Privacy Policy
Last updated: July 8, 2026
Cram Brulee turns the course material you upload into study tools. This page explains what we collect, where it lives, who processes it, and the controls you have. The short version: your study material is used to build your study tools and for nothing else. We do not sell your data, and we do not show ads.
What we collect
- Your study material. The files you upload (PDFs, notes, slides) and the notes, quizzes, flashcards, and plans we generate from them.
- Account details. When you create an account: your email address, a display name if you set one, and your sign-in method. Authentication is handled by Google Firebase.
- Subscription status. Whether you have an active plan, handled by Stripe. Card numbers go directly to Stripe and never touch our servers.
- Usage analytics. Page views, session flows, and upload shape metrics (page counts and content statistics). Analytics never includes your file names or the content of your material.
Where your data lives
Your courses live in two places. A copy stays in your browser on each device so the app is fast and works offline. When you are signed in, your courses also sync to your account so you can back them up and open them on other devices. Synced data is stored with Cloudflare in the United States.
How AI processing works
To build notes, quizzes, and tutor answers, the relevant parts of your uploaded material are sent through our servers to AI providers (Google and OpenAI). These requests are made under commercial API terms, which do not permit the providers to use your content to train their models. Our API keys stay on our servers, and your material is not shared with anyone else.
What we never do
- We never sell your personal information or your study material.
- We never use your uploads for advertising or profiling.
- We never share your content with other users or third parties beyond the processors listed below.
Service providers we rely on
- Cloudflare hosts the app and stores synced course data.
- Google Firebase handles sign-in. Google and OpenAI provide the AI models that generate study content.
- Stripe processes payments and stores payment details.
- Amplitude and Cloudflare Web Analytics provide product analytics. Cloudflare's analytics are cookie-free.
Your controls
- Export. You can export a full backup of your courses from the dashboard at any time.
- Delete. Deleting a course removes it from your device and, when signed in, from your account sync.
- Cancel. You can cancel your subscription in Settings; access continues until the end of the paid period.
- Account removal. Email us and we will delete your account and its synced data.
Copyright
Upload only material you have the right to use for your own studying. If you believe content in the service infringes your copyright, contact us at the address below and we will respond promptly.
Changes and contact
If this policy changes in a way that matters, we will note it on this page with a new date. Questions or requests: team@ariaspark.com.