Política de Privacidade
Última atualização: 18 de março de 2026 · Versão 1.1
Hey, Rick here. Privacy policies are usually boring walls of legal text. I'll keep this as human as possible. The short version: your data is yours. We only collect what we need to make Dutch Fluency work for you, and we never sell it. Zo simpel is het.
Quem somos
Dutch Fluency is a language learning platform created by Rick (that's me) based in Bangkok, Thailand. We provide podcasts, interactive apps, coaching, and reading materials for people learning Dutch. Our website is dutchfluency.com and our dashboard lives at dashboard.dutchfluency.com.
O que coletamos
Informações da conta
Seu nome e email quando você se cadastra nos apps, nas transcrições, no treinamento por email ou na avaliação. Só isso. Sem número de telefone, sem endereço, sem tamanho de sapato.
Informações de pagamento
Handled entirely by Stripe. We never see or store your card details. Stripe is PCI-DSS compliant (fancy way of saying: they take security seriously).
Dados de uso
Acompanhamos seu progresso (XP, sequências, exercícios concluídos) para você ver o quanto já avançou. Também usamos análises básicas (visualizações de página, cliques) via Google Analytics e Microsoft Clarity para entender quais páginas são úteis.
Entradas do diário (Dagboek)
Se você usa o Dagboek, suas entradas ficam armazenadas para que você possa revê-las depois. Elas são suas. Não as lemos, não as compartilhamos e não as usamos para nada além de fornecer o serviço para você.
Cookies
Usamos um cookie de preferência de idioma (df-locale) and essential session cookies, plus our own first-party cookies that remember how you first found us and which ad you clicked, if any (df_ft, df_lc, df_anon), so we know which pages help people. We also count page visits ourselves, on our own server and never shared, whatever you choose in the cookie banner. If you visit from the EU, the EEA, the UK or Switzerland, Google Analytics, Microsoft Clarity and ad measurement cookies are only set when you choose "Accept all" in the cookie banner. Elsewhere they are on by default. With "Necessary only" those tools run without cookies. Wherever you are, you can change your choice anytime under "Cookie settings" at the bottom of every page.
Gravações de voz
If you use pronunciation practice (Fluency Tulip, speaking challenges), we record your audio. This is sent to OpenAI Whisper for transcription and Claude AI (Anthropic) for feedback. Voice data may be considered biometric data under GDPR Article 9 — we only process it with your explicit consent, which you can withdraw anytime.
Conteúdo processado por IA
Your writing (Dagboek entries, challenge submissions) and conversations with our AI tutor are processed by Claude AI (Anthropic) to give you personalized feedback. Your "Jouw Podcast" intake data is used to generate custom episodes. We send only the minimum data needed — never your email, password, or payment info.
Como usamos seus dados
- 1. To provide the service (apps, podcasts, transcripts, coaching)
- 2. To send you things you signed up for (email training, assessment results)
- 3. To improve Dutch Fluency (understanding which apps people actually use)
- 4. To process payments (via Stripe)
We never sell your data. We never share it with advertisers. We never use it to train AI models. Full stop.
Serviços de terceiros
Usamos estes serviços confiáveis para operar o Dutch Fluency:
- Anthropic (Claude AI) — writing feedback, speaking analysis, AI conversations (USA)
- OpenAI (Whisper) — speech-to-text transcription for voice exercises (USA)
- ElevenLabs — text-to-speech audio generation for podcasts and lessons (USA)
- Stripe — payment processing (USA/EU)
- Supabase — database and authentication (EU — Frankfurt)
- Hetzner — website hosting
- Microsoft Clarity — session recordings and heatmaps
- Heroku (Salesforce) — dashboard application hosting (EU)
- Resend — transactional emails
- BunnyCDN — audio and media delivery
- Cloudflare — CDN, security, and bot protection
Some of these are US-based. Data transfers are protected by Standard Contractual Clauses (SCCs) as required by GDPR. Each service has their own privacy policy and we chose them because they take data protection seriously.
Base legal (GDPR)
Para os juristas, aqui está por que processamos seus dados:
- Contrato (Art. 6(1)(b)) — providing the learning platform, processing payments
- Consentimento (Art. 6(1)(a)) — AI-powered feedback, personalized content, email notifications
- Consentimento explícito (Art. 9(2)(a)) — voice recording processing (biometric data)
- Interesse legítimo (Art. 6(1)(f)) — account security, fraud prevention, service improvement
Seus direitos
De acordo com o GDPR, você sempre pode:
- ● Access your data (Art. 15) — download it from your dashboard Settings, or ask us
- ● Correct your data (Art. 16) — wrong email? Name change? Just tell us
- ● Delete your data (Art. 17) — delete your account in Settings, or email us. We'll wipe everything within 30 days
- ● Export your data (Art. 20) — download a JSON export from your dashboard Settings
- ● Retirar o consentimento (Art. 7(3)) — revoke voice recording or AI processing consent anytime in Settings
- ● Cancelar a inscrição from emails — every email has an unsubscribe link
We respond to all data requests within 30 days. You can also lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) at autoriteitpersoonsgegevens.nl.
Segurança dos dados
Levamos a segurança a sério:
- Todas as conexões criptografadas com HTTPS (TLS)
- Senhas com hash bcrypt (12 rodadas de salt)
- Conteúdo sensível (diários, conversas, transcrições de voz) criptografado em repouso com AES-256-GCM
- Controle de acesso baseado em funções para todos os sistemas internos
- Limitação de taxa e proteção CAPTCHA contra abusos
- Verificação de segurança automatizada em cada alteração de código
- Dados pessoais removidos automaticamente dos logs da aplicação
Retenção de dados
We keep your data as long as you have an account. If you cancel your subscription, your account and data remain so you can come back anytime. If you want everything deleted, email us and we'll wipe it within 30 days.
Children
Dutch Fluency is designed for adults learning Dutch. We don't knowingly collect data from anyone under 16. If you're a parent and think your child signed up, reach out and we'll remove their data.
Changes
If we update this policy, we'll post the changes here. No sneaky edits. For major changes, we'll send an email.
Dúvidas?
Privacy stuff can feel abstract. If you have any questions about your data, just email me directly at [email protected]. I'll reply personally. Geen probleem.