Privacy Policy
Last updated 3 September 2026
Crammly reads the course material you already have access to in Canvas and turns it into practice questions. This page explains exactly what that involves, in plain language.
The short version
- We never see, ask for, or store your Canvas password.
- We never create a Canvas access token.
- We only read courses you are personally enrolled in.
- We do not sell your data, and we do not run advertising.
- You can delete your account and everything in it at any time.
What we collect
Your account
Your email address, a hashed password, and which plan you are on. Passwords are stored using scrypt with a per-account salt, so the original password cannot be recovered from our database — not by us, and not by anyone who obtained a copy of it.
Your course material
When you choose a chapter, the Crammly browser add-on reads that chapter's pages, assignment descriptions, discussions, and attached files from Canvas and sends the text to our server, where it is used to write your practice questions and review sheet.
We keep the generated questions and review sheet so that reopening a chapter is instant and free. We do not keep the original files. Generated material is stored against a fingerprint of the chapter's text rather than your identity, which means two students in the same class share one copy instead of generating it twice.
Your quiz history
Which chapters you have unlocked, and when you last opened them. Your individual answers are kept in your browser during a session and are not sent to us.
Technical information
Standard web server logs, including IP address, and counters used for rate limiting to prevent abuse of the service.
What we never collect
- Your Canvas password. The add-on uses the session you are already signed into.
- Your grades, submissions, or feedback from instructors.
- Other students' work or any course you are not enrolled in.
- Your browsing activity outside Canvas and this site.
- Location data.
How the browser add-on works
The Crammly add-on makes requests to your school's Canvas API using the login session already present in your browser. It holds no credential of its own, creates nothing that outlives your Canvas session, and stops working the moment you sign out of Canvas. It can only reach what your own account can already reach.
The only thing the add-on stores is which Canvas web address you approved, so you are not asked again on every visit.
Who we share it with
We use a small number of providers to run the service:
- Vercel — hosting and web server logs.
- Neon — the database holding accounts and generated study material.
- Anthropic — chapter text is sent to Claude to write your questions. Anthropic does not train models on data submitted through its API.
- Resend — delivers your sign-in codes.
We do not sell personal information, and we do not share it with advertisers or data brokers. We may disclose information if legally required to.
How long we keep it
Account details are kept until you delete your account. Sign-in codes expire after 15 minutes. A remembered browser is forgotten after 2 hours, and a signed-in session after 30 days. Generated study material is kept so chapters stay instant to reopen.
Deleting your account
Email support@crammly.app from the address on your account and we will delete it, your library, and your quiz history within 30 days.
Students and age
Crammly is built for students. It is not intended for children under 13, and we do not knowingly collect information from them.
Crammly is an independent tool. It is not affiliated with, endorsed by, or connected to Instructure, Canvas, or any school or university.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to certain processing. Email support@crammly.app and we will action it.
Changes
If this policy changes in a way that materially affects you, we will email the address on your account before the change takes effect.