Privacy Policy
Last Updated: September 24, 2026
This Privacy Policy explains how CramAI (cramai.net and fojiaoai.cn) collects, uses, shares, stores and protects your personal information. The service is operated by 时氪砹（上海）人工智能技术有限责任公司, a company incorporated in the United States ("we"), which is responsible for your personal information as its controller. Please read it carefully, especially the parts about third-party processing, international transfers, deletion and minors. For questions or to exercise your rights, contact support@cramai.net.
Information We Collect
(1) Account information: the email address, display name and avatar you provide when you sign up or sign in. Passwords are stored encrypted by Amazon Cognito; we never store them in plain text. If you sign in with Google, Apple or Watcha (offered to users in mainland China only), we receive basic profile information such as your email, name and avatar from that provider. (2) Optional profile information: birth date, gender, target exam, role and similar details you enter in your profile or during onboarding. (3) Study content: files you upload, web or video links you submit, files you pick from Google Drive, and your conversations with the AI and your notes. (4) Study records: answers, scores, wrong answers, study plans and progress from practice and mock exams. (5) Payment information: payments are processed by Stripe (including Alipay and WeChat Pay where available in mainland China). We keep order, plan, credit and Stripe customer ID records and never see your full card number. (6) Device and log information: IP address, browser type, operating system, access times and the country or region inferred from your IP, used for security, troubleshooting and statistics. (7) Other information you choose to send us: feedback (which may include screenshots), surveys, ambassador or teacher applications (which may include a résumé) and waitlist emails.
How We Use Information
(1) To provide the service: analysing your materials; generating summaries, mind maps, questions, study plans, grading and ability analysis; maintaining your account, quotas and purchases. (2) Security and compliance: authentication, preventing abuse and fraud, and meeting legal obligations. (3) Product improvement: measuring feature usage and troubleshooting. (4) Notifications: messages about your account, security, purchases and changes to the service. Where EU or UK law applies, our legal bases are, respectively, performance of our contract with you, our legitimate interests (security and product improvement), your consent (optional cookies and optional profile information) and legal obligations. Practice scores, ability analysis and study suggestions are generated automatically for study reference only and are not used to make decisions that have legal or similarly significant effects on you. We do not sell your personal information, do not use it for targeted advertising, and do not use your study content to train our own AI models.
AI Services and Other Service Providers
To provide the service we share the data needed for each task with the following providers: (1) Large language models: SiliconFlow, Alibaba Cloud Model Studio (Qwen), Volcengine and Zhipu (all in China); Huawei Cloud (a Chinese company; processing takes place in the region of the service endpoint we connect to, which may be inside or outside China); and Google Gemini, OpenRouter and Amazon Bedrock (all in the United States). Which one is used depends on the feature and the configuration at the time. Your uploaded content and conversations are sent to them to generate results, and the resulting text embeddings are stored in Zilliz Cloud (a vector database; its deployment region is set in our service configuration). (2) Document recognition and content retrieval: MinerU (China) and Mistral (France) for text recognition; Tavily and Firecrawl (United States) for web search and fetching links you submit; the YouTube (United States) and Bilibili (China) APIs for information about videos you submit; Alibaba Cloud and Volcengine (China) speech services for transcription and podcast generation. (3) Infrastructure: Amazon Web Services (United States) for hosting, databases, file storage, email, sign-in and AI personalization memory. When users in mainland China visit fojiaoai.cn, traffic is relayed through Alibaba Cloud servers in mainland China. (4) Operations tools: LangSmith (United States), which records AI call inputs and outputs for troubleshooting; Feishu (China), which receives feedback, surveys, applications, and the information you enter during onboarding and in your profile (gender, birth date, target exam, role, account ID, country or region inferred from your IP, and a browser summary); and Google Forms (United States) for waitlist emails. (5) Payments: Stripe (United States). (6) Sign-in and analytics: Google (United States; Google sign-in, One Tap and Google Analytics), Apple (United States), Watcha (China) and Plausible (EU); see the Cookie Policy. Whether a third-party model provider uses API data to improve its own services depends on that provider's terms and is not fully within our control, so please do not upload sensitive information you do not want processed by third parties. We may also disclose or transfer information where required by law, to protect the safety of users or the public, or in a merger or acquisition.
Storage and International Transfers
Our servers and databases are located in the United States (Amazon Web Services, US East). Data is encrypted in transit with TLS and encrypted at rest, and access controls ensure users can access only their own data. If you use the service from mainland China or anywhere outside the United States, your personal information is transferred to and stored in the United States, and may be transferred to providers in China, the United States, the EU or elsewhere as described in section 3. The categories of information, purposes and recipients are described in sections 1 to 3. You can exercise your rights to access, copy, correct or delete your information by contacting support@cramai.net, and we will coordinate with the relevant providers. Where applicable law requires, we will put safeguards such as standard contractual clauses in place for international transfers.
Retention and Deletion
While your account is active we keep your account information and study data to provide the service. You can delete your account at any time in account settings. When you do: the account is deactivated immediately; your email, display name, avatar and contact email in our main database are anonymized, and the IP address and browser information kept for analytics attribution are deleted; your sign-in record in Amazon Cognito (including your original email) is disabled but retained; and any paid subscription is set not to renew. The following are not deleted automatically when you delete your account: your uploaded materials, conversations, study records, optional profile information (held in our database and in Feishu), text embeddings, AI personalization memory, LangSmith troubleshooting records and your Stripe customer record. If you want them deleted too, email support@cramai.net before or after deleting your account and we will complete the deletion within 30 days of your request, except for information we are legally required to keep. Other retention periods: server logs are generally kept for 7 to 30 days; database backups for 7 days; conversation events in AI personalization memory expire after 365 days, while long-term memory extracted from them has no fixed expiry and is deleted on request; LangSmith records are kept according to that service's retention settings; Feishu records are kept until deleted on request; payment and transaction records are kept as required by tax and accounting law.
Your Rights
Depending on where you live, you may have the right to: (1) access and obtain a copy of the personal information we hold about you; (2) correct inaccurate or incomplete information; (3) delete your information or your account; (4) receive the data you provided in a commonly used format where technically feasible (currently by email request); (5) withdraw consent at any time, for example in Cookie Settings, without affecting processing carried out before withdrawal; (6) object to or restrict processing based on legitimate interests; (7) ask us to explain how we process your personal information. To exercise these rights, email support@cramai.net. We will reply within 15 business days after verifying your identity, and within 30 days at most for complex requests. You also have the right to complain to your local data protection authority, such as an EU member state supervisory authority or the Cyberspace Administration in China.
Cookies and Analytics
We use strictly necessary cookies for authentication, security, session management and remembering your choices. Functional storage (including Google One Tap) and browser-side analytics tools (GA4 and Plausible loaded via GTM) stay off until you allow the relevant category. We do not use advertising cookies. In addition, our servers record a small number of business events (sign-up, first use, checkout started, payment succeeded) and send them with your account ID to Google Analytics and Plausible to measure conversions; events sent to Plausible include your IP address and browser information for de-duplicated counting. These events do not depend on whether you allow analytics cookies; contact us if you object to this processing. You can reject optional categories, change or withdraw your choice at any time in Cookie Settings, and see the current storage list in the Cookie Policy.
Minors
The service is intended for users aged 13 and older. In mainland China, children under 14 may use it only with the consent and guidance of a parent or guardian. In the EU, the UK and elsewhere, if local law sets a higher age of digital consent (between 13 and 16), users below that age need a parent's or guardian's consent. The service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe we have collected a child's personal information without a guardian's consent, contact support@cramai.net and we will delete it promptly.
Contact Us
For privacy questions or to exercise these rights, contact 时氪砹（上海）人工智能技术有限责任公司:support@cramai.net