Privacy statement

• We use your data to run Amussis and to make it better, for example by looking at how a cohort went to improve the next one. For nothing else.
• We never sell your data, never use it for advertising, and never train AI on it, nor let anyone else do so. No tracking, no analytics, no scripts from other companies. The only cookies are the ones the site needs to work.
• Your data stays on our own server in Germany, in the EU.
• Your portfolio is private until you make it public yourself; then anyone with its link can read it.
• Recorded classes get a written transcript, made on that server by a speech-recognition model (an AI model). Nothing is sent to anyone else for it.
• Records of what happens at Amussis, such as class chat, class recordings, sign-up answers and logs, are deleted automatically a year after they were made, at the latest. Your account and your own work stay as long as you keep your account, and we delete them when you ask.
• You can ask to see, correct or delete your data at any time: write to hello@amussis.xyz.

Amussis ("we"). You can reach us at hello@amussis.xyz.

When you visit the site

We do not save IP addresses in our database or our own logs. Our server uses your address in its memory while it answers you, for example to limit how many requests one network can make. The server keeps a log of what was requested and when (for some actions also by which account) for 30 days; messages about errors from the server's programs can contain an IP address, and the mail server notes the addresses it delivered to, and both are deleted with the logs. We do this to keep the site working and safe (a legitimate interest).

Your account

Your name, username, email address, time zone and password. We store the password only as a one-way fingerprint (Argon2id), so nobody can read it back. When you sign up you also answer one question about why you want to join, and you confirm that you are 16 or older (we do not store your age or date of birth).

Before Amussis lets you in, a person at Amussis reads your request and decides. You also confirm your email address with a link we send you, and we remind you once after two days. A sign-up that is neither approved nor confirmed within five days is deleted, with everything in it. You cannot have an account without these details (the legal basis is our agreement with you). Only our administrators see your email address.

Your profile

A picture, a short bio, a website, links to your accounts on other platforms (such as GitHub, X, YouTube, TikTok, Discord or Telegram) and the addresses of crypto wallets you add are all optional. They show who you are to the people you learn with: your name, username and picture are seen by the people you share a cohort with and by our staff, and links to other platforms only if you choose to show them. Visitors who are not signed in see none of it, unless you make your portfolio public (below). You add these because you want to (consent), and you can remove them at any time in Account settings. Amussis does not contact those platforms; links are shown as you enter them.

Learning

The cohorts you are in and your role in them, the coursework you hand in (text, repository links and files), the feedback and scores you get, your portfolio, and your answers to our forms. You and your cohort's teaching team (teachers and teaching assistants) see your coursework, feedback and form answers, and so do our administrators; other learners do not. Form answers carry your name. This is what taking part in Amussis means (our agreement with you).

Public portfolios

Your portfolio is private: you, the teaching team of each of its cohorts and our administrators read it. Only you can make it public, in My portfolio, and it stays private until you do. Once it is public, anyone with its link (amussis.xyz/portfolio/ and your username) can read your name, username and profile picture, your cohorts with what you wrote about what you learned in them, and every portfolio entry past draft that you have not kept back, with its repository and other links. Feedback, version history, review requests and files are never shown there, nor anything about other people. We ask search engines not to list these pages, so people find them through their link.

When you or anyone else posts the link on another platform, such as Discord, Telegram, X or LinkedIn, that platform fetches the page and a picture we make from it (your name, your cohorts and how many pieces of evidence you show) to show a preview, and keeps that copy under its own rules. The share buttons only open those platforms' own pages: there are no scripts or trackers of theirs on Amussis. You can make your portfolio private again, or keep back any entry, at any time: the link stops working at once, though previews a platform already made may stay there a while. You choose all of this (consent).

Live classes, chat and the shared code editor

Your camera, microphone and shared screen travel through our own server to the others in the class; nothing goes directly between participants or through another company. Live video is not stored unless the class is recorded.

Messages in a cohort's chat carry your name and are seen by everyone in the cohort. The teaching team can remove a message; its text is then deleted. Chat messages are deleted a year after they were written. What you write in a class's shared code editor stays with the cohort.

Class recordings

The teaching team can record a class, so that learners can catch up on a class they missed and look back at what was taught (a legitimate interest). While a class is recorded, everyone in it sees a "Recording" sign. A recording holds the video, voices and shared screens of the people who have their camera, microphone or screen on, their usernames, and the class chat of that time.

The teaching team and our administrators can watch every recording of a cohort; its learners can watch a recording once the teaching team publishes it. The Owner of Amussis can download recordings. Recordings are deleted a year after the class, at the latest.

Keeping your camera and microphone off keeps your face and voice out of a recording, and your words out of its transcript. If you do not want to be recorded, tell the teaching team: they can stop the recording. You can also ask us to delete a recording you appear in.

Transcripts of recorded classes

After a recorded class, our own server writes down what was said in it. A speech-recognition model, an AI model (Whisper) that runs on our server, turns each person's recorded voice into text, with their username and the time they spoke. It runs only on our server, and only once no class is live: no recording, voice or transcript is sent to anyone else for it, and the model is not trained on your voice or your words. Words can be misheard, so a transcript is notes of the class, not an exact record.

A transcript is seen by those who may watch its recording, and by the AI assistants they connect, which read transcripts instead of watching recordings. It goes with its recording: a year after the class at the latest, or sooner when the recording is deleted. If your account is deleted, your lines stay in the transcript as a former member's, as the recording stays.

Keeping accounts safe

To keep accounts and Amussis safe (a legitimate interest), we keep:

• your sign-in sessions, until you sign out, or after six months without use (thirty days for administrators);
• which browsers have signed in to your account before, through a cookie that lasts a year, so that wrong passwords from elsewhere cannot lock you out;
• if you use two-step sign-in, the key of your authenticator app and fingerprints of your recovery codes;
• wrong passwords, counted for a few minutes in the server's memory (never stored), and wrong two-step codes, kept for one day;
• records of what was done to accounts (approvals, roles given, warnings, suspensions and notes administrators write about an account) and of the emails we sent you, each deleted a year after it was made.

Email

Amussis emails you about your account and the cohorts you are in only: confirming your address, password links, decisions on your requests, warnings and suspensions, and now and then a message from Amussis about your cohorts. No newsletters, no advertising, nothing on anyone else's behalf. We send these emails from our own server.

When you write to hello@amussis.xyz, your email reaches our mailbox through our domain's mail forwarding, and our mailbox is at Google (Gmail).

Blockchain exercises

If you add a Solana devnet wallet for exercises, Amussis can look up its balance and send it free test tokens through a public Solana devnet server. Your teaching team sees the wallet's address and balance. Addresses and transactions on a blockchain are public and cannot be deleted by anyone, so only add a wallet you are happy to be public. You choose to add it (consent), and you can remove it from your account at any time.

AI

Amussis teaches agentic engineering, and AI assistants are part of how people work here. Our promise: Amussis never trains AI on your data, and never lets anyone else do so.

• When people at Amussis use an AI assistant for work there, for example to help review coursework or to read sign-up requests, they use only AI services whose terms forbid training on what those services receive, and the assistant sees only what its person may see and allowed it to. A person at Amussis decides who joins; an assistant can help prepare that, but cannot decide it.
• On our own server, one AI model runs: the speech-recognition model that writes the transcripts of recorded classes (see above). It runs there locally, nothing is sent to anyone else for it, and it is not trained on what it hears.
• Your own assistant, which you connect with a token you create, works for you: what it sends to its AI service is between you and that service.
• Classmates' assistants can read what those classmates can read, such as the class chat and the transcripts of recordings they may watch. No assistant receives a recording's video.

Signing in with Google, and verifying accounts on other platforms

Amussis does not offer these at the moment. If it does later, this statement will first say what those services receive and what they give us.

• Our hosting company, netcup GmbH in Germany, runs our server under a data processing agreement and may not use your data for anything else.
• Your email provider receives the emails we send you, like any email.
• Google (Gmail) keeps the emails you send to hello@amussis.xyz.
• AI services, only as described above, and never for training.
• Public Solana devnet servers receive the addresses of the devnet wallets you add.
• Platforms where a public portfolio's link is posted, such as Discord, Telegram, X or LinkedIn, fetch its page and preview picture; only for portfolios their owners made public.
• Authorities, only when the law requires it.

We never sell or rent your data, and we never share it with advertisers.

On our server in Nuremberg, Germany, in the EU, with encrypted backups on our own backup computer, also in the EU. Data can leave the EU only in the ways described above: emails you send to hello@amussis.xyz (kept by Google), AI assistants, the public Solana devnet servers, the platforms that fetch a preview of a public portfolio's link, and your own email provider.

• Records, deleted automatically a year after they were made: class chat; class recordings and their transcripts (a year after the class); sign-up and cohort requests with your answers (a year after the decision); records of what was done to accounts; the log of what AI assistants did at Amussis; answers to forms (a year after the form closed); the emails we sent; reports on recorded classes.
• Your account and your own work (profile, coursework, portfolio, uploads, posts): as long as your account exists. Ask us and we delete your account and everything that is yours within a month. Where something you made is shared with others, such as a review you wrote on someone's coursework, it stays without your name. Recordings you appear in follow their own one-year rule, or go sooner when you ask.
• A sign-up that is neither approved nor confirmed: five days, then it is deleted with everything in it.
• Sign-in sessions: six months without use (thirty days for administrators). Remembered browsers: a year.
• Server logs: 30 days.
• Backups: made every night and kept for a year at most, encrypted. Deleted data disappears from them within that year; if we ever have to restore a backup, we delete such data again.
• Figures without anyone's name, such as how busy the server and the classes were, may be kept longer.

The site uses only these cookies, which it needs to work; that is why it asks for no cookie consent.

• __Host-amussis_session keeps you signed in: until you sign out, or after six months without use (thirty days for administrators). A sign-in that has not finished yet lasts thirty minutes.
• __Host-amussis_visitor protects forms against misuse while you are not signed in: until you close your browser.
• __Host-amussis_device remembers that this browser has signed in to your account before, so that wrong passwords from elsewhere cannot lock you out: one year.

Your browser also keeps a few settings that never leave it: light or dark mode, whether the classroom's side panel is open, and whether you blur your background on camera.

You can ask us to:

• show you the data we keep about you, and give you a copy;
• correct it;
• delete it;
• stop using it for a while (restriction);
• give it to you in a common format so you can take it elsewhere (portability);
• stop using it where we rely on a legitimate interest, such as recordings or safety records (objection).

Where you gave consent, you can withdraw it at any time, for example by removing your profile links or a wallet. Much of this you can do yourself in Account settings: edit your profile, remove links and wallets, sign out everywhere, turn on two-step sign-in.

Write to hello@amussis.xyz, preferably from your account's email address, so we know it is you. It is free. We answer within one month; if a request is complicated we may need up to two more months, and we tell you why within the first month.

You can also complain to a data protection authority, for example the one in the country where you live. You are welcome to tell us first, but you do not have to.

Every connection to Amussis is encrypted (HTTPS). Passwords are stored only as one-way fingerprints. Administrators sign in with two steps, and everyone can turn that on. Your data stays on our own server, each person at Amussis sees only what their role needs, and our backups are encrypted.

Amussis is for people aged 16 and older. When you sign up, you confirm that you are.

When we change how we handle personal data, for example by adding a new service, we update this statement and its date.