Privacy Policy

Activi — application and website of Step2Job GmbH

Effective: 9 September 2026

This privacy policy describes how the Activi application and the website https://activi.io collect, use, store, and share personal data, including Google user data obtained when you sign in with Google.

How the Activi app accesses, uses, stores, and shares Google user data

Activi allows optional sign-in with a Google account (OAuth). If you choose “Sign in with Google” and consent on the Google consent screen, Activi accesses the following Google user data through Google’s OAuth interfaces:

• Google account identifier
• Name
• Email address
• Profile picture, if provided by Google

Access

Activi accesses Google user data only after your express consent on the Google consent screen and only to the extent shown there.

Use

Activi uses Google user data solely to provide and improve user-facing features of the Activi application, in particular:

• creating an Activi account and recognising you
• signing in without a separate Activi password
• showing your name or profile picture in the application
• sending service messages to the email address provided by Google, insofar as required to operate the account

Google user data is not used for personalised or targeted advertising, sale to data brokers, profiling for other purposes, or features that are not visible in Activi and not described here. This meets Google’s Limited Use requirements for user data. Google user data is not used to train non-personalised AI or machine-learning models.

Storage

The data listed above is linked to the Activi account and stored for as long as the account exists or Google sign-in remains linked. After you delete the Activi account or unlink Google, we remove the association and the profile data received from Google, unless a statutory retention duty applies. Access tokens are kept only as long as needed for sign-in and are stored securely.

Sharing

We do not sell Google user data and we do not transfer it to third parties for their own purposes. Sharing occurs only with technical processors that help operate Activi (for example hosting), and only insofar as required for login and account administration. Where required, we have data-processing agreements with these providers.

Withdrawal and deletion

You can end the Google link at any time by emailing contact@activi.io, by deleting your Activi account, and by revoking access at https://myaccount.google.com/permissions. After withdrawal via Google we can no longer sign in through that Google account. We delete stored account master data on request, insofar as legally permitted.

Controller

The controller for personal data under the GDPR is:

Step2Job GmbH
Friedrichstraße 155
10117 Berlin
Germany

Commercial register: Amtsgericht Berlin (Charlottenburg), HRB 271820
Managing director: Arnela Selmanovic
Brand / application: Activi
Email: contact@activi.io

Website and hosting

When you visit https://activi.io or this policy, we process technical usage data (for example IP address, requested resource, browser type) to deliver and secure the site. Hosting, CDN and security are provided by Cloudflare, Inc. Server logs are usually deleted or anonymised within 30 days.

Contact and AI-assisted assistants

If you contact us by email, form, phone, or an AI-assisted chat or phone assistant, we process the information you send (name, email, phone number, message content, transcripts where applicable) to answer your request. An assistant does not conclude contracts. A human makes final decisions.

Your rights

You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. You may withdraw consent at any time for the future. You may lodge a complaint with a supervisory authority, including the Berlin Commissioner for Data Protection and Freedom of Information. To exercise your rights, write to contact@activi.io.

Updates

We update this policy when our processing changes. The German website notice at https://activi.io/privacy/ is an additional local-language version; this page is the privacy policy linked from the Activi OAuth consent screen.