Privacy Policy

1. Controller

BTF Consulting GmbH
Sandkamp 1
22111 Hamburg, Germany

Email: info@btf-consulting.com

2. Scope

This Privacy Policy primarily describes the processing in the mobile application “ERP Coach” (hereinafter “App”), available on the Apple App Store. A separate Privacy Policy applies to the website www.btf-consulting.com.

3. Use of this website

This Privacy Policy primarily describes the processing that takes place in the ERP Coach app. When you visit this website itself, we additionally collect anonymized usage statistics.

We record the page visited, the language version, the referrer domain, campaign parameters from the requested URL (UTM), the country, the device type (mobile, tablet, desktop), which sections of a page were displayed, and interactions such as clicks on the App Store link.

No cookies are set and no data is stored on your device. Your IP address is not stored. It is processed on the server together with a random value that changes daily to form a checksum that cannot be reversed. This checksum makes it possible to count visitors within a single day, but it does not permit recognition beyond that day and no conclusions about your identity.

The data is stored with Supabase Inc. as a processor. The server location we use is within the European Union (Frankfurt am Main). This data is not transferred to a third country.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in designing and improving our offering in line with actual demand.

4. Contact by email

On this website you can contact us about a pilot request or a referral. The links provided for this open your own email program with a prepared subject line and message. No data is entered or transmitted on the website itself; your message is sent from your own email account.

We process the details contained in your email (typically name, email address, company, number of seats requested, contact details of a person responsible for training and any optional additional information) in order to respond to your request.

If you provide us with the contact details of a third party, such as a colleague or a manager, we process them solely in order to get in touch in connection with your referral. We inform the person concerned about the source of their data when we first contact them.

Your email reaches us at our own mailbox. The data is deleted once your request has been dealt with in full, and at the latest after twelve months if no business relationship comes about.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

5. What Data We Collect

5.1 Device Identifier

When you first launch the App, a randomly generated device identifier (format: “device_[timestamp]_[random]”) is created and stored locally on your device. This identifier is used to:

• Associate your onboarding answers and usage data with your device
• Manage your subscription via RevenueCat
• Enable the deletion of your data upon request

This identifier is not derived from any iOS-supplied identifier (such as IDFA or IDFV) and cannot be used to identify you across other apps. Separately, your device’s advertising identifier (IDFA) is only transmitted to Meta with your consent, see Section 9.

5.2 Onboarding Data

During the initial setup, the App collects the following information:

• Selected SAP modules (e.g. FI, CO, MM)
• Your professional role (e.g. consultant, learner)
• Topics of interest (e.g. transactions, tables, processes)
• How you heard about the App (e.g. LinkedIn, Instagram)
• Optional free-text entries for “Other” selections

This data is stored in our backend database (Supabase, EU servers) linked to your device identifier.

5.3 Usage Data

The App collects events about how you interact with the content:

• Viewed entries (modules, transactions, tables, processes)
• Search queries
• Saved favorites
• Failed search attempts

These events are linked to your device identifier and are used to improve the App.

5.4 Subscription Data

When you subscribe to a plan, the following is processed:

• Subscription status (active, trial, expired)
• Subscription type (monthly, yearly)
• Apple transaction identifier

This data is managed via RevenueCat (see Section 8).

5.5 Data We Do NOT Collect

• No name, email, phone number, or other contact information
• No location data
• No contacts from your device
• No SAP system data or login credentials from your organization
• No payment data (processed exclusively by Apple)

6. Legal Basis and Purpose

We process your data on the following legal bases:

• Art. 6(1)(b) GDPR (performance of contract): Subscription management, delivery of the paid service
• Art. 6(1)(f) GDPR (legitimate interest): Product improvement, understanding usage patterns, troubleshooting
• Art. 6(1)(a) GDPR (consent): Measuring and optimizing our advertising campaigns, only with your consent (see Section 9)

You have the right to object to processing based on legitimate interest at any time (see Section 12).

7. Internet Connection Required

The App requires an internet connection to load SAP reference data (transactions, tables, processes) from our backend. The App is not designed to work offline.

8. Third-Party Service Providers

We use the following service providers (processors) to operate the App. Meta is not a processor but a joint controller together with us (see Section 9):

9. Advertising measurement with the Meta SDK

From version 1.6.0, the app includes the software development kit (SDK) of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). We use it to measure, together with Meta, which of our ads on Facebook and Instagram bring people to ERP Coach, and to optimize our advertising campaigns.

Only with your consent. During onboarding, a dedicated screen explains the purpose, followed by Apple’s “App Tracking Transparency” prompt. The Meta SDK is only started if you agree there. Without your consent, no data at all is transmitted to Meta. Declining has no disadvantages, the app works fully.

What data is transmitted. After you consent, the SDK transmits to Meta: app events such as installation and app launch, a randomly generated identifier stored on your device, your device’s advertising identifier (IDFA), device and system information (device model, iOS version, language setting) and your IP address. Name or email address are not transmitted, the app has no user accounts.

Purchase and trial events. Also only with your consent, our subscription service provider RevenueCat transmits purchase and trial events (type of subscription, price, time) server-side to Meta (Conversions API). Without consent, the identifiers required for this are not set at RevenueCat.

Withdrawal. You can withdraw your consent at any time in the iOS settings under “Privacy & Security → Tracking”. After that, no more data is transmitted to Meta, and the identifiers at RevenueCat are deleted. The lawfulness of processing carried out before withdrawal remains unaffected.

Joint controllership. We and Meta are joint controllers for the collection of data in the app and its transmission to Meta (Art. 26 GDPR). This is based on Meta’s Controller Addendum: https://www.facebook.com/legal/controller_addendum. Meta is solely responsible for any further processing after transmission. You can exercise your rights both with us and directly with Meta.

Legal basis. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

Transfer to the USA. Meta may transfer data to Meta Platforms, Inc. in the USA. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework. The transfer is based on the European Commission’s adequacy decision (Art. 45 GDPR).

Storage period. The identifier remains stored on your device until you delete the app. How long Meta stores the transmitted data is governed by Meta’s privacy policy.

More information: https://www.facebook.com/privacy/policy

10. Data Retention and Deletion

• Onboarding data and usage events: Retained for 12 months and then automatically deleted. You may request earlier deletion at any time by sending a request to info@btf-consulting.com.
• Subscription data: Retained as required by tax law (in Germany: 10 years).
• Local app data: Deleted when you uninstall the App.

11. Right to Delete Your Data

You may request the deletion of all data associated with your device identifier at any time by sending an email to info@btf-consulting.com. We recommend including your device identifier in the message (found in the App’s “Settings” section). If not provided, we will delete all data that can be associated with your email request.

This will remove:

• Your onboarding profile from our database
• All your usage events from our database

Locally stored data on your device can be removed by uninstalling the App.

Your subscription remains active and can be restored via “Restore Purchases”.

12. Your Rights Under GDPR

You have the right to:

• Access your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR)

To exercise these rights, contact: info@btf-consulting.com

13. Data Security

We implement technical and organizational measures to protect your data:

• Encrypted data transmission (TLS/SSL)
• Encrypted storage at our service providers
• Restricted access to backend systems

14. Children

The App is not intended for persons under 16 years of age. We do not knowingly collect data from children.

15. Changes to this Policy

We reserve the right to update this Privacy Policy as needed. The current version is always available at:
erpcoachapp.com/en/privacy-policy

16. Supervisory Authority

If you believe that the processing of your data violates the GDPR, you may lodge a complaint with the competent supervisory authority:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22, 7. OG
20459 Hamburg
Email: mailbox@datenschutz.hamburg.de