Privacybeleid

Hey, Rick here. Privacy policies are usually boring walls of legal text. I'll keep this as human as possible. The short version: your data is yours. We only collect what we need to make Dutch Fluency work for you, and we never sell it. Zo simpel is het.

Wie we zijn

Dutch Fluency is a language learning platform created by Rick (that's me) based in Bangkok, Thailand. We provide podcasts, interactive apps, coaching, and reading materials for people learning Dutch. Our website is dutchfluency.com and our dashboard lives at dashboard.dutchfluency.com.

Wat we verzamelen

Hoe we je gegevens gebruiken

• 1. To provide the service (apps, podcasts, transcripts, coaching)
• 2. To send you things you signed up for (email training, assessment results)
• 3. To improve Dutch Fluency (understanding which apps people actually use)
• 4. To process payments (via Stripe)

We never sell your data. We never share it with advertisers. We never use it to train AI models. Full stop.

Diensten van derden

We gebruiken deze vertrouwde diensten om Dutch Fluency te draaien:

• Anthropic (Claude AI) — writing feedback, speaking analysis, AI conversations (USA)
• OpenAI (Whisper) — speech-to-text transcription for voice exercises (USA)
• ElevenLabs — text-to-speech audio generation for podcasts and lessons (USA)
• Stripe — payment processing (USA/EU)
• Supabase — database and authentication (EU — Frankfurt)
• Hetzner — website hosting
• Microsoft Clarity — session recordings and heatmaps
• Heroku (Salesforce) — dashboard application hosting (EU)
• Resend — transactional emails
• BunnyCDN — audio and media delivery
• Cloudflare — CDN, security, and bot protection

Some of these are US-based. Data transfers are protected by Standard Contractual Clauses (SCCs) as required by GDPR. Each service has their own privacy policy and we chose them because they take data protection seriously.

Juridische grondslag (AVG)

Voor de juridische mensen: dit is waarom we je gegevens verwerken:

• Overeenkomst (Art. 6(1)(b)) — providing the learning platform, processing payments
• Toestemming (Art. 6(1)(a)) — AI-powered feedback, personalized content, email notifications
• Uitdrukkelijke toestemming (Art. 9(2)(a)) — voice recording processing (biometric data)
• Gerechtvaardigd belang (Art. 6(1)(f)) — account security, fraud prevention, service improvement

Je rechten

Onder de AVG kun je altijd:

• ● Access your data (Art. 15) — download it from your dashboard Settings, or ask us
• ● Correct your data (Art. 16) — wrong email? Name change? Just tell us
• ● Delete your data (Art. 17) — delete your account in Settings, or email us. We'll wipe everything within 30 days
• ● Export your data (Art. 20) — download a JSON export from your dashboard Settings
• ● Toestemming intrekken (Art. 7(3)) — revoke voice recording or AI processing consent anytime in Settings
• ● Afmelden from emails — every email has an unsubscribe link

We respond to all data requests within 30 days. You can also lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) at autoriteitpersoonsgegevens.nl.

Gegevensbeveiliging

We nemen beveiliging serieus:

• Alle verbindingen zijn versleuteld met HTTPS (TLS)
• Wachtwoorden zijn gehasht met bcrypt (12 salt rounds)
• Gevoelige content (journals, gesprekken, spraaktranscripties) is opgeslagen met AES-256-GCM versleuteling
• Toegangsbeheer op basis van rollen voor alle interne systemen
• Rate limiting en CAPTCHA-beveiliging tegen misbruik
• Geautomatiseerde beveiligingsscans bij elke codewijziging
• Persoonsgegevens worden automatisch verwijderd uit applicatielogs

Bewaartermijn gegevens

We keep your data as long as you have an account. If you cancel your subscription, your account and data remain so you can come back anytime. If you want everything deleted, email us and we'll wipe it within 30 days.

Children

Dutch Fluency is designed for adults learning Dutch. We don't knowingly collect data from anyone under 16. If you're a parent and think your child signed up, reach out and we'll remove their data.

Changes

If we update this policy, we'll post the changes here. No sneaky edits. For major changes, we'll send an email.