Privacy Policy

CramLab is a study tool that brings your Canvas and Blackboard coursework into one place. This policy covers both the CramLab web app and the CramLab browser extension. It explains what we collect, why, where it lives, and the control you have over it. We wrote it to be read, not to hide behind.

The short version

• We collect your account details and the coursework you choose to sync.
• The extension only pulls the coursework you ask it to, and your school login stays private to you.
• Your data is kept private to your account.
• We do not sell your data, run ads against it, or share it for marketing.
• You can delete your account and your data at any time.

Who we are

CramLab (“we”, “us”) operates the CramLab web app at cramlab.io and publishes the CramLab browser extension. If you have questions about this policy or your data, contact us at privacy@cramlab.io.

What we collect

Account information

When you create an account we collect your email address. Your password is handled by our sign-in provider and is never visible to us.

Coursework you sync

The coursework you choose to bring in from Canvas or Blackboard, such as your courses, assignments, files, and grades. You pick what to sync and can stop anytime.

Basic technical data

Like any website, our servers see basic request data (such as your IP address and timestamps) to run securely. No ad trackers, no cross-site snooping.

How the extension works

The extension only reads your coursework when you press Sync, and only your own data. Your school login stays with you and is never stored by us.

How we use your data

We use your synced coursework and account information to provide the product: to show your deadlines, courses, and materials; to power study features such as flashcards, quizzes, and practice grounded in your own materials; and to keep your account secure. We do not sell or rent your coursework, and we do not use it to train models for anyone else.

Where your data is stored and who can see it

Your data is stored securely on our infrastructure and is kept private to your account. Access by our team is limited to what is needed to operate and support the service.

Service providers

A few boring-but-reputable companies help us keep the lights on: sign-in, hosting, and payment processing if you go paid. They only touch your data to do their job, under their own security and privacy commitments.

We do not sell your data or share it for anyone’s marketing or advertising. We are building a study app, not a data brokerage.

Browser permissions the extension requests

Chrome shows the permissions an extension can use. Here is what CramLab requests and why:

• Reading the page you are on, when you click Sync: to read your coursework from the LMS page you are viewing, only when you press Sync.
• Access to the sites your coursework lives on: schools use many different Canvas and Blackboard addresses, and course materials can live on Google Docs, so the extension may ask for access to those sites. It uses that access only to read the content you choose to sync.
• Knowing which page you are on: to detect when you are on a supported LMS page so the extension can offer to sync it.
• Local storage on your device: to keep you signed in and remember your preferences.

Data retention and deletion

We keep your synced coursework for as long as your account is active so the app is useful to you. You can delete synced content by removing courses, and you can request deletion of your account and associated data by emailing privacy@cramlab.io. When you delete your account, we remove your personal data from our production systems, subject to any limited retention required for legal or security reasons.

Security

Data is encrypted in transit. Your records are kept private to your account, and we follow least-privilege practices for internal access. No system is perfectly secure, but we work to protect your data and to limit what is collected in the first place.

Students and education records

CramLab is a tool you direct: it syncs your own education records at your request and shows them back to you. We do not disclose your education records to third parties, or to your university, for their own purposes. We are not Chegg. Chegg hands your data to your school when they come knocking; we do not. CramLab is intended for use by students in higher education and is not directed to children under 13. (If you are under 13: come back for undergrad. We really do not need that kind of stress.)

Changes to this policy

If we make material changes to this policy, we will update the date above and, where appropriate, notify you in the app. Continued use after an update means you accept the revised policy.

Contact

Questions, requests, or concerns: privacy@cramlab.io.