CrunchMD

Privacy

What CrunchMD stores, who it goes to, and how to get rid of it.

What is stored

  • Your account — email address, and a phone number only if you add one for text quizzing.
  • Material you upload — the original file, plus the text extracted from it, kept so questions can be rebuilt without asking you to upload again.
  • Questions generated from it, and the quotes they cite from your material.
  • Your answers — what you picked, whether it was right, how sure you said you were, and when. This is what drives the scheduling and the weak-area ranking.

Taken together your answers are a detailed record of what you do and do not know. It is treated as yours.

Who else sees it

  • Anthropic — the text of your material is sent to Claude to write questions, and a scanned PDF is sent as a document so its pages can be read. Short typed answers are sent for grading.
  • Twilio — only if you turn on text quizzing, and only the questions and replies themselves.
  • Google Drive or Dropbox — only if you connect them, and only to read files you pick. Access is read-only, and the tokens are encrypted before they are stored.

Nothing is sold, and nothing is shared for advertising.

Getting it back, or getting rid of it

From Settings you can download everything held about you as a JSON file, or delete your account. Deleting removes your material, your uploaded files, your questions and your whole answer history. It cannot be undone.

Individual files can be removed from your Library at any time. Questions already generated from a file are kept when you do that, so your progress survives a tidy-up.

Retention

Material and answers are kept until you delete them or delete your account. There is no automatic expiry.

If your school is involved

Performance data of a named student is likely an education record under FERPA when an institution is the customer. CrunchMD is currently sold to individuals, so this is your own data and you control it directly. If your school is considering adopting it, they should ask for a written agreement covering retention, redisclosure and deletion before anyone uploads coursework.

This notice describes what the software actually does today. It is not legal advice, and a real deployment should have a policy reviewed by someone qualified.