AMBOSS is a potential doxx situation that is well known for a while.
Just read their ToS on their site.
Here is a sample:
"We collect information about how you access our Services, including data about the device and network you use, such as your hardware model, operating system version, mobile network, IP address, unique device identifiers, browser type, and app version. We also collect information about your activity on our Services, such as access times, pages viewed, links clicked, and the page you visited before navigating to our Services."
Folks pay them and feed their data to be used by them. 😂