What Cram keeps, and what it doesn't.

Who we are. Cram is run by Rivon Dev LLC (“Rivon”, “we”). This policy covers the Cram website and app. Questions about it go to support@rivondev.com.

Your account. Your email address, the name you give us, and the year you were born. When you make an account we also record that you agreed to the Terms of Use and this policy, when, and which version. Sign-in is handled by our cloud database provider; we never see passwords in plain text. If you choose “Continue with Google”, Google tells us your name, email address and profile picture, and nothing from your Google account beyond that. Staff who can open Cram's developer tools must use two-step sign-in, and every change to who has that access is logged.

Your files. Text is read from your documents on your device (in the app) or in your browser (on the web) and sent to an AI model to write your notes and guides; photos of pages and homework are sent as images. What Cram reads, the digests and your guides are stored in your account so they can be reused, and a file you've already added is never read — or charged for — twice. If you've told Cram which school you go to, and another student at the same school (or your teacher) has already added the exact same document (the very same file — for example, the same handout from the same class), Cram may reuse the AI's reading of it instead of sending it to the AI again. This applies only to documents (PDFs, Word files, slides and text files) — never to photos, scans or recordings — and never to anything added by an account under 13. Shared readings are kept for up to a year. Only that reading — the text the AI took from the file — is reused, never a guide, notes or a chat written for one person: nobody is told that anyone else uploaded it or who they are, and nothing else from either account is shared. Pasting a link (for example a Google Doc shared with anyone who has the link) makes Cram fetch that page's text from the site it's on. The original file stays on the device you added it from so you can open it in Cram's file viewer; it is only copied to your account if you choose “Keep a copy in your account”. Markings you draw on a file are saved to your account. Nothing you upload is used to train any model.

Where an answer came from. When Cram uses your class files, it shows which file and page (“From: Ch 4 notes, p. 2”) and can open the file with the passage boxed. If you tell us whether the box was the right spot, we keep your answer on your account and add it, with nothing about you, to an overall count of how often Cram finds the right spot.

Recorded lectures. In the app, a lecture is turned into text by Apple's speech recognition — on the device only. If that is unavailable, Cram asks you to type or upload written notes. On the website, the recording is sent a minute at a time to an AI service provider to be turned into text. Recording into a unit's files keeps only the transcript. Recording or uploading on the Lectures page also keeps the audio in your account, in private storage only you can play (through links that expire after an hour), so you can listen back with the transcript; while you record, the last few seconds are kept in your browser until they've been sent, so a closed tab doesn't lose them. When you stop, the transcript is sent once to an AI model to write your lecture notes, flashcards and a short review list, which are kept with the lecture. A teacher's lecture has their students' names taken out before it goes to that model, stays private to the teacher until they post it, and then can be opened only by the students in the periods they chose. Deleting a lecture deletes its audio, and deleting your account deletes all of them. Dates the teacher mentioned are only added to your calendar if you tap to add them.

Asking Cram. Your questions, any photos you add, and Cram's answers are kept as your chat history so you can pick up where you left off on your phone or the web. If you ask the same question again, Cram may show your earlier answer instantly, at no charge. What you type may also be checked by an automated moderation service run by one of our AI service providers so that, if a student writes that they might hurt themselves, Cram answers with where to get help (like the 988 Suicide & Crisis Lifeline) instead.

Answers shared within your class. If you've joined a teacher's Cram class, a supported arithmetic problem or short reference question with nothing personal in it — “what's the formula for density?” — may be answered with the answer Cram already wrote for a classmate who asked exactly the same thing. Only an exact eligible question and a code-checked arithmetic explanation or a vetted reference explanation are shared, and only inside that one class: never anyone's name, account, photos, own work, notes, follow-up questions or the time they asked. It still counts as one of your solves and costs the same credits as asking Cram fresh. Your teacher can switch this off for the class (it starts off in district classes and classes with students under 13 unless the school has authorized Cram), and you can stop your own answers being shared in Settings › Your class (“Share my solved problems with my class”) — turning it off, deleting the solve or deleting your account takes back what you shared. An answer anyone in the class reports as wrong is never shared again. Shared answers are deleted after 60 days, or 21 days after last used. Your data download lists the answers you contributed. Students under 13 and students whose age is unknown cannot contribute. Photos are never stored in the class answer pool. Optional scan matching is limited to clearly readable printed arithmetic; other problems receive the usual checked solve.

When you tell Cram an answer is wrong. We keep your report (the problem, Cram's answer, your note and any photo you add) so we can fix what went wrong. Only Cram's developers can see it, and it's deleted when you delete your account.

Your school and teacher (optional). You can add your school and, for each class, your teacher's name and the course, or link a class to your teacher's Cram class. Only you can see them. From them Cram makes a code that can't be turned back into names, so students in the same class land on the same class.

Helping your class, and improving Cram. When Cram gets a problem wrong and the mistake is confirmed, your class remembers that the problem was answered wrong and what kind of mistake it was — a fingerprint of the problem, not its text, and never who you are, your work, your photos or your questions. When a classmate gets the same problem, Cram takes one more careful look — but only once at least five different students in the class have reported that problem, so it can never point back to one person. Separately, we count, without names or anything you wrote, which topics and kinds of mistake come up most, so Cram can check those more carefully. We only look where at least five different students are involved, and we never see who they were. Changes based on these counts go live only after a person at Rivon approves them. You can turn this off at any time in Settings › Your class (“Help improve Cram for my class”). It is on by default for beta testers, who are told when they join. Until Cram knows your birth year, nothing of yours is added.

Error reports. When something breaks, the app or website sends a short report — what failed, where, and the app version — with email addresses, sign-in tokens, ids and quoted text removed first. Reports are kept 90 days.

Studying offline. Pages you've opened recently and flashcard answers made without a connection are kept in your browser or on your phone until they can be sent. They're cleared when you sign out.

Voice mode. What you say to Cram is turned into text on your phone by Apple's speech recognition; the recording never leaves the device. The text of what you said, your first name (so Cram can use it), and the conversation so far are sent to an AI service provider to write each reply, and — with a natural voice — the reply's text is sent to an AI service provider to be spoken. With the iPhone voice or the on-device voice, speech is made on your phone and nothing extra is sent.

Lessons, notes and podcasts read aloud. When Cram reads a lesson, a study guide, notes or a lecture transcript to you on the website, or makes a podcast episode from your material, the text (and, for a podcast, the script an AI service provider writes from your material, with names removed) is sent to an AI service provider to be turned into speech (the free “online” voices are made by a different one); neither is sent your name or account. With an “on this device” voice, the voice model is downloaded to your browser once (from a public model library) and speech is made on your device, so nothing extra is sent. With captions only, nothing is sent.

Emails. We email you about your account (sign-in links, password resets, important changes). If you've joined a class or linked a parent, Cram may also send short study summaries; every one of those has an unsubscribe link.

On-device voice reports. If you use the experimental on-device voice, the app sends an anonymous note when it stops unexpectedly, and once a day it was used: your iPhone model, iOS version, the app's version, the voice, and a random number made on your phone that isn't tied to you or your account.

Interrupted uploads. Cram can keep unfinished file uploads on your device, separated by account, for up to 24 hours of recovery eligibility. You choose whether to resume or discard them. Expired copies are removed when recovery storage is next opened; opening another account removes the previous account's queued copies. Completed files are removed from the recovery queue. This is separate from files you have saved in a unit.

Shared guides. A guide you share lives behind an unlisted link that search engines are told not to index. Anyone with the link can open it unless a separate access restriction is enabled. A shared page is a copy taken when you shared it, so deleting the original guide does not remove it. Stop sharing at any time from the guide or You › Settings › Shared links, and the shared page is deleted. Students under 13 can't publish shared pages.

Study groups and messages. Joining a class board stores the display name, XP and streak you choose against a key for that install of the app, not your account. Messages you send in a group, and decks or practice tests you share there, are stored under that key and your display name so the people in the conversation can read them. Before a message is delivered, its text is checked by an automated moderation service run by one of our AI service providers to stop abuse. You can delete your messages and groups any time in Settings › Privacy.

Asking first. The first time Cram would send your work to an AI, it tells you what goes and asks. You can change your answer any time in Settings › Privacy; with it off, nothing is sent.

Teacher verification. If you apply for a free teacher plan, we store your confirmed school email, school name, name, and the staff badge photo you submit. The photo is sent to an AI service provider, which reports only what is printed on it (role, name, school, years); Cram's own rules then compare that with your school email and name. When everything matches you are approved automatically, a student ID is declined automatically, and anything else is decided by an authorized reviewer. We delete the badge photo as soon as it is decided, or after a reviewer has looked at it. We keep a short fingerprint of the photo (never the photo) so one badge can't be used on two accounts, a record of each application and decision, and your IP address only as a keyed hash, for 30 days, to limit abuse.

What your teacher sees. If you join a teacher's Cram class with its code, your teacher sees that you're in the class and the name you joined with. For the materials, practice and assignments that teacher publishes to the class, your teacher sees your answers, your scores, when you worked on them, and which topics look hard for you, and Cram may email your teacher a summary of this. If you share your progress with the class (it's on unless you turn it off on the class page, though a teacher can require it to join), your results from your own Cram lessons on that class's topics are added to class-wide counts — only when at least three students are counted, and without your name.

What your teacher doesn't see. Your own files, the guides and notes Cram made from them, your chats with Cram, your photos and your messages. Teachers also never see your email address through Cram.

Using Cram for a class without a school agreement. A teacher can invite a class to use ordinary free Cram accounts. Each student then has their own account with Rivon under these terms and this policy, and can download or delete it at any time. Rivon uses what students add only to run Cram for them and their class as described here — never for ads, never sold.

Cram asks everyone the year they were born. If you're under 13, a parent or guardian has to say yes before Cram collects anything from you or sends your work to an AI — or your school can, for school work. Until then Cram's study features stay closed. Nothing of yours is added to our overall counts unless your parent has agreed, and your work does not contribute to class notes or shared answers. Your chat history is kept for 90 days. You can't publish shared pages.

How this works. Cram asks the year you were born on a neutral screen, with no year chosen for you and no hint of where any line falls, and the answer can't be changed later. If Cram learns it has collected information from a child under 13 without a parent's permission, we delete it. A parent who thinks that has happened can write to support@rivondev.com. We don't require a child to share more than Cram needs to work, we don't show ads, and we don't sell or share a child's information with anyone for their own purposes.

When your school says yes. A school or district can consent for its students under 13 in place of a parent, for school use, as the law allows schools to do. Its admin first agrees to a statement that the school is authorized to do this, has told parents, and will handle their requests to see or delete their child's information — the school takes responsibility for that, and Cram relies on it. It covers a student only while they're a member of a class run by one of that school's teachers, and stops the moment they leave the class or the school turns it off. Under it a student can use Cram's study features for school work, including their own notes and files; Cram doesn't use their information for anything commercial — no ads, no marketing email, no anonymous quality data, nothing shared with other students, and no voice recording. If Cram has a parent's email, it tells them the school has approved Cram, and a parent can give their own permission or say no at any time — a parent's no overrides the school's yes for their child.

If your child is under 13, Cram asks your permission first — by email to the address your child gives us, or with a code your child hands you. You sign in with that email, read the notice, and complete a second code sent to that email before permission is granted. At any time, from Cram's /consent page, you can see and download your child's information, withdraw permission (Cram stops collecting anything new), or delete the account and everything in it. If your child's school has consented for class use (see “When your school says yes”), you can still take over with your own permission, or say no from the link in our email — your no overrides the school's. You can also contact the school or us about access and deletion rights. A parent linked to a student of any age (with a code the student shares) sees what was worked on and what's hard — not photos, answers or messages. Parents of students 13 to 17 can write to support@rivondev.com with questions or concerns about their teen's account.

A teacher can use Cram with a class on ordinary free accounts, as described under “Your teacher's class”; that doesn't make Cram a contractor of the school. A school or district that wants Cram to work for it as a school official under FERPA signs an agreement with Rivon and authorizes Cram. Where the school-official exception applies under that arrangement, student information is used only to provide Cram to the school — no ads, no profiling for other purposes, no sale — and is deleted when the school asks or the contract ends. A school or district that consents for its students under 13 in place of their parents represents that it is authorized to, that it has notified parents, and that it will handle their review and deletion requests; it accepts responsibility for that authorization, and Cram relies on it. New district conversation and photo monitoring is paused while class scope and notice controls are reviewed. Existing records follow the applicable retention period; district membership does not authorize collection of personal conversations.

These companies work for Rivon to run Cram. They get only what their job needs, and may use it only to provide their service to us.

Cloud hosting and database providers store accounts, files and study data, handle sign-in, and run the website. Our hosting provider also counts page visits on the website (which page, the kind of device and browser, and the country), without cookies, without your name or account, and without anything after the page's address, so we can see which pages people use. AI service providers process information on Cram's behalf under contracts that don't allow them to use it to train their models: they write answers, notes, guides and lessons from what you send, turn website lecture recordings into text, read lessons aloud, read teacher badge photos, and check what students type and group messages for abuse. Google signs you in if you choose “Continue with Google”. Apple handles in-app payments and may turn speech into text. Our email delivery provider sends our emails. If you add your own AI service key in the app's settings, what you send goes to that company under your own agreement with it.

Ads on some free accounts. Free accounts for people aged 13 or older that aren't connected to a school, class, teacher or parent may see a small non-personalized ad from Google now and then — at the end of a flashcard round or under a finished homework answer, never in the middle of studying. Non-personalized means the ad isn't chosen from a profile of you: Google sees what any website visit sends (your IP address and browser details, used for the rough location, to count the ad and to stop fraud), and Cram never gives Google your name, email, age, classes or anything you study. Under-13s, school and class accounts, and every paid plan never see ads. To remove them, upgrade to any paid plan. If Cram ever offers credits for watching an ad, that will always be your choice.

We don't sell personal information or share it for advertising, and we don't give it to anyone else except when the law requires it (for example a valid court order), to protect someone's safety, or as part of a sale or merger of Rivon — in which case this policy would keep applying to it.

Download your data. Account › Your data on the web, or Settings › Privacy in the app, provides your account records and original uploaded files. Exports are prepared in the background as compressed JSON account records with private download links to every original file. Links expire after 24 hours; request a new export to renew them.

Delete your account. Account › Delete account on the web, or Settings › Account › Delete account in the app, removes your online account and its stored files. The updated app also removes the active study library on the device requesting deletion. Remove copies on other devices, prior local archives and files you downloaded separately. It can't be undone. Subscriptions are billed by Apple and canceled from your Apple account settings.

Do not sell or share. Cram does not sell personal information and does not share it for cross-context behavioral advertising. The ads some free accounts may see are non-personalized (see “Who helps us run Cram”) and use no advertising profile of you, so there is nothing to opt out of; upgrading removes them.

Security. Data is encrypted in transit and at rest with our providers. Access to student data is limited to what running Cram needs, staff access requires two-step sign-in and is logged. No system is perfectly secure; if a breach affects your information, we'll tell you and anyone else the law requires.

Cram is in beta. Cram is still being built and tested, so features — and with them what Cram collects — may change. When that changes something in this policy that matters, we'll update it first.

AI can be wrong. What Cram writes comes from AI models and can be wrong; see the Terms of Use.

Where Cram is offered. Cram is for people in the United States.

Changes. When this policy changes in a way that matters, we'll tell you in the app before it takes effect, and ask parents again where the law requires it.

Questions. Write to support@rivondev.com.