Privacy Policy
Last updated: May 20, 2026
1. Introduction
2. Information We Collect
Account information — When you register we collect your name, email address, and a hashed password.
Payment information — Billing details (card number, expiry, CVV) are collected and processed directly by Stripe. We only store the last four digits of your card and your Stripe customer ID — we never see or store full card data.
Usage data — Which exams you attempt, question responses, scores, session durations, and mastery progress.
Technical data — IP address, browser type, device identifiers, and pages visited, collected automatically via server logs and analytics cookies.
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account and authenticate you securely.
- Deliver the practice exam service, track your progress, and personalise your experience.
- Process payments and manage subscriptions.
- Send transactional emails (purchase receipts, password resets, account notifications).
- Improve the platform by analysing aggregate usage patterns.
- Detect and prevent fraudulent or abusive activity.
- Comply with legal obligations.
We do not sell your personal data to third parties.
4. Sharing and Third Parties
We share data only with the following service providers, under strict contractual obligations:
- AWS (Amazon Web Services) — Cloud infrastructure, database storage, and user authentication via Amazon Cognito.
- Stripe — Payment processing. Stripe's privacy policy governs their handling of payment data.
- Analytics providers — Aggregate, anonymised usage statistics to understand platform performance.
We may disclose data if required by law, court order, or to protect the safety of users or the public.
5. Cookies
6. Data Retention
7. Security
8. Children
9. Your Rights
10. Changes to This Policy
11. Contact
ExamCram
support@examcram.ai