Privacy Policy

Effective: May 2026

Your data is yours. We only use it to help you learn.

1What We Collect

Account data

•Name, email address, role (student / teacher / admin)
•School or institution affiliation
•Profile and subscription details

Exam & learning data

•Answers submitted, time spent per question, score
•Tab switch events, focus loss count (integrity logs)
•AI-graded subjective answer text

Content uploaded by teachers

•Question text, images, audio files
•Model answers used for auto-grading

Usage data

•Browser type, device type (for compatibility)
•Pages visited within the platform (no third-party ad tracking)

2How We Use Your Data

✓To run exams, grade answers, and display results
✓To generate performance analytics visible to the student and their teacher
✓To detect and flag academic integrity violations
✓To send account-related emails (verification, password reset, policy updates)
✗We do not sell your data to third parties
✗We do not use your data for advertising

3Data Security

Encrypted in transit

All data is transmitted over HTTPS / TLS

Row-level security

Database access is isolated per user session

Secure cloud infrastructure

Hosted on Supabase — ISO-compliant cloud

Access control

Only authorised staff can access production data

No system is 100% secure. If you spot a vulnerability, please contact us immediately.

4Third-Party Services

SupabaseDatabase, authentication, and file storage. Data is stored on their secure cloud.

Anthropic (Claude AI)Used to grade subjective answers. Answer text is sent to their API and not retained by them.

Google FontsFonts loaded via Google's CDN. No personal data is shared.

5Data Retention

•Exam results and answers are retained for the duration of your account.
•Integrity logs (tab switches, focus events) are retained for 12 months after each exam.
•Uploaded question images and audio are retained until the question or account is deleted.
•Accounts suspended for policy violations may have data retained for up to 3 years for legal purposes.

6Your Rights

Access

Request a copy of the data we hold about you

Correct

Ask us to fix inaccurate information

Delete

Request deletion of your account and personal data

To exercise these rights, email support@thecrisp.in. We will respond within 30 days.

7Account & Data Deletion

To delete your account, email support@thecrisp.in with subject line: Delete my Crisp account.

Account deactivatedWithin 24 hours of request

Personal data deletedWithin 30 days

Uploaded images & audioDeleted within 7 days

Exam results (anonymised)May be retained for school records

Note: If you are a student, your school may request that exam records be retained for institutional purposes even after account deletion.

8Cookies & Local Storage

Crisp uses browser local storage for session preferences (e.g. dismissed hints, UI state). We do not use advertising cookies or cross-site trackers. Supabase authentication uses secure, HTTP-only cookies for session management.

Protecting your privacy is part of our commitment to you.

Contact: support@thecrisp.in