Controller: Matthias Wolfgang Beurer, 7A, Rue Rochecouste, 74438 Forest Side/Curepipe, Mauritius, email: support@masterivo.com.

Representative in the European Union (Art. 27 GDPR/DSGVO)

As the controller is not established in the EU, we have appointed the following representative in the EU. You can also contact her with any questions about data protection:
Joana Keller-Ladendorf
Dürener Str. 521
52249 Eschweiler
Deutschland
Email: eu-vertreterin@masterivo.com

Your learning progress stays on your device

Your progress, your settings and your exam results are stored exclusively locally in your browser’s or app’s storage. We do not transmit this data to our servers. There is no tracking of your behaviour, no advertising and no analytics cookies (only an anonymous visitor statistic without cookies, see “Purchase via Dodo Payments”).

Purchase via Dodo Payments

On the web, sales are made through Dodo Payments as reseller (Merchant of Record). To pay, you are redirected to the Dodo Payments payment page, where you enter your payment details. Dodo Payments processes your payment and billing data (e.g. name, email address, billing country, payment method) under its own responsibility; the privacy policy of Dodo Payments applies. We do not receive your payment details (e.g. card number). From Dodo Payments we receive your email address, your name, the payment number, the offer purchased and the payment status (including refunds and chargebacks) in order to unlock and manage your access (Art. 6(1)(b) GDPR). With the redirect, we transmit to Dodo Payments the selected offer, the email address you entered and the time at which you confirmed the immediate unlocking. According to its privacy policy, Dodo Payments also transfers personal data within its group of companies and to recipients in countries outside the EU and the EEA; where there is no adequacy decision, Dodo Payments relies on EU standard contractual clauses.

The purchase question (“How did you hear about us?”) is voluntary; we transmit your answer and the link marker (utm values of the link through which you have just come to us) to Dodo Payments with the payment so that we can see which advertising channel works (Art. 6(1)(f) GDPR); nothing is stored on your device for this, there are no cookies and no cross-site tracking. In addition, we use Cloudflare Web Analytics for an anonymous visitor statistic; the recipient of the access data is Cloudflare, Inc. (see “Hosting”). No cookies are set, nothing is stored on your device and no profiles are built across websites (Art. 6(1)(f) GDPR).

Purchase in the iPhone app (App Store)

In the iPhone app you buy through Apple; its terms and privacy notices apply there. To verify the purchase, we use RevenueCat, Inc. (San Francisco, USA) as processor. A randomly generated app identifier, the store’s purchase receipt as well as device type and country are processed (Art. 6(1)(b) GDPR). The transfer to the USA relies on the EU-US Data Privacy Framework or standard contractual clauses. We only receive your email address if you provide it voluntarily. The Android app from Google Play does not offer purchases: access cannot be bought there but only on the web at masterivo.com (Dodo Payments); in the Android app you sign in with such an access.

Access via an education provider

If you redeem a course code, we store your email address, the code and the start and end of your access (Art. 6(1)(b) GDPR). Your education provider can see which email addresses occupy a place and when the code was redeemed in each case – but not your learning progress, because that stays on your device.

Trial access

We currently do not offer a trial access (since 30.10.2026). So that each address can use the trial only once, we store for each trial access a check value of the address formed with a secret key, as well as the start and end of the trial access. We delete these entries automatically 12 months after the end of the trial access (Art. 6(1)(b) and (f) GDPR; legitimate interest: preventing misuse of the free offer). In the iPhone app, the trial runs via a free item in the App Store; the section on the store apps applies to it. For trial accesses started up to 30.10.2026, we did not store the address itself and send no emails in this regard.

Tip emails during the trial access: If we offer the trial access again and you start it with an email code, we additionally store your email address. With it we send you at most three short emails during the 7 days: on the first day tips for getting started, at the halfway point a note on a feature of the app, and about one day before the end a reminder with our current prices and a link to the purchase page. The legal basis is Art. 6(1)(f) GDPR in conjunction with § 7(3) UWG (information about our own app; legitimate interest: making it easier for you to get started and informing you about our offers). We point this out to you when the trial access starts. You can object to these emails at any time without incurring any costs other than the transmission costs at basic rates: via the link “Keine Tipp-Mails mehr” (no more tip emails) in each of these emails or by email to us. Anyone who has meanwhile bought a pass or redeemed a course code no longer receives them. Brevo handles the sending (see “Sign-in by email code”). We do not know your learning progress in this process; it stays on your device. We delete the email address 2 days after the end of the trial access; as above, only the check value remains afterwards. If you have unsubscribed, we store the time with the check value so that it stays that way.

Testtag (1 day free trial)

If you start the Testtag, Dodo Payments sets up a subscription with your payment method under its own responsibility (see “Purchase via Dodo Payments”). For this we store the contract number from Dodo, your email address, a check value of the address formed with a secret key, the start and end of the Testtag, whether and when it was cancelled and the payment number of the one payment after it. With this we unlock the Testtag, immediately send you the confirmation with the end of the trial, the amount and the way to cancel (sent via Brevo), end the subscription after the payment, refund an accidental second charge and ensure that each person uses the Testtag only once (Art. 6(1)(b), (c) and (f) GDPR). We delete the email address from this entry 2 days after the end of the trial and the rest of the entry after 12 months; we keep purchase data as described under “Hosting”.

Delete account

Under “Me → Delete account and data” you can delete the data we have stored about you yourself – even after a pass or trial access has ended, as long as you have not signed out on the device. You can also request deletion at any time informally by email. Billing data at Dodo Payments or purchase data at Apple remain stored there in line with their legal obligations.

Cancellation and withdrawal via our website

If you make a declaration via “Verträge hier kündigen” (cancel contracts here) or “Vertrag widerrufen” (withdraw from the contract), we process the information you enter (name, email address, details about the contract, type and time of the cancellation, where applicable the reason, date and time). We compare it with our purchase data, process the declaration, send you a confirmation of receipt by email (sent via Brevo, see below) and receive a copy ourselves. The legal bases are our legal obligations (§§ 312k, 356a BGB; Art. 6(1)(c) GDPR) and the performance of the contract (Art. 6(1)(b) GDPR). We keep the declarations as evidence until the limitation period has expired (as a rule three years from the end of the year of the declaration).

Sign-in by email code

For signing in on further devices, we send a one-time code to your email address. Brevo (Sendinblue SAS, France) handles the sending as processor within the EU. Of the code we store only a check value (hash); it expires after 15 minutes and is deleted after one day at the latest.

Only one sign-in at a time

So that an access is used only by the person who acquired it, it is signed in on only one device at a time. For this we store, for your access, a check value (not the email address itself), a random session identifier of the device signed in last and the time of last use. When opened, the app asks at most every 10 minutes whether it is still the signed-in device. We delete the entries 400 days after the last use (Art. 6(1)(b) GDPR, performance of the contract, and (f) GDPR, legitimate interest in protection against the passing on of accesses).

Reviews

If you submit a review, we store the star rating, text, display name, date and a note on your verified purchase (Art. 6(1)(a) GDPR, consent). You can request deletion at any time by email. To invite you to an independent review, we transmit name, email address and order number to Trustpilot A/S (Pilestræde 58, 1112 Copenhagen, Denmark).

If, when reviewing, you also tick the box for masterivo.com (not pre-selected), we additionally send stars, text and display name to our central collection point feedback.masterivo.com (see “Short feedback”). After our approval they can then appear on masterivo.com and in posts by Masterivo on social networks (Art. 6(1)(a) GDPR). Without the tick, your review stays only here in the app.

Request for a review on Trustpilot or Google

At most once a day, the app retrieves the settings file https://masterivo.com/bewertungen.json. It determines whether the app shows a request for a review on Trustpilot or on Google, and contains the links to our profiles there. When retrieving it, the app sends no personal data; only the technically necessary connection data arise (e.g. IP address and time), which masterivo.com delivers via Cloudflare (see “Hosting”; Art. 6(1)(f) GDPR). Whether and when the request was shown and whether you chose “Later” or “Don’t ask again” is stored by the app only on your device.

Only when you tap “Rate on Trustpilot” or “Rate on Google” does the page of Trustpilot A/S or Google open in a new tab. Before that we transmit nothing to these providers, and we attach no identifiers or tracking parameters to the links. On their pages, the privacy policies of Trustpilot and Google apply. The request is voluntary and has no influence on your access; we offer no consideration for a review.

Hosting

The website and the server functions are operated by Cloudflare, Inc. (San Francisco, USA) as processor. Your requests are handled by the Cloudflare data centre closest to you; technically necessary server logs (IP address, time, page requested) arise in the process (Art. 6(1)(f) GDPR). We store purchase assignments, course accesses and reviews in a database at Neon (Databricks, Inc., USA) with a server location in Frankfurt am Main. Transfers to the USA rely on the EU-US Data Privacy Framework or EU standard contractual clauses.

Fonts

The app uses only the fonts available on your device. No fonts are loaded from elsewhere, not even from Google.

Report feedback or an error

Via “Report feedback or an error” (under “Me” and under each task) you can send us errors and suggestions for improvement directly from the app. We store your message, the type of report, the app version, the task or view the report refers to, the browser identifier (user agent) and – only if you provide it voluntarily – your email address for a reply (Art. 6(1)(f) GDPR; our legitimate interest is to fix errors and improve the app; if you give your email, additionally Art. 6(1)(b) GDPR). The data is kept in a database at Cloudflare (see “Hosting”). We review the reports with the help of Claude (Anthropic, PBC, 548 Market Street, San Francisco, CA 94104, USA) in order to find errors; the message is transmitted to the USA in the process (EU standard contractual clauses or EU-US Data Privacy Framework). To protect against misuse, we store an irreversible hash value of your IP address (2 days). We delete reports as soon as they are dealt with, after 12 months at the latest.

Short feedback

At the earliest 14 days after your first use, the app asks you at most twice: “How do you like FiBu für Büromanager so far?” – only if you cannot yet review here as a buyer and have not already done so. When the question appeared and whether you chose “Later” or “Don’t ask again” is stored by the app only on your device. If you submit the card, we transmit your stars, your text (voluntary), the app version and the language to our central collection point feedback.masterivo.com; like the error reports, it runs at Cloudflare (see “Hosting” and “Report feedback or an error”). The purpose is to improve the app (Art. 6(1)(f) GDPR). Only if you tick the box (not pre-selected) do we also send the name you entered, and we may show text, stars and name, after our approval, on masterivo.com and in posts by Masterivo on social networks (Art. 6(1)(a) GDPR). You can withdraw your consent at any time by email to support@masterivo.com. We delete unpublished feedback after 12 months, and published feedback as soon as you withdraw. The answer is voluntary, there is no consideration, and every person sees the same question – regardless of how satisfied they are.

Tips about new features (web push)

This is off by default. If you switch it on, we send a notification to this device at most once a week, pointing to a feature of the app that you have never used. If you have used everything, we send nothing. You give your consent by tapping “Yes, please” or by switching on the toggle under “Me” → “Appearance and controls” and then allowing notifications in your browser (Art. 6(1)(a) GDPR, section 25(1) TDDDG). We store on our server: the address (“endpoint”) and the keys of your device at your browser’s push service, the language, which features you have already used, a non-reversible hash of your access, the end of your access, and when and which tip was last sent. Which pages you open in the app is remembered by the app only on your device; only the list of features used is sent to us, and only while the tips are switched on. The recipient is your browser’s push service (Google for Chrome and Android, Mozilla for Firefox, Apple for Safari, Microsoft for Edge); it delivers the encrypted notification, learns for technical reasons the address of your device and the time but not the content, and may also process data outside the EU. The data is held in a database at Cloudflare (see “Hosting”). You can withdraw your consent at any time with effect for the future: switch off the toggle under “Me” (this cancels the subscription at your browser and deletes the data with us immediately), sign out, or revoke the permission in the browser settings (we then delete the subscription at the next sending attempt at the latest). When your access ends, we stop sending and delete the subscription 30 days later at the latest. Consent is voluntary; the app works unchanged without it.

Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection, as well as the right to lodge a complaint with a data protection supervisory authority.