Is Amplitude safe with your data?
Amplitude
Amplitude Inc.
Partial disclosure · high confidence
Amplitude earns a C (50/100) because it discloses its data practices only in part.
Dealbreaker flag
- D1.1: Amplitude may use techniques such as machine learning in order to improve the Services, and Customer instructs Amplitude to process its Customer Data for such purpose
#106
of 211 apps ranked
50
score · BI & analytics avg 51
-1
vs category average
Amplitude explicitly reserves the right to train machine learning on customer data with no opt-out, and while its privacy notice covers rights, legal bases and transfer safeguards in reasonable detail, most security and sharing commitments rest on vague adjectives rather than named mechanisms or numbers.
What Amplitude's privacy policy and terms of service say about your data
Customer data trains models with no opt-out
The terms state Amplitude "may use techniques such as machine learning in order to improve the Services, and Customer instructs Amplitude to process its Customer Data for such purpose". No opt-out is offered.
Rights are real but conditional
Access, portability and correction are backed by a named self-serve profile page and a privacy@amplitude.com channel, but deletion carries the caveat that Amplitude "may not be able to delete your Personal Data except by also deleting your user account" and post-termination deletion is left to Amplitude's "sole discretion", so deletion drops to half.
Security and sharing rest on adjectives
Safeguards are "commercially reasonable" with only generic "encryption, firewalls" and no TLS or AES-256 or RBAC named, breach notice is "may attempt to notify you" with no timeframe, and recipient categories resolve to "Service providers; third parties", none of which meets the named-mechanism bar for full.
Strongest disclosures are transfers, legal bases and change notice
European Commission-approved standard contractual clauses are named for cross-border transfers, each processing purpose is mapped to a specific legal basis, and the notice is dated June 1, 2026 with a commitment to additional notice for material changes.
What the policy is silent or vague on
- Not stated: keeping user inputs out of model training
- Not stated: a way to opt out of training
- Not stated: whether training use differs by plan
- Not stated: a deletion timeline after closure or request
Amplitude privacy rating
Details
- Category
- BI & analytics
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2026-06-01
- Region scored
- Global / US-default
- Last assessed
- 2026-08-13
Documents examined
Other bi & analytics apps
Each grade reflects our analysis of what an app states in its public privacy policy and terms as of the assessment date. It measures the transparency of those documents, not the company's actual data practices, security, or compliance. Grades are our opinion, offered for general information. Full disclaimer.