Legal
Privacy Policy
What happens to your data.
Last updated: 6 September 2026
In plain language
Campaign KPI for Klaviyo shows you the results of your own Klaviyo campaigns on your iPhone. For that we need two things from you, and nothing else.
Your registration. First and last name, email address, company and industry, plus a nickname and a password for the app. We use this to send you your activation code and, if you have consented, information about new features and topics around Klaviyo. You can unsubscribe from every one of those emails with a single click.
Access to your Klaviyo account. With it the app reads metrics from your own Klaviyo account: opens, clicks, revenue, unsubscribes. The app only reads. It sends no emails, changes nothing in your account and never touches your recipients' data. We do not see the email addresses of your customers. You can revoke access in Klaviyo at any time — access ends immediately.
We do not sell data. We pass nothing to third parties except the service providers listed below, with whom we have concluded data processing agreements.
1 · Controller
Uwe-Michael Sinn
Flensburger Str. 5, 10557 Berlin, Germany
Phone: +49 30 23 32 949 - 10
Email: info@meisterlampe.email
Uwe-Michael Sinn offers Campaign KPI for Klaviyo as a natural person. He is also the founder and part of the managing team of Meister Lampe und Freunde GmbH; that company is not the provider of the app.
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2 · Hosting
This website is hosted by an external service provider. Personal data collected on this website is stored on that provider's servers. This may include IP addresses, contact requests, meta and communication data, names, website access data and other data generated through a website.
The hoster is used for the purpose of performing our contract with potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR).
We use the following hoster: Cloudflare Germany GmbH, Rosenthaler Str. 40/41, 10178 Berlin, Germany (parent company: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). We have concluded a data processing agreement with our hoster. Any data transfer to the USA is based on the European Commission's standard contractual clauses.
3 · General information and mandatory disclosures
Data protection. We take the protection of your personal data seriously and treat it confidentially and in accordance with statutory data protection provisions and this privacy policy. Please note that data transmission over the internet can have security gaps. Complete protection of data against access by third parties is not possible.
Storage period. Unless a more specific storage period is stated in this policy, your personal data remains with us until the purpose for processing no longer applies. If you make a legitimate request for deletion or withdraw consent, your data will be deleted unless we have other legally permissible grounds for storing it, such as retention periods under tax or commercial law.
Note on data transfer to the USA. We use services from companies based in the USA (see sections 5, 9 and 10). Your personal data may be transferred to US servers. The USA is not a safe third country under EU data protection law. US companies are obliged to hand over personal data to security authorities without you being able to take legal action against this. It therefore cannot be ruled out that US authorities process, evaluate and permanently store your data held on US servers for surveillance purposes. We have no influence over these processing activities.
Withdrawal of your consent. Many processing operations are only possible with your express consent. You can withdraw consent already given at any time. The lawfulness of processing carried out before withdrawal remains unaffected.
Right to object (Art. 21 GDPR). Where processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on those provisions. Where your data is processed for direct marketing, you have the right to object at any time; this also applies to profiling connected with such direct marketing.
Right to lodge a complaint. In the event of infringements of the GDPR you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement.
Right to data portability. You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format.
Information, deletion, correction, restriction. Within the framework of applicable law you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of processing, as well as a right to correction or deletion. You may also request restriction of processing.
SSL / TLS encryption. For security reasons this site uses SSL or TLS encryption, recognisable by “https://” in the address bar and the padlock symbol in your browser.
Objection to promotional emails. We hereby object to the use of contact data published in the context of our legal notice obligations for sending unsolicited advertising. We expressly reserve the right to take legal action in the event of unsolicited advertising.
4 · Data collected on this website
Server log files. The provider of these pages automatically collects and stores information in server log files which your browser transmits automatically: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address. This data is not merged with other data sources. The basis is Art. 6(1)(f) GDPR.
Cookies. Technically necessary cookies may be required to provide the website; the basis is Art. 6(1)(f) GDPR. Cookies for analysis purposes are only set with your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can change your choice at any time via the “Cookie settings” link at the bottom of the page.
Enquiries by email or telephone. If you contact us, your enquiry including all personal data arising from it is stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent. The basis is Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract, otherwise Art. 6(1)(f) GDPR or your consent.
5 · Registration for Campaign KPI for Klaviyo
When you register, we collect:
- First and last name
- Email address
- Company
- Industry
- Nickname (your login name in the app)
- A password chosen by you for the app
- The plan you selected (Free, In-house or Agency)
- The language of the website
We store the password exclusively as a cryptographic hash, never in plain text. We use the industry you provide to send you more relevant information and to build anonymised industry comparisons (see section 8).
We use this data to send you your activation code and to inform you about new features of the app as well as other offers and topics around Klaviyo. The legal basis is your consent under Art. 6(1)(a) GDPR, which you give expressly in the registration form. You can withdraw it at any time with effect for the future — via the unsubscribe link in every email or informally to info@meisterlampe.email.
To manage these registrations and send the emails we use Klaviyo, Inc., 125 Summer Street, Boston, MA 02110, USA. Klaviyo processes the data named above as a processor on our behalf. We have concluded a data processing agreement with Klaviyo; any data transfer to the USA is based on the European Commission's standard contractual clauses. Klaviyo also records whether and when you open our emails and which links you click, so that we can send you information that is as relevant as possible. Klaviyo's privacy policy
Your registration data remains stored until you withdraw your consent or ask us to delete it.
6 · Payments
We do not collect or store any payment data.
The paid In-house and Agency plans are sold as a purchase inside the app via the Apple App Store (in-app purchase). Apple handles billing, renewal and cancellation; payment data is processed exclusively by Apple and is not transmitted to us. The responsible party is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. The legal basis for providing the paid features is Art. 6(1)(b) GDPR. Apple's privacy policy
7 · The app: connecting to your Klaviyo account
This section concerns the iPhone app itself.
What the app receives from you. After installation you grant the app access to your own Klaviyo account, either by confirming the connection in the app or by entering an API key. The app uses this access exclusively to retrieve metrics for your campaigns through the official Klaviyo API.
What the app reads. Exclusively aggregated campaign metrics: campaign name, send time, number of recipients, opens, clicks, unsubscribes, bounces, revenue and — depending on the plan — A/B test results and tags.
What the app does not do. The app only reads. It sends no emails, creates no campaigns or flows, changes nothing in your Klaviyo account and does not retrieve any profile or recipient data. We do not see email addresses, names or any other personal data of your customers.
Where processing takes place. Processing and caching of the retrieved metrics take place at Amazon Web Services in the Frankfurt am Main region (eu-central-1). The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg. A data processing agreement is in place with AWS. In regular operation the data does not leave the Frankfurt region.
How often data is retrieved. Depending on the plan, every 2 hours, every 15 or every 10 minutes.
How to end access. You can revoke the app's access in your Klaviyo account at any time. Access ends immediately. You can also disconnect within the app and have your user account with us deleted.
Legal basis. Art. 6(1)(b) GDPR.
8 · Anonymised campaign metadata
We store metadata of your campaigns in fully anonymised form. Anonymised means: without any reference to you, your company, your Klaviyo account or individual recipients. It concerns metrics such as open, click and unsubscribe rates, send times, approximate list size, industry and country.
Why. In future we want to be able to show developments over time and metric trends in comparison with other companies of similar industry, country and list size — so that you can tell whether your numbers are good or merely familiar. We do not currently use this data; it is intended for future analysis.
What we will not do with it. We will never sell, rent or pass this data to third parties. It is used exclusively for averages and comparisons in the interest of our users.
Since the data is anonymised, it no longer constitutes personal data within the meaning of the GDPR. For the act of anonymisation itself we rely on our legitimate interest in improving our product (Art. 6(1)(f) GDPR).
9 · Obtaining the app via the Apple App Store
The app is distributed through the Apple App Store. When downloading, Apple independently collects data over which we have no influence, such as your Apple ID, the time of the download and payment information. The responsible party is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Apple's privacy policy
10 · Google Analytics 4
This website uses the web analytics service Google Analytics 4 — exclusively with your consent. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics allows us to analyse the behaviour of website visitors. We receive usage data such as page views, time on site, operating systems used and the origin of the user. Google Analytics 4 uses technologies that make it possible to recognise the user, such as cookies.
IP anonymisation is activated by default in Google Analytics 4. Your IP address is truncated by Google within the EU or the EEA and is not stored permanently.
Use is based exclusively on your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Without consent Google Analytics is not loaded and no cookies are set. You can withdraw your consent at any time via the “Cookie settings” link at the bottom of the page. A data processing agreement is in place with Google; any data transfer to the USA is based on the European Commission's standard contractual clauses. Google's privacy policy
This English version is provided for your convenience. In case of discrepancies, the German version at campaign-kpi.app/datenschutz prevails.