Privacy policy

Last updated: November 8, 2026

uncram turns your course material into a plan for your exam. To do that it has to hold your files and what you do while you study. This page says what we collect, why, who helps us run uncram, and how to have it deleted, in plain words. It covers the website at uncram.io and the app at app.uncram.io.

What we collect

  • Your account. You sign up with an email address and password, or with your Google account. Sign-in is run for us by WorkOS, which keeps your email address and checks your password; we never see the password. WorkOS gives us an account ID, and that's how we know it's you.
  • Your course material. The files you add (slides, syllabi, past exams, notes, photos of your notes) and any text you paste, plus what you tell us about the exam: the course, its name, its date and its format.
  • What uncram makes, and how you study. The topic map, problems, study guide and flashcards written from your material, and what you do with them: your answers and how they were graded, the help you used, the questions you ask about your course, and any regrades you ask for.
  • Payments. If you buy an exam pass or Plus, the payment goes through Stripe (see below). We keep what you bought, when, how much it was, and whether it was refunded, with a Stripe customer ID. We never see your card number.
  • How the site is used. Pages viewed, clicks, recordings of sessions, errors, and technical details such as your browser, device and approximate location from your IP address. More on this under Analytics.
  • A record of AI requests. For each request to an AI model we note the model, its size in tokens, its cost and how long it took, against the exam it was for. This record doesn't contain your material or the answer.

How we use it

  • To run uncram for you: read your files, build your exam, pick what to study next, grade your answers and answer your questions.
  • To take payments, apply your plan, and give refunds.
  • To answer you when you write to us.
  • To keep uncram working and safe, for example by limiting how fast anyone can send requests, and to find and fix what breaks.
  • To understand how uncram is used, so we can make it better.

We don't sell your personal information, and we don't use it for advertising.

AI processing

uncram uses AI models to read your files, write problems, a study guide and flashcards, check answers, grade written answers and answer your questions. To do that we send the relevant parts of your material, and your answers or questions, to our AI providers: OpenRouter, which passes each request to Anthropic's Claude models. We send it to our AI providers to generate study material; we don't sell it.

Who helps us run uncram

We share information only with the companies that run parts of uncram for us, and only what each needs:

  • WorkOS, for sign-in and accounts.
  • Convex, which runs our backend and stores your account data, course files and study material.
  • OpenRouter and Anthropic, for the AI processing above.
  • Stripe and Link. Checkout is by Stripe. Link, Stripe's payment service, is the merchant of record: it sells you the plan, takes the payment, handles sales tax, receipts and billing questions, and processes your payment details under its own privacy policy.
  • PostHog, for product analytics, session recordings and error tracking.
  • The companies that host our websites.

We may also share information if the law requires it, to protect people's safety, or as part of a sale or merger of uncram, in which case this policy would still apply to it.

Analytics, session recordings and errors

We use PostHog to see how uncram is used: which pages are opened, what's clicked, and where people get stuck. PostHog also records sessions, a replay of what the page showed and how it was used. Everything typed into a field is masked in the recording, so replays don't show what you type. When something breaks, PostHog reports the error with technical details, so we can fix it.

Cookies

We use a few cookies, and no advertising cookies:

  • wos-session keeps you signed in to the app. Without it you'd have to sign in on every page.
  • sl-oauth lasts up to 10 minutes while you sign in with Google, and sl-pending-auth lasts while we wait for you to enter an emailed code. Both are only for signing in.
  • ph_<key>_posthog is PostHog's analytics cookie. It tells visits from the same browser apart from new ones, and it's shared across uncram.io and app.uncram.io, so a visit to the site and then the app counts as one.

Your light or dark theme is remembered in your browser's own storage and isn't sent to us. Stripe's checkout may set its own cookies to prevent fraud.

How long we keep it

We keep your account, material and progress for as long as you have an account, so your exams are there when you come back. A file you remove, or a new exam you discard before it's built, is deleted straight away. When you delete your account, everything in it is deleted as described below. Records of payments are kept by Stripe and Link for as long as the law requires them to, and the record of AI requests (which holds none of your material) may be kept to understand our costs.

Deleting your account

To delete your account, email support@uncram.io from the address you sign in with. Deleting your account removes your exams, the files you uploaded, everything uncram made from them, your progress, and your sign-in account at WorkOS. An exam pass for an exam that was never built is refunded, and Plus is cancelled straight away.

Your choices and rights

You can ask us for a copy of your information, to correct it, or to delete it, by emailing support@uncram.io. Depending on where you live (for example the EU, the UK or California), you may have other rights too, such as objecting to some uses of your information. We'll answer within the time the law gives us, and we won't treat you differently for asking.

Age

uncram is for people 13 and older. If you're under 18, you need a parent or guardian's permission to use it. We don't knowingly collect information from children under 13; if we learn we have, we'll delete it. If you think a child under 13 has signed up, email support@uncram.io.

Security and where it's kept

Everything travels over encrypted connections, and only the people who run uncram can reach your information, when they need to. No system is perfectly secure, so we can't promise yours never will be exposed, but we'll tell you if it is and it affects you. The companies above may store and process information in the United States and other countries.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change matters, we'll tell you in the app or by email before it applies. Our terms say how uncram itself works.

Contact

Questions about your privacy, or anything else: support@uncram.io.