masterivo.FiBu to go

The German version is legally binding; this translation is for convenience only.

Deutsche Fassung (maßgeblich) / German version

Privacy policy

As of: 03.11.2026

1. Controller

Matthias Wolfgang Beurer
7A, Rue Rochecouste
74438 Forest Side, Curepipe
Mauritius
Email: support@masterivo.com

Representative in the European Union (Art. 27 GDPR)

Since the controller is not established in the EU, we have appointed the following representative in the EU. You can also contact her with any questions about data protection:
Joana Keller-Ladendorf
Dürener Str. 521
52249 Eschweiler
Deutschland
Email: eu-vertreterin@masterivo.com

2. The most important points in brief

  • You do not need a user account for FiBu to go. We do not use any advertising services and use Cloudflare Web Analytics as the only analytics service (cookie-free, without storage on your device, see section 3) and do not use cookies ourselves (for the payment page of Dodo Payments, see section 4).
  • The app stores your learning progress, your settings and your access code only on your device (in the browser’s local storage). This storage is strictly necessary for the use of the app that you have requested (§ 25 para. 2 no. 2 TDDDG).
  • We process personal data only to the extent necessary for purchase, unlocking, sign-in, cancellation, withdrawal, customer support and – only at your request – for a review invitation.
  • We do not load fonts or scripts from third-party servers; the only exception is the statistics script of Cloudflare Web Analytics (section 3). To pay, we redirect you to the payment page of Dodo Payments.

3. Hosting of the website and the app

The website and the app are hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (Cloudflare Workers). When you access them, Cloudflare processes technically necessary data such as IP address, time, the address accessed and browser information in order to deliver the pages and to ward off attacks. The legal basis is our legitimate interest in a secure and stable service (Art. 6 para. 1 lit. f GDPR). Cloudflare processes the data on our behalf (Art. 28 GDPR). For the transfer to the USA, we rely on Cloudflare’s certification under the EU-US Data Privacy Framework (Art. 45 GDPR) and, in addition, on EU standard contractual clauses.

Visitor statistics with Cloudflare Web Analytics: For cookie-free visitor statistics, the website and the app load a script from Cloudflare (static.cloudflareinsights.com). It transmits to Cloudflare, Inc. (address above) the page accessed, the referring page, load times, browser and device information and, for technical reasons, your IP address. Cloudflare does not set any cookies for this, stores nothing on your device and does not create profiles across other websites. We only see aggregated figures. The legal basis is our legitimate interest in improving our service (Art. 6 para. 1 lit. f GDPR); the recipient is Cloudflare as our processor (Art. 28 GDPR), transfer to the USA as described above.

4. Purchase via Dodo Payments

Access passes are sold by Dodo Payments, Inc. together with the companies of its group, Dodope Payments Limited and Sarvapanchhi Technologies Private Limited (contact address according to Dodo Payments: Cosmos Workspaces, Indiranagar, Bengaluru 560075, Karnataka, India; email: support@dodopayments.com) as seller (Merchant of Record). When you choose “Buy” in the app, our licence service (section 5) creates a payment page with Dodo Payments and redirects you there. In doing so, we transmit the pass you chose, your country of residence (it is pre-filled on the payment page and cannot be changed because we do not supply customers resident in Mauritius and Georgia) and your consent to immediate unlocking with the time and app version; Dodo Payments stores them with the payment as proof (Art. 6 para. 1 lit. c GDPR in conjunction with § 356 para. 5 BGB). On the payment page, Dodo Payments processes the data from the purchase (e.g. name, email address, country, payment data) as an independent controller and may use its own cookies or similar techniques for this, for example to prevent fraud; the Privacy Policy of Dodo Payments applies. According to its privacy policy, Dodo Payments also transfers personal data within its group of companies and to recipients in countries outside the EU and the EEA; where there is no adequacy decision, Dodo Payments relies on EU standard contractual clauses. After payment, Dodo Payments redirects you to the app with the payment number. We receive from Dodo Payments the details we need to unlock and support your purchase (payment number, product, amount, time, status including refunds, email address, name). The legal basis is the performance of the contract (Art. 6 para. 1 lit. b GDPR).

Trial day “Try 1 day for free”: For the trial day, you enter your email address in the app. We transmit it to Dodo Payments together with the details mentioned above; there it can no longer be changed on the payment page. Dodo Payments creates a subscription with a trial period of one day and stores your payment data as an independent controller. Dodo Payments reports to our licence service (section 5) the start, a cancellation and the charge at the end of the trial (subscription number, product, times, amount, status, email address). So that we can end the subscription with Dodo Payments after the one charge, refund an accidental second charge and confirm the end of the trial and the way to cancel to you, the licence service stores for the subscription the email address, start and end of the trial, the payment number and the status (e.g. cancelled, refunded) for up to 400 days. So that the trial day is available only once per person, we also store an irreversible check value (SHA-256 hash) of your email address for 12 months and check with Dodo Payments before the start whether a purchase already exists for your address. The legal bases are the performance of the contract (Art. 6 para. 1 lit. b GDPR) and our legitimate interest in preventing repeated use of the free trial day (Art. 6 para. 1 lit. f GDPR). We send you the confirmation at the start via Brevo (section 7).

Origin of the purchase (optional): The answer to the optional purchase question “How did you hear about us?” and a link tag (utm) with which you came to our site are transmitted to Dodo Payments at the time of purchase; they are stored with the payment so that we can see which advertising channel works. Nothing is stored on your device for this: the app only reads the tag from the address accessed and keeps it in working memory until the page is closed. We do not use cookies for this and do not track you across other websites.

5. Licence service (unlocking and restoring)

For the purchase, the unlocking, the restoring of a purchase and the regular confirmation of your pass (when the app is opened, at most every 10 minutes, at the latest every 30 days), the app sends the payment number, when restoring the email address you entered, and a randomly generated device identifier to our licence service. It runs on Cloudflare (Cloudflare Workers, details as in section 3) and queries the status of the payment with Dodo Payments. So that a pass is used on only one device at a time, we store for your purchase the identifier of the device on which you last signed in; it is deleted no later than 400 days after the last sign-in. The legal bases are the performance of the contract (Art. 6 para. 1 lit. b GDPR) and our legitimate interest in preventing the passing on of access (Art. 6 para. 1 lit. f GDPR).

Sign-in by email link: If you use “Sign in with email” in the app, the licence service checks with Dodo Payments whether a valid pass belongs to your email address and sends you a sign-in link via Brevo (section 7). We do not store your email address for this. Only an irreversible hash value of the address is stored for one hour (protection against misuse, at most three links per hour) and the one-time link for 30 minutes. The legal basis is the performance of the contract (Art. 6 para. 1 lit. b GDPR).

6. Cancellation and withdrawal via our website

If you make a declaration via “Cancel contracts here” or “Withdraw from contract”, we process the details you enter (name, email address, details of the contract, type and time of the cancellation, where applicable reason, date and time). We compare them with the purchase data at Dodo Payments, process the declaration, send you a confirmation of receipt by email and receive a copy ourselves. The legal bases are our legal obligations (§§ 312k, 356a BGB; Art. 6 para. 1 lit. c GDPR) and the performance of the contract (Art. 6 para. 1 lit. b GDPR). We keep the declarations as proof until the limitation period expires (as a rule three years from the end of the year of the declaration).

7. Sending email with Brevo

We send sign-in links and confirmation emails (purchase confirmation, cancellation, withdrawal, review invitation) via Brevo (Sendinblue SAS, France). Brevo processes email address, name and content of the message for this on our behalf (Art. 28 GDPR) within the EU.

8. Reviews on Trustpilot and Google

Review links: So that the request for reviews can be switched on and off uniformly in all Masterivo apps, the app retrieves a small settings file from masterivo.com at most once a day (also hosted by Cloudflare, details as in section 3). Only the technically necessary connection data such as your IP address is processed; no information about you or your learning status is transmitted. The legal basis is our legitimate interest in uniform control (Art. 6 para. 1 lit. f GDPR). The buttons “Review on Trustpilot” and “Review on Google” are simple links: only when you click them does your browser open the page of Trustpilot A/S or Google Ireland Limited; before that, the app transmits nothing to these providers. The privacy policies of Trustpilot and Google apply to your review.

Notice “Become a tester”: Only if you open FiBu to go in the browser of an Android device (not in the app from Google Play) and the notice has never appeared on this device before, the app retrieves a small settings file from masterivo.com when the start page is opened, so that the notice can be switched on and off uniformly in all Masterivo apps (details as for the review links). Only the technically necessary connection data such as your IP address is processed; no information about you or your learning status is transmitted. The app remembers that the notice was shown only on your device (entry “masterivo_tester_hinweis”, see section 2), so that it does not appear again. There are no cookies and no analysis. The links “How to become a tester” and “Terms” lead to masterivo.com. The legal basis is our legitimate interest in uniform control (Art. 6 para. 1 lit. f GDPR).

Review invitation (only at your request): If you expressly request a review invitation in the app, our licence service retrieves your purchase email address and your name from Dodo Payments and sends you a confirmation, a copy of which goes to Trustpilot A/S, Pilestræde 58, 5th floor, 1112 Copenhagen, Denmark. Trustpilot then sends you your personal review link; for this, Trustpilot receives your email address, your name and a purchase identifier. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR), which you can withdraw at any time with effect for the future by email to us. The privacy policy of Trustpilot applies to your review on Trustpilot. We send at most one invitation per purchase.

Review invitation after the purchase (optional, double opt-in): Before the purchase, you can voluntarily tick a box to say that we may ask you by email for an independent review on Trustpilot about two weeks after the purchase. Your choice is stored in the purchase data at Dodo Payments. If you have ticked the box, we send you an email with a confirmation link after the purchase. Only when you click it does our licence service (Cloudflare, section 3) store the confirmation with the date and your payment number. About 14 days after the purchase, we then send you the invitation once; Trustpilot receives a copy as described above. Without the tick or without the confirmation, you will not receive a review request by email, and the purchase does not depend on it. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR, § 7 para. 2 UWG), which you can withdraw at any time with effect for the future by email to us. We delete the consent details no later than 400 days after the purchase.

9. Contact by email

When you write to us, we process your details to answer your enquiry (Art. 6 para. 1 lit. b or f GDPR). Emails to support@masterivo.com are forwarded via the forwarding service Cloudflare Email Routing (Cloudflare, Inc., see section 3) to our mailbox at Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). We delete the correspondence when it is no longer needed and there are no retention obligations.

“Report feedback or a bug” in the app: With this button, you can send us bugs and suggestions for improvement directly from the app. We store your message, the type of report, the app version, the task or view the report refers to, the browser identifier (user agent) and – only if you voluntarily provide it – your email address for a reply (Art. 6 para. 1 lit. f GDPR; our legitimate interest is to fix errors and improve the app; if an email address is given, additionally Art. 6 para. 1 lit. b GDPR). The data is held in a database at Cloudflare (see section 3). We review the reports with the help of Claude (Anthropic, PBC, 548 Market Street, San Francisco, CA 94104, USA) in order to find errors; the message is transmitted to the USA for this (EU standard contractual clauses or EU-US Data Privacy Framework). To protect against misuse, we store an irreversible hash value of your IP address (2 days). We delete reports once they are resolved, after 12 months at the latest.

Short feedback in the app (“How do you like FiBu to go so far?”): No earlier than 14 days after your first use, the app asks you at most twice for a short assessment. Whether and when the question appears is remembered by the app only on your device (see section 2); nothing is transmitted there as long as you do not send anything. If you send it, your stars (1 to 5), your optional text, the app version and the language go to our collection point feedback.masterivo.com, a database at Cloudflare (see section 3). The purpose is to improve the app (Art. 6 para. 1 lit. f GDPR; our legitimate interest is to find out what helps and what is missing). To protect against misuse, we store, as with reports, an irreversible hash value of your IP address (2 days). Publication only with consent: Only if you tick the box (it is not pre-selected) may we show your text with the stars and the name you gave on masterivo.com and in Masterivo posts on social networks (Art. 6 para. 1 lit. a GDPR). We check every voice by hand beforehand. You can withdraw your consent at any time with effect for the future by email to support@masterivo.com; we then remove the voice from our pages. The question is the same for everyone, regardless of how satisfied someone is, and there is no compensation. Storage period: We delete unpublished voices after 12 months, published ones until you withdraw.

Hints about features (push notifications, only with your consent): If you expressly agree in the app under “Feature hints” (settings or the one-time question), we send you a short notification through your browser at most once a week, pointing to a feature of the app that you have never used and that is unlocked for you. The browser asks for permission only after your click. Our licence service (Cloudflare Workers, section 3) stores: your browser’s push address (endpoint) with its keys, your language, which features you have already used, that your access is valid (end date, without name or email address), the time of the last hint and the feature last named. The notification is delivered encrypted via the push service of your browser or device manufacturer (depending on the device Google, Mozilla, Apple or Microsoft); they receive the endpoint and the time, not the content. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG). You can withdraw it at any time with effect for the future: switch the toggle off in the app settings (the subscription is then cancelled in the browser and deleted by us) or block notifications in the browser settings. Without consent nothing is stored; subscriptions that the push service reports as invalid are deleted automatically. “Delete all data” in the app also cancels the subscription.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time (Art. 7 para. 3). You can also lodge a complaint with a data protection supervisory authority (Art. 77), for example at your place of residence. Simply write to us at support@masterivo.com.

11. Other

There is no automated decision-making, including profiling. Providing data is necessary for purchase, unlocking, cancellation and withdrawal; without it, we cannot carry out these processes.