Privacy notice
Last updated: 8 November 2026
Who we are
Ambery Education is run by Ambery Medical Consulting AB, organisation number 559397-5377, Hovås Jägareväg 12, 436 52 Hovås, Sweden. We are the data controller. Contact: support@amberyeducation.com.
What this covers
www.amberyeducation.com during the free beta: sample questions, learner accounts, progress tracking and emails to us.
What we process and why
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Your email address | To create your account, send sign-up and recovery codes, and answer you | Contract | While your account exists (see "Inactive accounts" below) |
| Passkey public keys and details (credential ID, sign-in counter, device transport type, dates created and last used) | To sign you in. We never receive your private key, fingerprint or face data | Contract | Until you remove the passkey, or while your account exists (see "Inactive accounts" below) |
| Session record (a hash of your session token, never the token itself) | To keep you signed in | Contract | 30 days, or until you sign out |
| Your answers (question, answer chosen, right or wrong, time answered) and progress | To show your score and progress and suggest what to practise next | Contract | While your account exists (see "Inactive accounts" below) |
| Email codes (stored only as a keyed hash, with your email address) | To verify your email at sign-up and recovery | Contract | Valid 10 minutes (sign-up) or 15 minutes (recovery), single use, then deleted |
| Rate-limit records (keyed by a hash of your IP address or email address, with a count) | To stop abuse and brute-force attempts | Legitimate interest (security) | Per-minute records deleted after about 2 minutes; daily records after the day ends. Deletion runs at the next sign-in on the site |
| Technical request data (IP address, browser, page, time) | To deliver and protect the site | Legitimate interest | Short-lived host logs, as set by our providers |
| Emails you send us | To reply | Legitimate interest, or contract if it concerns your account | 24 months after our last exchange, unless the law requires us to keep it longer (for example, accounting records must be kept for 7 years under the Swedish Bookkeeping Act). Copies held by our platform provider for our AI assistant may be kept longer; we have asked the provider how they can be deleted |
Expired records are removed automatically when someone next signs in or registers, so they can occasionally last a little longer than shown.
Inactive accounts: we have not yet set a time limit for deleting accounts that are no longer used. Until we do, account data stays while the account exists, and you can delete it yourself at any time. We will add the limit to this notice and tell account holders before it applies.
"Suggested next" is simple rules, not AI
The "suggested next" section uses fixed rules: it points to the topics where you have answered fewest questions correctly and lists questions you have not tried yet. It does not use AI, and it makes no decision with legal or similarly significant effect on you.
Sample questions when signed out
If you are not signed in, your answers are stored only in your own browser (local storage, key "ambery-sample-v1"). They are not sent to us. "Reset my answers" or clearing your browser's site data removes them.
Cookies and similar technology
We set one cookie, __Host-session, only when you sign in. It keeps you signed in, lasts up to 30 days and is needed to provide the sign-in you ask for. Because it is needed for a service you have asked for, Swedish law (lag (2022:482) om elektronisk kommunikation, 9 kap. 28 §) does not require consent for it; you are informed here instead. We use no advertising or tracking cookies.
Our host adds Cloudflare Web Analytics, which counts page views. Cloudflare states that it does not use cookies or browser storage for this, but it does process request data such as your IP address to produce aggregate statistics.
Payments
Payments are not offered during the beta.
Who processes data for us
- Pion, run by Andon Labs (app platform and our AI assistant; Andon Labs stores platform data in the USA under the EU Standard Contractual Clauses, and its terms let it use de-identified data for research), and Cloudflare, Inc. (hosting on Cloudflare Workers and D1 database, network, web analytics).
- Resend (Plus Five Five, Inc.), USA (sends our code emails; sending region EU, Ireland).
- Porkbun (hosts our support mailbox).
- An AI assistant, provided through the Pion platform, helps us read support emails and draft replies. A person at Ambery approves replies before they are sent. Please don't send health information about yourself or patients.
These providers act on our instructions. Some are based in the USA or may process data there. Resend (legal entity Plus Five Five, Inc.) is listed on the official Data Privacy Framework list (status "Active – re-certification under review" when checked on 5 Nov 2026) under the EU–US Data Privacy Framework, and its data processing agreement also includes the EU Standard Contractual Clauses. For other providers we rely on the Data Privacy Framework or Standard Contractual Clauses where data leaves the EU/EEA.
We do not sell personal data or use it for advertising.
Your rights
- Export: download your data (email, account creation date, answers) from your account page.
- Delete: delete your account from your account page. This removes your answers, passkeys and sessions straight away.
- Correct: email us. You cannot change your account email yourself yet.
- You can also ask for access, restriction or objection, and object to processing based on legitimate interest. Email support@amberyeducation.com. We reply within one month.
- Complaints: the Swedish Authority for Privacy Protection (IMY), www.imy.se, or the data protection authority where you live.
Age
During the beta, accounts are for adults (18 or over) only. We do not knowingly hold accounts for anyone under 18; if we learn of one, we will delete it.
Changes
We will update this notice when the service changes, for example if paid plans launch, and change the date above.