Last updated: 4 November 2026 (effective from 4 November 2026)
We have updated our Terms and Conditions and our Privacy Policy. The new versions apply from 4 November 2026. Until 3 November 2026, the previous versions remain in effect.
If you do not agree with the updated Terms and Conditions, you can object before 4 November 2026 by e-mail to info@augmedi.com. In this case, both you and Augmedi may terminate the contract. If you do not object, the updated Terms and Conditions apply from 4 November 2026.
Augmedi AG is responsible for the personal data described in this policy. This policy explains how we operate our medical learning platform, why we use personal data and how you can exercise your choices and rights.
Augmedi AG
Alte Landstrasse 70
8702 Zollikon, Switzerland
info@augmedi.com
Phone +41 79 525 80 61
UID CHE-270.189.576
This privacy policy informs you about the nature, scope and purposes of the processing of personal data by Augmedi AG ("Augmedi" or "we"). Personal data means any information relating to an identified or identifiable natural person. This policy applies to:
We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where applicable to our processing (in particular for users in the EU/EEA), the EU General Data Protection Regulation (GDPR). Swiss law does not require a legal basis for each processing activity, but processing must comply with the principles of the FADP and, where necessary, be justified, e.g. by consent, a contract, a legal obligation or an overriding interest. Where the GDPR applies and no other legal basis is mentioned in this policy, the following applies: processing based on your consent is based on Art. 6(1)(a) GDPR; processing to perform a contract with you or to take pre-contractual steps is based on Art. 6(1)(b) GDPR; processing to comply with legal obligations is based on Art. 6(1)(c) GDPR; and processing to protect our legitimate interests is based on Art. 6(1)(f) GDPR.
Within Augmedi, only employees who need your data for technical, commercial or content-related support have access to it. In addition, we use external service providers for the processing described in this privacy policy. The categories of external recipients are:
We only disclose personal data where this is legally permitted. Where service providers process data on our behalf, we conclude data processing agreements with them in accordance with Art. 9 FADP and Art. 28 GDPR, which oblige them to process the data only according to our instructions.
Some providers act as independent controllers for their own purposes, such as payment compliance or the operation of a social network. Where we jointly determine a processing operation with a provider, the respective responsibilities are governed by the applicable joint-controller arrangement. You may contact info@augmedi.com for information about the arrangement and to exercise your rights against us.
Personal data may be processed in Switzerland and transferred to recipients in the EU/EEA and the USA, as described for the services in section 4. Hosting location and the location of remote support or other access may differ. Where a destination is recognised as adequate under the applicable Swiss or EU rules, we rely on that recognition. For a US recipient, the relevant Swiss-US or EU-US Data Privacy Framework applies only if the specific recipient has an active certification covering the data and service concerned. Otherwise, we use an applicable safeguard, such as the European Commission standard contractual clauses with the adaptations required for Swiss law, and assess whether supplementary safeguards are needed. We do not rely on a contractual necessity exception merely because we have chosen a foreign supplier. You can request information about applicable safeguards and a copy of relevant clauses from info@augmedi.com, subject to appropriate protection of confidential information.
When you visit our website or web app, your browser automatically transmits data to our servers, which we use to ensure the stability and security of our services. This data is: IP address, date and time of the request, page requested, HTTP status code, amount of data transferred, referring website, browser type and version, operating system and language settings. The data is stored in log files and deleted at the latest after 14 days. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
Our web app and the associated data are hosted on Microsoft Azure in data centres in the EU. Our website is hosted by HubSpot (section 4.1). Our domains are registered with cyon GmbH, Basel, Switzerland, which also provides the domain name service (DNS). Hosting is technically necessary to provide our services. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and our legitimate interest (Art. 6(1)(f) GDPR).
We process master data (e.g. name, e-mail address) and contract data (e.g. membership, add-ons purchased, payment information) to fulfil our contractual obligations and to comply with legal obligations, in particular commercial and tax retention obligations. Legal basis: Art. 6(1)(b) and (c) GDPR.
To use the learning service, you need a user account. You can register with your e-mail address, a username and a password, or log in via single sign-on (SSO):
Authentication and account management are provided through Auth0 (section 4.1). When you use an external login provider, we do not receive that provider's password. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
We use the affiliation transmitted via SWITCH edu-ID to pre-fill the profession field in your profile. We use it to tailor our services to you and, in anonymised form, for research (section 3.4). Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
When you register and each time you log in, we store your IP address and the time of the action in order to protect you and us against misuse and unauthorised access. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
We process your answers to test questions, learning time, learning progress, content and 3D models used, and recent activity to provide the learning functions you request, including saved progress (Art. 6(1)(b) GDPR). We use proportionate internal analysis to identify content errors and improve the service on the basis of our legitimate interests (Art. 6(1)(f) GDPR), subject to your rights. Optional third-party behavioural analytics, session recording and advertising are governed by consent under sections 3.10 and 4.2. Learning reminders and promotional messages are governed separately by section 3.7.
Augmedi is intended only for persons aged 18 or over. We do not knowingly create accounts for or process personal data of persons under 18. If we become aware that a User Account belongs to a person under 18, we will delete it. Optional marketing and tracking are not a condition of access.
If your institution provides access, we process the identifiers and affiliation needed to confirm eligibility and administer the licence. We may receive these from you, your login provider or the institution. We share only the account or entitlement information necessary for that administration. We do not disclose individual test answers, scores or learning history merely because an institution pays for access. If an institutional learning programme requires individual reporting, we explain the recipient, fields, purpose, legal basis and retention before enabling it and obtain consent where required. The respective controller or processor roles are explained in that programme's notice. Legal basis for necessary access administration: Art. 6(1)(b) GDPR, or Art. 6(1)(f) GDPR where appropriate.
Where you use a function for notes, flashcards, uploads or other personal learning content, we process that content to save it, display it to you and provide the sharing functions you expressly choose (Art. 6(1)(b) GDPR). This does not by itself make private content public or authorise use for general-purpose AI training. The account and content deletion rules in section 6 apply. The platform is not intended for patient records; do not upload identifiable patient information or confidential information you are not authorised to disclose.
We want to contribute to better medical education through research. For this purpose, we analyse learning and usage data (section 3.3.5) together with general profile information such as profession, field of study and home organisation, in order to understand how medical content is learned and how learning methods can be improved.
We use anonymous or sufficiently aggregated data wherever the research purpose permits. Aggregation is not anonymous if individuals remain identifiable, for example in a small cohort. If an internal longitudinal analysis requires linkage, we replace direct identifiers with a code, restrict access and keep the re-identification key separately. These pseudonymised records remain personal data and remain subject to this policy, a lawful processing basis and applicable rights. We anonymise or delete them when the approved research purpose no longer requires identification. Truly anonymous results cannot be linked back to your account and therefore cannot be selectively deleted after anonymisation.
We may publish research results and share research datasets with universities, university hospitals and other research institutions only after assessing and addressing the risk of identifying individuals. Shared datasets and publications under this section are anonymous. Before a study involving identifiable or pseudonymised disclosure, interviews or additional data collection, we provide a separate study notice and obtain consent or establish another applicable legal basis, together with any ethics or other approval required for that project.
Processing before anonymisation remains subject to the FADP. Where justification is needed, we assess whether the conditions for a non-personal research or statistical purpose under Art. 31(2)(e) FADP are met. Where the GDPR applies, we rely on Art. 6(1)(f) only after assessing necessity, reasonable expectations and the balance of interests, with the safeguards required by Art. 89. Art. 89 is not a standalone legal basis. Where consent is required or appropriate for a particular study, we obtain it separately. You may object to processing based on legitimate interests as described in section 7. We do not use this provision to authorise the collection of patient data.
When you purchase a membership or an add-on, we process the related contract and payment data (e.g. product, price, billing period, subscription and trial status, payment confirmations). Payments are processed by Stripe (section 4.1), which also stores your payment method so that membership renewals can be charged automatically. We do not store any payment card or bank account data. From Stripe, we only receive and store the information needed for billing: your Stripe customer ID, the product purchased, the price, the subscription and its status, the amounts paid and due, the currency and the time of each transaction. Purchases via the Apple App Store or Google Play are processed by the respective provider under its own responsibility; we only receive the information required to activate your purchase. Legal basis: Art. 6(1)(b) and (c) GDPR.
If you withdraw from a contract, whether via the withdrawal function in your account settings, by e-mail or by post, we process your name, e-mail address, the order concerned, the content of your declaration and the date and time of receipt in order to process the withdrawal, refund payments and send you a confirmation. We keep this information as part of our contract and accounting records. Legal basis: Art. 6(1)(b) and (c) GDPR.
You can contact us by e-mail or through our website forms. We process the information you provide to respond and manage the relationship. We use HubSpot for contact details, institution and role, contract information and correspondence. Authorised staff may use the business version of Claude (Anthropic) connected to the CRM to summarise correspondence, draft replies or assist with contact management. Access is limited to the data needed for the task; staff review outputs before acting on them. This internal assistant is distinct from any AI feature made available to learners. We do not intentionally submit patient information, authentication secrets or full payment credentials to it. Under the applicable business agreement, inputs and outputs are not used to train the provider's models; this does not mean that the provider retains no data. Legal basis: Art. 6(1)(b) GDPR for responding to contractual requests and Art. 6(1)(f) GDPR for proportionate relationship management and staff assistance.
If you subscribe to our newsletter on our website, we use your e-mail address to send you information about our products, offers, news and our company. We use the double opt-in procedure: you will only receive the newsletter after confirming your subscription via a link in a confirmation e-mail. We store your IP address and the time of subscription and confirmation as proof of your consent. Legal basis: your consent (Art. 6(1)(a) GDPR).
We send messages necessary to operate your account or fulfil your order, such as verification, security alerts, receipts, access instructions and material subscription notices (Art. 6(1)(b) GDPR, and where applicable Art. 6(1)(c)). Optional learning reminders can be disabled without closing your account and rely on our legitimate interest in supporting your learning, subject to your right to object. Messages promoting upgrades, offers or additional purchases are marketing and follow section 3.7.3, even if included in an onboarding sequence.
We send promotional e-mails with your consent. Where applicable law permits an existing-customer exception, we may send offers for our own similar products after obtaining your address in connection with a sale, provided you were offered a simple, free opt-out when the address was collected and in every message, and have not objected. This includes the conditions of Art. 3(1)(o) of the Swiss Unfair Competition Act and, for EU/EEA recipients, the applicable national electronic-marketing rules. Registration or a free trial alone does not create consent to promotional e-mails. Consent is optional and may be withdrawn at any time. Legal basis: Art. 6(1)(a) GDPR, or Art. 6(1)(f) where the applicable customer exception is satisfied.
We use individual-level open and click tracking in e-mails only with your prior, specific consent. Where enabled, HubSpot processes the recipient identifier, the time of an opening or click, the link used and associated technical data to measure engagement and improve communication. You can withdraw tracking consent by contacting info@augmedi.com; unsubscribing from marketing also stops future marketing tracking. Refusing tracking does not prevent receipt of necessary service messages or an untracked newsletter. Legal basis: Art. 6(1)(a) GDPR and applicable rules on access to information on your device.
You can withdraw consent or unsubscribe from marketing at any time with effect for the future through the unsubscribe link in marketing e-mails or by writing to info@augmedi.com. Necessary account, security and contractual messages continue while needed. Withdrawal does not affect the lawfulness of processing before withdrawal.
We may invite you to voluntary feedback or satisfaction surveys in accordance with the e-mail rules in section 3.7. We state at the survey whether responses are anonymous or linked to your account. We do not describe a survey as anonymous if invitation tokens, account identifiers or other data allow us to identify you. Legal basis for the response analysis: our legitimate interest in improving the service (Art. 6(1)(f) GDPR), or consent where required.
We maintain company profiles on LinkedIn (LinkedIn Ireland Unlimited Company, Ireland), Instagram (Meta Platforms Ireland Ltd., Ireland), Reddit (Reddit, Inc., USA), TikTok (TikTok Technology Limited, Ireland) and YouTube (Google Ireland Limited, Ireland). If you contact us or interact with our content there, we process the data you share to communicate with you. The network operators also process your data for their own purposes in accordance with their own privacy policies, also in countries outside Switzerland and the EU/EEA, e.g. in the USA. For page statistics (insights), we may be jointly responsible with the operator. Legal basis: our legitimate interest in presenting our company (Art. 6(1)(f) GDPR).
We use cookies on our website and web app. Cookies are small pieces of information stored by your browser on your device. We also use similar technologies such as local storage, pixels and scripts (together "cookies").
On our website and web app, optional analytics, advertising and session-recording technologies are activated only after you choose the relevant consent category. Until then, and after you reject them, we use only technologies needed to deliver the requested service, security and consent choices. Rejecting optional cookies also blocks optional tracking requests that do not set cookies. Consent is not obtained by continuing to browse or accepting the Terms. You can accept, reject or select categories through the consent interface and change or withdraw your choice through Cookie settings on the website or the web app's privacy settings. Withdrawal stops future optional tracking. Strictly necessary technologies can be restricted in your browser, but this may prevent login or other requested functions.
The consent interface identifies the active providers, purposes, cookie or storage names and their duration. We keep a record of the categories chosen, the time and the notice version to respect and demonstrate your choices. Necessary local storage may hold session or application state; it is not permission for advertising tracking.
Under Swiss law, we inform you about cookies and their purpose and give you the possibility to refuse them (Art. 45c of the Telecommunications Act). For visitors from the EU/EEA, cookies that are not strictly necessary are only set with prior consent in accordance with the applicable national rules implementing Art. 5(3) of the ePrivacy Directive. Any further processing of personal data obtained in this way is based on your consent (Art. 6(1)(a) GDPR); for strictly necessary cookies, on our legitimate interest (Art. 6(1)(f) GDPR).
We use the following third-party technologies on our website and web app. You can revoke any consent given for opt-in technologies at any time via the cookie settings (section 3.10).
The services below support operations. Their inclusion here does not make every use of their cookies or scripts strictly necessary. Optional tracking by a supplier is subject to section 4.2; browser technologies require consent unless a specific exemption applies.
We use Microsoft Azure from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, to host our web app and store its data. The provider processes all data stored in the web app on our behalf.
Data location: EU. Access from the USA by Microsoft Corporation, cannot be excluded (section 2.3). Further information: https://privacy.microsoft.com/privacystatement
We use Microsoft 365 from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, for our e-mail communication and office applications. The provider processes the content of e-mails and documents as well as contact and communication data (e.g. names, e-mail addresses, IP addresses) on our behalf.
Data location: Switzerland/EU. Access from the USA by Microsoft Corporation, cannot be excluded (section 2.3). Further information: https://privacy.microsoft.com/privacystatement
Our employees use the AI assistant Claude from Anthropic, PBC, San Francisco, USA, connected to our CRM (section 3.6). The provider processes the CRM data accessed in each case (e.g. name, e-mail address, institution, correspondence) on our behalf, only to provide the service. Under the business terms we use, inputs and outputs are not used to train the provider's AI models.
Anthropic may process data in the USA. The applicable safeguards are described in section 2.3. Further information: https://www.anthropic.com/legal/privacy
We use Auth0, an Okta service, for login and account management. It processes contact details, identifiers, authentication information, login method, IP address and device information. For database login, password credentials are managed by the authentication service; they are not described here as recoverable "encrypted passwords".
Data location: EU. Access from the USA cannot be excluded (section 2.3). Further information: https://www.okta.com/privacy-policy/
If you choose to log in with SWITCH edu-ID, authentication is carried out by SWITCH, Werdstrasse 2, 8004 Zurich, Switzerland, under its own responsibility. SWITCH transmits to us the data listed in section 3.3.2.
Data location: Switzerland. Further information: https://www.switch.ch
If you choose to log in with an existing Google, Apple or Microsoft account, authentication is carried out by the respective provider under its own responsibility. The provider transmits your name and e-mail address to us.
There may be a data transfer to the USA (section 2.3). Further information can be found in the privacy policies of Google, Apple and Microsoft.
We use Stripe from Stripe Payments Europe, Ltd., Dublin, Ireland, to process payments. The provider processes payment data (e.g. payment method, card details, transaction data) and contact data. Stripe acts partly under its own responsibility, e.g. to comply with financial regulations and prevent fraud.
There may be a data transfer to Stripe, Inc. in the USA (section 2.3). Further information: https://stripe.com/privacy
We use Sentry from Functional Software, Inc., USA, to detect and analyse application errors. Diagnostic reports may contain browser and device information, error details, IP addresses and user identifiers where configured. We minimise and filter diagnostic data to avoid sending credentials, payment details or private user content. Sentry session replay is not part of this error-monitoring purpose.
Data location: EU. Access from the USA cannot be excluded (section 2.3). Further information: https://sentry.io/privacy/
We use HubSpot from HubSpot Ireland Limited, One Dockland Central, Guild Street, Dublin 1, Ireland, and HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA, to host our website and for our cookie banner, contact and newsletter forms, customer relationship management and sending e-mails. The provider processes contact data (e.g. name, e-mail address, institution), communication data and meta/communication data (e.g. IP address, device information) on our behalf.
Data location: EU. Access from the USA cannot be excluded (section 2.3). Further information: https://legal.hubspot.com/privacy-policy
We use Google reCAPTCHA from Google Ireland Limited, Ireland, on forms to help prevent spam and automated abuse. It analyses interaction and technical information such as IP address, device and browser details. It is not loaded site-wide merely for analytics. Where the configured version requires consent under applicable device-access rules, it is loaded only after that consent. You may contact info@augmedi.com if you do not wish to use a protected form. Legal basis for necessary abuse prevention: Art. 6(1)(f) GDPR; for consent-dependent processing: Art. 6(1)(a).
There may be a data transfer to Google LLC in the USA (section 2.3). Further information: https://policies.google.com/privacy
Our website hosting provider HubSpot uses Cloudflare, Inc., USA, as a subprocessor for content delivery and website security. This can involve IP address, request time, requested URL, browser and device information and security events. The purpose is to deliver pages reliably and prevent abuse, not advertising tracking. Necessary delivery and security processing relies on Art. 6(1)(f) GDPR. Processing may involve the USA; the safeguards in section 2.3 apply. Further information: https://www.cloudflare.com/privacypolicy/
The following technologies are only used with your consent. Some providers also use the data for their own purposes; details can be found in their privacy policies.
We use Google Tag Manager from Google Ireland Limited, Ireland, to manage optional technologies. It is loaded only after the relevant consent; this also avoids a pre-consent transmission of your IP address and browser information to Google merely to load the container. Each contained tag remains subject to its own category. Without the relevant consent, optional Google analytics and advertising tags, including cookieless measurement pings, are blocked.
There may be a data transfer to Google LLC in the USA (section 2.3). Further information: https://policies.google.com/privacy
With analytics consent, Google Analytics 4, provided by Google Ireland Limited, Ireland, measures visits and use of our website and web app, including pages, events, visit time, device information, approximate location and referral source. Google receives IP information to handle requests; GA4 does not log or store individual IP addresses. With separate advertising consent, Google Ads and associated DoubleClick technology measure advertising conversions and may support remarketing using cookies, pseudonymous identifiers and campaign or click identifiers. Linking analytics to advertising is subject to the relevant advertising consent. We do not send names, e-mail addresses, patient information or private learning content as analytics event fields.
There may be a data transfer to Google LLC in the USA (section 2.3). Further information: https://policies.google.com/privacy
With analytics consent, we use Microsoft Clarity from Microsoft to understand navigation through heatmaps and reconstructed session recordings. It processes clicks, scrolling, viewed pages and technical information such as device information and IP address. We exclude or mask identifying fields, free-text input and test answers before transmission. Recording is disabled on views where this protection cannot be assured. This is separate from Sentry error monitoring.
Clarity data is processed in the USA. The safeguards in section 2.3 apply. Further information: https://privacy.microsoft.com/privacystatement
With your consent, the HubSpot tracking code records how you use our website and web app, e.g. pages visited, time and duration of the visit, referring website and device information. If you are known to us as a contact (e.g. as a registered user or after submitting a form), this information can be linked to your contact record so that we can tailor our communication to your interests.
There may be a data transfer to the USA (section 2.3). Further information: https://legal.hubspot.com/cookie-policy
To measure the success of our advertising on Facebook and Instagram and, where applicable, to show our ads to people who have visited our website or web app, we may use the Meta Pixel from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Meta processes information about your visit (e.g. pages visited, actions taken, device information, IP address) and may link it to your Meta account and use it for its own purposes, e.g. to personalise advertising.
There may be a data transfer to the USA (section 2.3). Further information: https://www.facebook.com/privacy/policy
When you log in, our authentication service Auth0 may display a profile image from Gravatar, a service of Automattic, Inc., USA. For this purpose, a value derived from your e-mail address (hash) is used to retrieve the image, and technical data such as your IP address and browser information is transmitted to Automattic. An e-mail hash remains personal data where it can be linked back to you. If no Gravatar image exists, your initials are shown. Legal basis: our legitimate interest in displaying a profile image (Art. 6(1)(f) GDPR). International safeguards are described in section 2.3. Further information: https://automattic.com/privacy/
All communication between your browser and our services is encrypted using TLS. Only authorised persons have access to your data, and only to the extent necessary for their tasks. We use appropriate technical and organisational measures to protect your data against manipulation, loss, destruction and unauthorised access, and we continuously improve these measures in line with technological developments.
We delete personal data as soon as it is no longer needed for the purpose for which it was collected and no statutory retention obligation applies. Where data must be retained for legal reasons, its processing is restricted to that purpose. We apply the following periods:
If a legal hold requires longer retention, we restrict the affected records to that purpose and delete them when the hold ends. Unsubscribing removes you from active marketing; we retain a minimal suppression record where necessary to avoid sending unwanted marketing again. Supplier backup and security copies are handled under the applicable deletion arrangements and legal obligations.
Subject to the conditions and exceptions of the applicable FADP or GDPR, your rights include:
To exercise your rights, contact info@augmedi.com. We may request proportionate information to verify your identity. We respond within the applicable legal period: generally 30 days for access under Swiss law and one month under the GDPR. Where an extension or restriction is permitted, we explain it. You can request account deletion in the web app or by e-mail. See Terms section 3.5 for the effect on paid access.
You may object at any time to direct marketing, including profiling related to that marketing; we will stop that processing. For other processing based on legitimate interests, including research before anonymisation, you may object on grounds relating to your situation, subject to the applicable legal exceptions. Consent can be withdrawn as easily as it was given and without affecting earlier lawful processing.
You only need to provide the personal data required to establish and perform the contractual relationship or that we are legally required to collect. Without this data, we will generally not be able to conclude or perform a contract with you. Mandatory fields are marked as such. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.
Personalisation and communication segments may be based on your learning activity or profile. This may constitute profiling, even though it does not amount to a solely automated decision with legal or similarly significant effects. Optional behavioural tracking remains subject to consent. Before introducing a learner-facing AI service or a materially different use of personal data, we provide the specific information required for that feature.
We may amend this privacy policy to reflect changes in the law or in our services. The current version is published on our website and in the web app. We will inform registered users of material changes in advance by e-mail or in the web app.