Privacy Policy

Last updated: 29 August 2026

This explains what VCE Exam Cram collects, why, and who it's shared with. It's written in plain language so any student can read it.

What we collect

Account details: your name, email address, and a hashed password.
Study data: the subjects you pick, answers you submit (typed text and any photos of handwritten answers you upload), the marks and feedback produced, timed-paper results, streaks, XP, quests, and group/leaderboard activity.
Basic technical data: standard server logs (e.g. request times, errors) used to keep the service running.

Automated marking uses third-party AI providers

When you submit a written answer or a photo for AI marking, the answer text and any uploaded images are sent to OpenRouter, which routes them to a third-party large language model provider to generate the mark and feedback. This is core to how the marking feature works. Your name and email are not sent with them. MCQ and short-answer auto-marking, and Paper Mode self-marking, are done on our own server and don't involve any third-party AI.

We only send answers for marking when you ask for it by submitting them. If you don't want your answers sent to a third-party AI, use the auto-marked question types and Paper Mode, or don't submit answers for AI marking.

Payments

Plus subscriptions are processed by Stripe. Card details go straight to Stripe and never reach our servers. We store a Stripe customer/subscription reference and your plan status.

Other services we use

Netlify — hosting and serverless functions.
Neon — the database where your account and study data are stored.
Resend — sending transactional email (e.g. password resets), if you trigger one.

What we don't do

We don't sell your data, we don't run third-party advertising, and we don't use your answers to train our own models.

Retention and deletion

We keep your data while your account is active. You can ask us to delete your account and associated data at any time by emailing the address below — we'll action it within a reasonable time. Some minimal records may be kept where required (e.g. payment records).

Your choices

You can view and change your subjects and profile in the app, and request a copy or deletion of your data by email.

Contact

Privacy questions or deletion requests: sasen.haputhanthree@hillcrest.vic.edu.au