All API communication encrypted via HTTPS/TLS
• Firestore security rules prevent unauthorized data access
• GDPR account deletion endpoint permanently removes all user data

8. Children's Privacy

CramSnap is not directed at children under 13. We do not knowingly collect personal data from children. If we become aware that a child under 13 has provided data, we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via the app or email. Continued use after changes constitutes acceptance.

10. Contact Us

For privacy-related questions or requests:

• Email: privacy@cramsnap.app
• Data Controller: Manuel L