Privacy Policy

Last updated: 19 April 2026 · Version 1.0 (beta)

Who we are

CramSnap is a UK-based GCSE revision service operated from England. In this policy, "we", "us", and "CramSnap" refer to the operators of cramsnap.com and any associated apps. You can contact us at info@cramsnap.com about anything in this policy, including data access, correction, and deletion requests.

We are the data controller for personal data we process. This policy explains what we collect, why, how we store it, and your rights under UK GDPR and the Data Protection Act 2018.

What data we collect

Today, CramSnap collects only one piece of personal data from visitors: the email address you provide if you sign up to our launch list via the Join form. We do not currently collect names, addresses, phone numbers, payment details, or location data on the website.

We do not currently run analytics tracking, advertising pixels, third-party trackers, or behavioural profiling on the website. The only cookies in use are essential cookies required for the site to function (e.g. deployment platform session cookies).

When we add analytics or third-party integrations in future, this policy will be updated in advance and prominently disclosed. Where any new processing requires consent under UK GDPR, we will ask you before collecting.

How we use your email address

Emails submitted via the Join form are used solely to notify you about the CramSnap app launch, major product updates, and related revision resources. We will not sell or rent your email address to third parties. You can unsubscribe at any time by emailing info@cramsnap.com with "unsubscribe" in the subject line.

The legal basis for this processing is your explicit consent given when you submit the form (Article 6(1)(a) UK GDPR). You may withdraw consent at any time.

Where your data is stored

Our website is hosted by Vercel Inc., which operates globally distributed edge servers. Static pages and assets are served from servers within the UK and EU where possible. Our email service is provided by Google Workspace (Google Cloud EMEA Limited), storing emails on servers in the EU and UK.

Where personal data is transferred outside the UK or EEA, we rely on adequacy decisions or Standard Contractual Clauses to ensure equivalent protection as required by UK GDPR.

Third-party AI processing — important future disclosure

This section describes processing that will apply when the CramSnap revision app launches in summer 2026. It does not apply to the current website.

When you use the "snap" feature of the future CramSnap app — photographing a handwritten exam answer to receive AI marking — the image you capture is transmitted to a third-party AI provider to generate a mark and feedback. As of the date of this policy, our planned AI partner is Google Gemini, with possible future use of other large language model providers such as DeepSeek, Anthropic, or OpenAI as the product evolves.

This means: photographs of your written work will leave CramSnap's servers and be processed by a third-party AI provider under their own terms of service and privacy policy. You should avoid photographing pages that contain personal identifying information you would not wish to share with that provider. We will publish clear disclosures in the app at the point of capture before any image is sent, and where possible we will redact or strip metadata before transmission.

When the app goes live, we will update this policy with the specific AI partners in use at that time, links to their privacy policies, and the exact data flows. The legal basis for this processing will be your explicit consent at the point of use.

Past paper links

Our Past Papers Hub links out to official exam board websites (Pearson, AQA, OCR, and others). When you click these links, you leave cramsnap.com and visit the exam board's own site, subject to their own privacy policies. We do not control what those third parties collect.

How long we keep your data

Launch list email addresses are retained until you unsubscribe or until we confirm the launch is complete and all relevant notifications have been sent. Unsubscribed addresses are removed from our active list within 30 days. Records of consent and unsubscribe requests may be retained for up to 2 years to demonstrate compliance.

Your rights under UK GDPR

You have the right to:

  • access the personal data we hold about you
  • request correction of inaccurate data
  • request deletion of your data (the "right to be forgotten")
  • restrict or object to our processing of your data
  • request your data in a portable format
  • withdraw consent at any time where consent is the legal basis
  • lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, email info@cramsnap.com. We will respond within 30 days.

Children's data

CramSnap is designed for use by secondary school students (typically aged 14–18) and their parents and teachers. We do not knowingly collect data from children under 13. If you are under 18, please check with a parent or guardian before providing your email address to us. If you believe we hold data from someone under 13, please contact us immediately.

Changes to this policy

We may update this policy from time to time. Material changes (such as adding analytics, changing our AI providers, or changing how we use your email) will be announced on the website at least 14 days before they take effect. The "last updated" date at the top of this page reflects the most recent version.

Contact

Questions, complaints, or data requests: info@cramsnap.com.