Privacy statement
How Masters360 handles personal data across the public site, the schools' sites, the application portal, the student and teaching portals, and the Masters360 mobile app. This statement applies from 7 October 2026.
Who is responsible
Stockholm Initiative for Food Security, a Swedish non-profit association, is the controller for personal data processed on masters360.app. Host institutions are controllers for their own academic registers. Write to contact@masters360.org for anything about your data.
What we collect and why
From applicants: the details you enter in the application, the documents you upload, referee names and addresses, and your email for sign-in. We use them to assess admission and to run the programme if you are admitted. From staff: name, email and role. From every visitor: standard server logs for security.
Where data is kept
Application data and documents are stored in the European Union (Stockholm). Pages are served through Cloudflare. Documents are encrypted in transit and at rest and are visible only to the admissions team at the institution you applied to.
Who sees what
The admissions team at your institution sees your application and documents. Referees see your name and the programme. Stockholm Initiative staff see counts and the audit trail, not your documents. We do not sell or share personal data with anyone else.
How long we keep it
Unsuccessful applications are deleted twelve months after the decision. Admitted students' records are kept for the duration of the programme and the retention period required for the credential. A written retention schedule is being finalised and will replace this paragraph.
Your rights
You can see, correct, download or delete your data. Applicants can withdraw and delete their application at any time before a decision. Write to contact@masters360.org; we answer within 30 days. You may also complain to the Swedish Authority for Privacy Protection (IMY).
Network directory
Students, alumni and executive participants appear in the internal directory only if they turn it on themselves, and their email is shown only if they allow contact. Programme staff are listed by role. Both settings can be changed at any time in the portal.
Cookies
We set only what the site needs to work: a session cookie when you sign in, and a cookie that remembers your language. No advertising or analytics cookies are set, so no cookie banner is shown.
Schools' sites
Each host institution has its own pages and address on masters360.app (for example cita.masters360.app). They are run by Stockholm Initiative on the institution's behalf under this statement; the institution's own staff edit the page content and see only their own institution's data. Applying from a school's site uses the same application portal and the same rules.
The Masters360 mobile app
The app for students keeps your field log entries, photos, notes, assignment hand-ins, reading progress, stars and language choice on your phone, in the app's own storage. The current version sends nothing about you to our servers: the only network request fetches your institution's public logo and colours, with no identifier attached. When synchronisation with the platform is introduced, the app will send your field log entries, hand-ins and work on course items to your institution's teaching team, under the retention rules above; it will tell you what is waiting to be sent and when it was sent. The camera and photo library are used only when you choose to attach a photo, and only that photo is read. The app contains no advertising, analytics or tracking. Deleting the app deletes everything it stored; the Profile screen can also reset it. While the app is distributed through TestFlight, Apple collects crash reports and usage statistics under Apple's own terms, not ours.
Changes
We update this statement when the platform or the app changes what it does with data, and we note the date below. Material changes to applicants' or students' data use are also announced in the portal.
Last updated 7 October 2026