Privacy Policy
Effective: August 26, 2026
2. Scope
This Privacy Policy primarily describes the processing in the mobile application “ERP Coach” (hereinafter “App”), available on the Apple App Store. A separate Privacy Policy applies to the website www.btf-consulting.com.
3. Use of this website
This Privacy Policy primarily describes the processing that takes place in the ERP Coach app. When you visit this website itself, we additionally collect anonymized usage statistics.
We record the page visited, the language version, the referrer domain, the country, the device type (mobile, tablet, desktop) and interactions such as clicks on the App Store link.
No cookies are set and no data is stored on your device. Your IP address is not stored. It is processed on the server together with a random value that changes daily to form a checksum that cannot be reversed. This checksum makes it possible to count visitors within a single day, but it does not permit recognition beyond that day and no conclusions about your identity.
The data is stored with Supabase Inc. as a processor. The server location we use is within the European Union (Frankfurt am Main). This data is not transferred to a third country.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in designing and improving our offering in line with actual demand.
4. What Data We Collect
4.1 Device Identifier
When you first launch the App, a randomly generated device identifier (format: “device_[timestamp]_[random]”) is created and stored locally on your device. This identifier is used to:
- Associate your onboarding answers and usage data with your device
- Manage your subscription via RevenueCat
- Enable the deletion of your data upon request
This identifier is not derived from any iOS-supplied identifier (such as IDFA or IDFV) and cannot be used to identify you across other apps.
4.2 Onboarding Data
During the initial setup, the App collects the following information:
- Selected SAP modules (e.g. FI, CO, MM)
- Your professional role (e.g. consultant, learner)
- Topics of interest (e.g. transactions, tables, processes)
- How you heard about the App (e.g. LinkedIn, Instagram)
- Optional free-text entries for “Other” selections
This data is stored in our backend database (Supabase, EU servers) linked to your device identifier.
4.3 Usage Data
The App collects events about how you interact with the content:
- Viewed entries (modules, transactions, tables, processes)
- Search queries
- Saved favorites
- Failed search attempts
These events are linked to your device identifier and are used to improve the App.
4.4 Subscription Data
When you subscribe to a plan, the following is processed:
- Subscription status (active, trial, expired)
- Subscription type (monthly, yearly)
- Apple transaction identifier
This data is managed via RevenueCat (see Section 7).
4.5 Data We Do NOT Collect
- No name, email, phone number, or other contact information
- No location data
- No contacts from your device
- No SAP system data or login credentials from your organization
- No payment data (processed exclusively by Apple)
5. Legal Basis and Purpose
We process your data on the following legal bases:
- Art. 6(1)(b) GDPR (performance of contract): Subscription management, delivery of the paid service
- Art. 6(1)(f) GDPR (legitimate interest): Product improvement, understanding usage patterns, troubleshooting
You have the right to object to processing based on legitimate interest at any time (see Section 10).
6. Internet Connection Required
The App requires an internet connection to load SAP reference data (transactions, tables, processes) from our backend. The App is not designed to work offline.
7. Third-Party Service Providers
We use the following service providers (subprocessors) to operate the App:
Supabase Inc.
Purpose: Backend database (storage of onboarding data and usage events)
Server location: European Union
Privacy Policy: https://supabase.com/privacy
RevenueCat Inc.
Purpose: Subscription management
Server location: United States of America
Privacy Policy: https://www.revenuecat.com/privacy
Data transfer to a third country (USA) is based on Standard Contractual Clauses (Art. 46 GDPR).
Apple Inc.
Purpose: App distribution, payment processing
Privacy Policy: https://www.apple.com/legal/privacy/
8. Data Retention and Deletion
- Onboarding data and usage events: Retained for 12 months and then automatically deleted. You may request earlier deletion at any time by sending a request to info@btf-consulting.com.
- Subscription data: Retained as required by tax law (in Germany: 10 years).
- Local app data: Deleted when you uninstall the App.
9. Right to Delete Your Data
You may request the deletion of all data associated with your device identifier at any time by sending an email to info@btf-consulting.com. We recommend including your device identifier in the message (found in the App’s “Settings” section). If not provided, we will delete all data that can be associated with your email request.
This will remove:
- Your onboarding profile from our database
- All your usage events from our database
Locally stored data on your device can be removed by uninstalling the App.
Your subscription remains active and can be restored via “Restore Purchases”.
10. Your Rights Under GDPR
You have the right to:
- Access your stored data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
To exercise these rights, contact: info@btf-consulting.com
11. Data Security
We implement technical and organizational measures to protect your data:
- Encrypted data transmission (TLS/SSL)
- Encrypted storage at our service providers
- Restricted access to backend systems
12. Children
The App is not intended for persons under 16 years of age. We do not knowingly collect data from children.
13. Changes to this Policy
We reserve the right to update this Privacy Policy as needed. The current version is always available at:
erpcoachapp.com/en/privacy-policy
14. Supervisory Authority
If you believe that the processing of your data violates the GDPR, you may lodge a complaint with the competent supervisory authority:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22, 7. OG
20459 Hamburg
Email: mailbox@datenschutz.hamburg.de