Privacy policy

The controller responsible for data processing on this website is:

Amboss AI UG (haftungsbeschränkt)
Kurfürstendamm 50a
10707 Berlin, Germany
Represented by the managing directors Noah Gerdes and Luca Elia Kaminski
Email: support@amboss-app.de

We have not appointed a data protection officer because we are not required to (§ 38 BDSG). For anything to do with data protection, you can reach us at the address above.

This website is a static information site. Without your consent we set no analytics or marketing cookies and use no tracking. Anonymous audience measurement (PostHog, EU servers) and measuring the success of our ads on Facebook and Instagram (Meta Pixel and Conversions API) only run after you explicitly agree in the cookie banner, separately for “Statistics” and “Marketing”. If you decline, nothing is stored or sent. Beyond that, we only process personal data when you act yourself: when you buy a plan, sign up for the newsletter, create a customer account, send us material for the One-Shot Engine or contact us.

If you agree to the “Statistics” category in the cookie banner, we analyse anonymously how our website is used so we can improve it. We use PostHog for this, hosted on EU servers (PostHog Cloud EU, Frankfurt). It records anonymous usage data such as pages viewed, clicks and heatmaps (which parts of a page get used). We build no personal profiles, and there is no screen recording (session recording). Without your consent, PostHog is not loaded and no data is sent.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future: change cookie settings and switch off “Statistics” or choose “Necessary only”. More on how PostHog handles data: posthog.com/privacy.

If you agree to the “Marketing” category in the cookie banner, we use the Meta Pixel and the Conversions API. The provider is Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). This lets us measure whether our ads on Facebook and Instagram lead people to visit our website, start a trial or take out a subscription, and lets Meta improve the delivery of our ads accordingly. Without your consent the Meta Pixel is not loaded, no Meta cookies are set, and neither your browser nor our server sends any data to Meta.

Meta Pixel (in your browser): the pixel loads a script from Meta and stores the cookies _fbp (random browser identifier) and, if you arrive via an ad, _fbc(the ad’s click identifier), each for up to 90 days, as well as a few entries in your browser’s local storage (e.g. the click identifier), which we also delete when you withdraw consent. Meta receives the page you open, the time, your IP address, browser and device information and these events: page view, viewing the prices, opening the checkout dialog (plan and price) and starting a trial.

Conversions API (from our server): when you start a trial or pay for a subscription for the first time, our server also reports this directly to Meta. That way the event still arrives if an ad blocker stops the pixel; Meta counts it only once. We transmit: the event (trial start or first payment), plan, amount and currency, your email address and your customer number at our payment provider as a hash value (SHA-256, i.e. not in plain text), the identifiers _fbp and _fbc, your IP address and browser identifier (user agent) at the start of checkout, and a transaction identifier (the number of the checkout or subscription at our payment provider) that Meta uses to merge the browser and server reports. Meta matches the hash values against its own data to attribute the event to a Facebook or Instagram account. For this purpose we store the identifiers, IP address and browser identifier from the start of checkout on Cloudflare servers (Western Europe region) and delete them as soon as the first payment has been reported, at the latest after 60 days.

Joint controllership: we and Meta are joint controllers for collecting this data on our website and transmitting it to Meta (Art. 26 GDPR). This is governed by the Controller Addendum to the Meta Business Tools Terms (facebook.com/legal/controller_addendum). Under it, Meta handles requests about the data processed at Meta; you can also exercise your rights with us. Meta alone is responsible for any further processing at Meta: facebook.com/privacy/policy.

Transfer to the USA:Meta may transfer data to Meta Platforms, Inc. in the USA. Meta is certified under the EU-US Data Privacy Framework; the European Commission’s standard contractual clauses apply in addition.

Instagram posts on “About”:only if you have allowed “Marketing” do we embed reels from our Instagram account there. Your browser then loads content from Instagram (Meta) and sends your IP address, browser information and the page you are viewing to Meta; Instagram may set its own cookies. Without consent we only show a link to Instagram.

The legal basis is your consent: § 25(1) TDDDG for storing and reading the cookies, Art. 6(1)(a) GDPR for the further processing. You can withdraw it at any time with effect for the future: change cookie settings and switch off “Marketing”. After that the website sends nothing more to Meta and the _fbp/_fbc cookies are deleted. If you withdraw consent in a different browser or on a different device from the one where you started checkout, our server may still report the first payment; in that case write to support@amboss-app.de and we will delete the stored data immediately.

When you open the website, our hosting provider automatically processes technically necessary data (IP address, date and time, page requested, browser type) to deliver the page and keep it running securely. The legal basis is our legitimate interest in operating the website securely (Art. 6(1)(f) GDPR). Log data is not combined with other data sources.

New AMBOSS plans are processed by our payment provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland (“Stripe”). The Stripe payment form only loads after you confirm the notices in the checkout dialog and enter your email address. At that point your browser connects to Stripe, and Stripe sets strictly necessary cookies to prevent fraud. You enter your payment details (e.g. card details, PayPal account) directly with Stripe. We never see or store your payment details.

We pass on to Stripe your email address, the plan you chose and, if you came through an invite link, the referral code. Stripe processes data on our behalf to handle the payment (Art. 28 GDPR), and as a separate controller to prevent fraud and meet its own legal obligations. In the process, data may be transferred to Stripe, Inc. (USA). Stripe is certified under the EU-US Data Privacy Framework, and standard contractual clauses apply on top. After a successful purchase, Stripe sends us your email address, the status of your subscription and your Stripe customer number. We process this data to perform the contract (Art. 6(1)(b) GDPR): we create your licence key, email it to you and let you manage your subscription in the Stripe customer portal. We keep invoice and payment records for the periods required by commercial and tax law.

How Stripe processes data: stripe.com/privacy.

If you arrive through an invite link (an address containing ?ref=…), we store the referral code for 90 days in a cookie called amboss_ref on your device. When you buy, we pass it to our payment provider so we can credit the referral and apply the welcome discount. The cookie holds no data about you, only the code of the person who referred you. The legal basis is our legitimate interest in settling referrals (Art. 6(1)(f) GDPR). You can delete the cookie in your browser at any time.

Until we changed payment providers, purchases were processed by Whop Inc. (whop.com). For subscriptions taken out there, Whop remains the payment provider until the contract ends (renewals, receipts, cancellation). The payment form only loaded once you clicked a plan button, and at that point your browser connected to Whop. You entered your payment details (e.g. credit card details) directly with Whop. We never see or store your payment details.

After a successful purchase, Whop sends us your email address and the status of your membership. We process this data to perform the contract (Art. 6(1)(b) GDPR): we create your licence key and email it to you. We store licence data (licence key as a hash, plan, status, daily usage points) for as long as the contract runs, on Cloudflare servers (Western Europe region).

Whop's privacy policy explains how Whop processes data: whop.com/privacy.

At konto.amboss-app.de you can create an AMBOSS account if you want to, to manage your licences, signed-in devices and your subscription. Without an account, everything stays as before: the app works with your licence key, and you can still cancel or withdraw without signing in.

You sign in without a password: we email you a six-digit code and a link. Both are valid for 10 minutes and can only be used once; we only store them as a check value and delete them at the latest one hour after they expire. For the account we process your confirmed email addresses, your language setting, the assignment to your licences and agencies and, if you sign in with Google, the details in section 5d. We assign licences to your account if they were bought with one of your confirmed email addresses or if you enter the licence key.

To keep you signed in, our server (api.amboss-app.de) sets a strictly necessary cookie called __Host-amboss_konto. It contains a random value that we only store as a check value. A sign-in lasts 30 days, is extended when you use it and ends after 90 days at the latest or when you sign out. For each sign-in we store the time, the country you sign in from (derived from your IP address; we do not store the IP address itself) and a shortened checksum of your browser identifier. To prevent abuse, we count sign-in attempts per IP address and per email address; we only store check values for this and delete them after two days at the latest. This cookie does not need your consent because it is strictly necessary for the service you asked for (§ 25(2) no. 2 TDDDG).

The legal basis is performance of the contract (Art. 6(1)(b) GDPR). The account page and the account data are hosted by Cloudflare, the account data on the same servers as your licence data (Western Europe region). We keep the account data until you delete your account. You can do this at any time on the account page under “Delete account” (Art. 17 GDPR); licences, subscriptions and invoices are not affected, because they belong to your contract, not to the account.

If you choose “Sign in with Google”, we redirect you to Google. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. There you sign in to Google and confirm that Google sends us an identifier of your Google account, your email address and your profile details (name, profile picture). We never learn your Google password. Of this, we store the identifier, the email address, the name and whether Google is responsible for this address (a Gmail or Google Workspace address); only then do we use this address to assign purchases to your account, otherwise you confirm it once with a code. We do not store the profile picture.

The legal basis is performance of the contract (Art. 6(1)(b) GDPR), because you chose this way of signing in. Google processes the sign-in under its own responsibility; data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. How Google processes data: policies.google.com/privacy. We keep this data until you delete your account.

We send licence, confirmation and sign-in emails (sign-in codes for the customer account) through Resend (Resend, Inc., USA). Your email address is passed to Resend for this. We have a data processing agreement with Resend, and the transfer to the USA is based on the EU standard contractual clauses. The legal basis is performance of the contract (Art. 6(1)(b) GDPR) or, for newsletter emails, your consent.

As a customer, you also receive information from us about new versions of the AMBOSS app (new features, fixed bugs, how to get the update). For this, we store your email address in a recipient list at Resend. The legal basis is our legitimate interest in informing you about changes to the software you use (Art. 6(1)(f) GDPR). You can object to this at any time via the unsubscribe link in each of these emails or by emailing support@amboss-app.de. After you object, we keep your address on a suppression list so that you are not contacted again by mistake.

For the newsletter we process your email address and, as proof of your consent, the time you signed up and confirmed and the IP address used (Art. 7(1) GDPR). We use the double opt-inprocedure: after signing up you get a confirmation email, and we only add you to the list once you click the confirmation link. Without that confirmation you won't get any further emails.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with the unsubscribe link in every newsletter email. After you unsubscribe, we keep your address on a block list so we don't email you again by mistake (legitimate interest, Art. 6(1)(f) GDPR).

When you use the AMBOSS desktop app, our servers check your licence and count your daily processing quota (performance of the contract, Art. 6(1)(b) GDPR). The content of your videos only leaves your computer for features you start yourself (e.g. transcription), and we don't store it permanently.

Motion graphics:When you start creating motion graphics in the app, the app sends the order data this requires through our server at Cloudflare to our graphics server: the transcript of your clip (text with word timings), the language and format of the sequence, your requests and the images selected for the graphic. The sound and picture of your video are not transmitted. The graphics server is operated by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) in a data centre in Falkenstein (Germany); Hetzner processes the data on our behalf (Art. 28 GDPR). To design the graphics, the server uses AI models from Anthropic; the order data this requires is sent to Anthropic and may be processed in the USA. This is based on Anthropic's data processing agreement, which includes the EU Standard Contractual Clauses. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). We keep order data and finished graphics on the graphics server for no longer than 14 days after the order is completed — if a graphic is downloaded later, until 48 hours after the last download — and then delete them automatically.

In addition, the app sends pseudonymous usage statistics by default so we can find errors and improve the app. This covers which features you use (e.g. rough cut, captions, zooms) and with what result, error types, app version, operating system, licence type and a random installation ID. It does not cover the content of your videos, transcripts, file names, your licence key or your email address. The data goes through our server at Cloudflare to PostHog (PostHog Cloud EU, Frankfurt); we do not pass on your IP address. The legal basis is our legitimate interest in an app that works and keeps improving (Art. 6(1)(f) GDPR). You can object at any time: with the “Usage statistics” switch in the app settings (from version 2.0.14) or by email to support@amboss-app.de.

If you contact us by email or WhatsApp, we process your details to answer your request (Art. 6(1)(b) or (f) GDPR). For WhatsApp, the privacy notice of WhatsApp (Meta) applies as well.

If you write to us through the support form in your customer account, we send your message by email (via Resend, see section 6) to our support inbox. To help you faster, we attach the email addresses of your account and details of your licences (plan, status, signed-in devices with operating system and app version); we do not send your licence key. We reply to your account's email address (Art. 6(1)(b) GDPR).

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21). You can withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.

For any of these requests, an informal email to support@amboss-app.de is enough.

This privacy policy was last updated in October 2026. We update it when our data processing or the law changes.