This Privacy Policy describes how Cramberry (“Cramberry,” “we,” “us,” or “our”) collects, uses, and shares information when you visit our website and use our mobile and web applications (collectively, the “Services”). By accessing or using the Services, you agree to the practices described in this Privacy Policy.
1. Information We Collect
A. Information You Provide Directly
- Teacher Account Registration: name, email address, school name, password.
- Student Records: student name, year group, class name, generated username, and password (stored as a secure hash).
- Profile Updates: changes to your name, email address, or school name.
- Support Requests & Feedback: any messages you send us via email or support forms.
B. Usage Data
- Authentication Logs: dates and times of log-ins, IP addresses, and device information.
- Quiz Submissions: timestamps, scores, answers, and time taken on each quiz.
- Stripe Events: subscription status updates (e.g. payment success, cancellation).
C. Payment & Billing Data
- Stripe Customer Data: customer ID, payment methods (e.g. last four digits of card), subscription IDs, billing history (invoices, amounts, dates).
D. Automatically Collected Information
- Device & Browser Information: device model, operating system, browser type.
- Log Data: application errors and performance metrics.
2. How We Use Your Information
- Account Management: to create, authenticate, and manage your teacher or student accounts.
- Service Delivery: to process and score quizzes, generate usernames and passwords, and display student progress.
- Billing & Subscriptions: to create and manage Stripe subscriptions, process payments, and provide billing history.
- Communications: to send you transactional emails (e.g. welcome messages, password resets), subscription notices, and support responses via Amazon SES.
- Security & Fraud Prevention: to detect and prevent unauthorized access, abuse, or fraud.
- Analytics & Improvement: to understand how you use the Services and to improve functionality and user experience.
3. Sharing & Disclosure
We do not sell or rent personal information. We may share your data with:
- Service Providers: Stripe (payment processing), AWS (hosting, database, email), and other vendors who help us operate the Services.
- Legal Requests: if required by law or in response to valid legal process.
- Business Transfers: in connection with a merger, acquisition, or sale of assets, provided the recipient agrees to handle your data in accordance with this policy.
4. Data Security
We implement industry-standard technical and organizational safeguards, including:
- Encryption in Transit: TLS/HTTPS for all network traffic.
- Encryption at Rest: AES-256 or equivalent for database storage.
- Access Controls: strict role-based access and IAM policies on AWS.
- Credential Protection: bcrypt hashing for passwords; Stripe handles payment credentials.
No system is 100% secure; if we discover any breach that puts your data at risk, we will notify you and applicable regulators promptly.
5. Data Retention
- Teacher & Student Records: retained as long as the account is active and for up to one year after deletion requests.
- Quiz Results & Logs: retained for analytics, reporting, and compliance purposes, then anonymized or deleted according to our data-retention schedule.
- Billing History: stored by Stripe; our records reflect your subscription state.
6. Children’s Privacy
Our Services are intended for use by teachers and their students. We do not knowingly collect personal information directly from children under age 13. If you believe we have collected such data without parental consent, please contact us at support@cramberry.tech and we will promptly delete it.
7. Third-Party Services
Your use of Stripe, AWS, and other third-party services is subject to their privacy policies. We encourage you to review:
8. Your Rights & Choices
- Access & Portability: you may request a copy of the personal information we hold about you.
- Correction & Deletion: you may correct inaccuracies or request deletion (subject to legal obligations).
- Email Preferences: you can opt out of marketing and notification emails via your Account Settings.
To exercise any of these rights, contact us at support@cramberry.tech.
9. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We’ll post the revised policy on our website with a new “Effective Date.” Your continued use of the Services after changes signifies your acceptance.
10. Contact Us
If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact:
MTC Practice Portal
Email: support@cramberry.tech
Address: 20 Park Gate, Knaresborough, HG59DR
Thank you for trusting Cramberry with your data. We are committed to keeping it safe and secure.