Privacy Policy
Mester mobile application · Effective 9 September 2026 · Version 1.0
1. Who we are
Mester is developed and operated by REVANTA S.R.L., a company registered in Romania (Trade Register no. J2026022355001, tax ID 54418160), registered office at Strada Lungă 149, Ap. P3, Brașov 500051, Romania ("Revanta", "we", "us"). You can reach us at developer@dev-revanta.com.
This policy explains what personal data we process when you use the Mester app and this website, why, and what rights you have. It is written to comply with the EU General Data Protection Regulation (GDPR) and Romanian data protection law.
2. Two kinds of data, two roles
Mester is an appointment book used by independent professionals ("Professionals") to manage bookings with their own clients ("Clients"). This means personal data appears in two different ways:
| Data about | Examples | Our role |
|---|---|---|
| You, the Professional | Email address used to sign in, app settings, device and diagnostic data | Controller — we decide why and how it is processed, as described in this policy. |
| Your Clients | Names, phone numbers, messenger usernames, notes, tags, birthdays, appointment history | Processor — you are the controller of this data; we only store and process it on your instructions, under the Data Processing Terms in our Terms of Service. |
If you are a Client of a Professional who uses Mester, please direct requests about your data to that Professional. We will help them respond.
3. What we collect and why
3.1 Data you enter into the app
Everything you type into Mester — Clients, their contact channels, notes, bookings, reminders, settings — is stored so the app can work. The legal basis is performance of our contract with you (GDPR Art. 6(1)(b)). For Client data we act as your processor.
3.2 Account data
When you create an account, we store your email address and a login token so you can sign in and restore your data on another device. Legal basis: contract (Art. 6(1)(b)). You can use Mester without an account; in that case your data stays only on your device.
3.3 Diagnostic data
The app may record crash reports and basic technical information (app version, device model, OS version) to keep Mester working reliably. Legal basis: our legitimate interest in maintaining a stable product (Art. 6(1)(f)). We do not use third-party analytics or advertising SDKs.
3.4 Website
Our websites (getmester.com and dev-revanta.com) are served from our own server at Hetzner in Germany. They set no cookies, load no third-party scripts and use no analytics; fonts are served from our own domain. Cloudflare provides DNS for our domains only — visitor traffic is not routed through Cloudflare. Like any web server, ours processes your IP address to deliver the page and protect against abuse.
3.5 Email
If you email us, we keep the correspondence to answer you and for our records. Legal basis: legitimate interest (Art. 6(1)(f)).
3.6 Contacts and notifications
If you use "Import from contacts", the app reads your address book on your device, and only the contacts you select become Client records; the rest of your address book never leaves the phone. Reminders to you are scheduled as local notifications on your device.
3.7 Website forms
If you write to us through the contact form on dev-revanta.com or ask for early access on getmester.com, we store what you enter (contact form: name, email address, company, message; early access: name, email address, phone, profession, city, country) in our database and receive a copy by email, so that we can answer you or invite you to test the app. Legal basis: steps taken at your request before a contract (Art. 6(1)(b)) or our legitimate interest in answering enquiries (Art. 6(1)(f)). To limit spam we also record the IP address and time of each submission.
4. Special categories of data
Mester does not ask for and does not process health data or other special categories of personal data. The free-text fields ("what we're doing", client notes) are under your control. If you choose to record sensitive information about a Client there, you do so as controller and are responsible for having a lawful basis, for example the Client's explicit consent.
5. Where your data is stored
- On your device. Mester keeps a full copy of your data in a local database on your phone. It is protected by your device's own security (passcode, encryption).
- In the cloud (when you sign in). Data is synchronised to servers we rent from Hetzner Online GmbH, located in the European Union (Nuremberg, Germany). Data is encrypted in transit (TLS). The database is not exposed to the internet: it is reachable only from inside the server, which sits behind a firewall. Daily backups are kept for 14 days.
We do not transfer your data outside the European Economic Area, except as described under Service providers below.
6. Service providers
| Provider | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Server hosting (app data and websites) and backups | Germany (EU) |
| Cloudflare, Inc. | DNS for our domains | EU data centres; EU–US Data Privacy Framework certified |
| Zoho Corporation B.V. | Email correspondence and transactional email (sign-in codes) | Netherlands (EU) |
| Apple Inc. | App distribution, TestFlight, crash reports, in-app subscriptions | Under Apple's terms; EU–US Data Privacy Framework certified |
Each provider processes data only for the purpose listed, under a data processing agreement.
7. Messenger links
Mester can open a chat with a Client in WhatsApp, Viber, Telegram, Instagram or Messenger, or dial a phone number. This happens entirely on your device: we pass the contact identifier to the app you chose, and that app's privacy policy applies from that point. We do not read, store or send messages.
8. How long we keep data
- Data in the app: for as long as you use Mester. When you delete a Client or a booking it is removed from active views immediately and permanently erased within 30 days. Past bookings of a deleted Client stay in your history, but without the Client's name, contact details or notes.
- Account data: until you delete your account. After deletion, all cloud data is erased within 30 days, and backup copies expire within a further 14 days.
- Crash reports: 90 days.
- Email correspondence: up to 3 years, unless a longer period is required by law.
- Contact form and early access requests: kept like email correspondence. The IP address recorded with a submission is deleted after 30 days.
- Server access logs (IP address, time, requested address): 30 days.
9. Your rights
Under the GDPR you may ask us to access, correct, delete, restrict or export your personal data, and you may object to processing based on legitimate interest. You can delete your account and all cloud data from within the app (Settings → Account → Delete account), and export all of your records as a file (Settings → Export data). For anything else, email developer@dev-revanta.com; we respond within one month.
You also have the right to lodge a complaint with the Romanian supervisory authority, ANSPDCP (dataprotection.ro), or with the authority in your country of residence.
10. Children
Mester is a business tool intended for adults. We do not knowingly collect data from anyone under 16. Professionals must not use Mester to record data about children without a lawful basis.
11. Security
We use encryption in transit (TLS), row-level access control so that each account can only reach its own data, a firewall that exposes only the web and SSH ports, and limited administrative access. No system is perfectly secure; if we discover a breach affecting your data we will notify you and, where required, the supervisory authority within 72 hours.
12. Changes to this policy
We will post any changes on this page and, for material changes, notify you in the app or by email before they take effect.