Privacy Policy

Effective 16 July 2026 · applies to the Dutchnest iOS app and dutchnest.nl

This policy explains what personal data Dutchnest ("we", "us") collects, why, and what your rights are. It is written to cover both the features the app has today and features we may enable in the future (such as analytics, crash reporting and advertising); where a service is described as one we "may use", it is not necessarily active yet, and the in-app disclosures and App Store listing always reflect the current state.

1. Who is responsible

Dutchnest, established in the Netherlands, is the data controller for the processing described here. Contact: support@dutchnest.nl.

2. Data we collect

• Account details. When you sign in with Apple or Google we receive your name, email address (Sign in with Apple lets you hide it) and a stable account identifier. We use these to create and identify your account.
• Learning progress. Completed lessons, review schedule, streaks, XP, achievements and settings are stored with your account so you can restore them on another device.
• Purchase status. If you buy an optional upgrade, Apple processes the payment; we only receive confirmation of what you own, never your payment details.
• Support correspondence. If you email us, we keep the correspondence for as long as needed to help you.
• Device and usage data. We may collect technical data such as device model, OS version, app version, crash logs, performance data and in-app interaction events (for example which exercise types are used most). We use this to keep the app stable and improve it.
• Advertising data. If the free tier shows ads, the advertising partner may process device information and, only with your explicit consent via Apple's App Tracking Transparency prompt, the advertising identifier (IDFA) for personalized ads. Without that consent, ads are contextual and non-personalized.

3. Third-party services we use or may use

We rely on a small number of service providers and may enable the following categories of services. Each partner processes data under its own terms:

• Hosting — our own server in the European Union (Germany) and Cloudflare (content delivery and security) for this website and our API.
• Sign-in — Apple (Sign in with Apple) and Google (Google Sign-In).
• Analytics & crash reporting — we may use services such as Google Firebase (Analytics, Crashlytics) or Apple's App Analytics to understand usage and fix crashes.
• Advertising — the free tier may show a limited number of ads through networks such as Google AdMob. Personalized advertising only ever happens after you opt in through the App Tracking Transparency prompt.
• Payments — Apple App Store (in-app purchases).

4. Why we may process data (legal bases)

• Contract — creating your account, syncing and restoring progress, delivering purchases.
• Legitimate interest — keeping the service secure, preventing abuse, measuring aggregate usage, fixing crashes.
• Consent — personalized advertising and any tracking across apps (via the ATT prompt), which you can refuse or withdraw at any time in iOS Settings without losing functionality.

5. Sharing

We do not sell personal data. We share data only with the service providers listed above, to the extent needed for the service, and where required by law. Aggregated, non-identifying statistics (for example "how many learners finished A2") may be used freely.

6. International transfers

Our own storage is in the EU. Some partners (Apple, Google, Cloudflare) may process data outside the EEA; where they do, transfers are covered by adequacy decisions or Standard Contractual Clauses.

7. Retention

• Account and progress data: kept until you delete your account.
• Server backups: rotated automatically; deleted data disappears from backups within 30 days.
• Diagnostics, analytics and logs: kept only as long as needed, typically no longer than 14 months.
• Support email: kept while relevant to your request.

8. Deleting your data

You can delete your account directly in the app (Account → Delete account) or by emailing us. Your personal data (email, name, sign-in identifiers) and your synced learning progress are removed immediately; any remaining internal records are irreversibly anonymised, and backups purge within 30 days. Signing out removes learning data from the device itself.

9. Your rights

Under the GDPR you may request access, correction, export, restriction or erasure of your data, and object to processing based on legitimate interest — email support@dutchnest.nl. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.

10. Children

Dutchnest is a general-audience education app intended for users 13 and older; we do not knowingly collect personal data from children under 13. If personalized ads are ever enabled, they are only shown to users who have confirmed the applicable minimum age and given consent.

11. Changes

We may update this policy as the app evolves — for example when analytics or advertising features are switched on. We will post changes here, update the effective date, and flag material changes in the app before they take effect.

12. Contact

Dutchnest · the Netherlands · support@dutchnest.nl