隐私政策

Hey, Rick here. Privacy policies are usually boring walls of legal text. I'll keep this as human as possible. The short version: your data is yours. We only collect what we need to make Dutch Fluency work for you, and we never sell it. 就是这么简单。

关于我们

Dutch Fluency is a language learning platform created by Rick (that's me) based in Bangkok, Thailand. We provide podcasts, interactive apps, coaching, and reading materials for people learning Dutch. Our website is dutchfluency.com and our dashboard lives at dashboard.dutchfluency.com.

我们收集的信息

我们如何使用您的数据

• 1. To provide the service (apps, podcasts, transcripts, coaching)
• 2. To send you things you signed up for (email training, assessment results)
• 3. To improve Dutch Fluency (understanding which apps people actually use)
• 4. To process payments (via Stripe)

We never sell your data. We never share it with advertisers. We never use it to train AI models. Full stop.

第三方服务

我们使用以下值得信赖的服务来运行 Dutch Fluency:

• Anthropic (Claude AI) — writing feedback, speaking analysis, AI conversations (USA)
• OpenAI (Whisper) — speech-to-text transcription for voice exercises (USA)
• ElevenLabs — text-to-speech audio generation for podcasts and lessons (USA)
• Stripe — payment processing (USA/EU)
• Supabase — database and authentication (EU — Frankfurt)
• Hetzner — website hosting
• Microsoft Clarity — session recordings and heatmaps
• Heroku (Salesforce) — dashboard application hosting (EU)
• Resend — transactional emails
• BunnyCDN — audio and media delivery
• Cloudflare — CDN, security, and bot protection

Some of these are US-based. Data transfers are protected by Standard Contractual Clauses (SCCs) as required by GDPR. Each service has their own privacy policy and we chose them because they take data protection seriously.

法律依据 (GDPR)

对于法律相关人士，以下是我们处理您数据的原因：

• 合同 (第 6(1)(b) 条) — providing the learning platform, processing payments
• 同意 (第 6(1)(a) 条) — AI-powered feedback, personalized content, email notifications
• 明确同意 (第 9(2)(a) 条) — voice recording processing (biometric data)
• 正当利益 (第 6(1)(f) 条) — account security, fraud prevention, service improvement

您的权利

根据 GDPR，您随时可以：

• ● Access your data (Art. 15) — download it from your dashboard Settings, or ask us
• ● Correct your data (Art. 16) — wrong email? Name change? Just tell us
• ● Delete your data (Art. 17) — delete your account in Settings, or email us. We'll wipe everything within 30 days
• ● Export your data (Art. 20) — download a JSON export from your dashboard Settings
• ● 撤回同意 (Art. 7(3)) — revoke voice recording or AI processing consent anytime in Settings
• ● 退订 from emails — every email has an unsubscribe link

We respond to all data requests within 30 days. You can also lodge a complaint with the 荷兰数据保护局 (Autoriteit Persoonsgegevens) (Dutch Data Protection Authority) at autoriteitpersoonsgegevens.nl.

数据安全

我们高度重视安全性：

• 所有连接均经过 HTTPS (TLS) 加密
• 密码经过 bcrypt (12 轮加盐) 哈希加密
• 敏感内容 (Dagboek、对话、语音转录) 均采用 AES-256-GCM 静态加密
• 所有内部系统均采用基于角色的访问控制
• 通过速率限制和验证码 (CAPTCHA) 保护，防止恶意滥用
• 每次代码更改都会进行自动安全扫描
• 个人数据会从应用日志中自动脱敏

数据保留

We keep your data as long as you have an account. If you cancel your subscription, your account and data remain so you can come back anytime. If you want everything deleted, email us and we'll wipe it within 30 days.

Children

Dutch Fluency is designed for adults learning Dutch. We don't knowingly collect data from anyone under 16. If you're a parent and think your child signed up, reach out and we'll remove their data.

Changes

If we update this policy, we'll post the changes here. No sneaky edits. For major changes, we'll send an email.