Privacy Policy

Effective 22 October 2026 · last updated 2 November 2026 · applies to the Dutchnest app and dutchnest.nl

This policy explains what personal data Dutchnest ("we", "us") collects, why we use it, how long we keep it and what your rights are. It covers the Dutchnest app and dutchnest.nl.

1. Who is responsible

Dutchnest, established in the Netherlands, is the data controller for the processing described here. Contact: support@dutchnest.nl.

2. Data we collect

• Account details. When you sign in with Apple or Google we receive your name, email address (Sign in with Apple lets you hide it) and an account identifier. We use these to create and identify your account.
• Learning progress. Your completed lessons and conversations, review schedule, saved words and mistakes, streaks, XP, achievements, profile name and settings are stored with your account so you can restore them on another device. Exam readiness results and your speaking attempts stay on your phone.
• Speaking practice. Speaking practice uses your microphone. On iPhone, speech recognition runs on the phone. On Android, your phone's own speech service recognises what you say, and on some phones that service is online (Google). We never receive or keep a recording of your voice.
• Purchases. Apple (or Google) processes your payment and we never receive your payment details. Our purchase partner RevenueCat receives your account identifier and the purchase receipt so it can confirm what you own, for example Premium, and restore it on another device.
• Share card. When you share your progress, the picture is made on your phone and goes only where you send it. Your name appears on it only if you switch "Add my name" on.
• Home-screen widget. The iPhone widget shows a few numbers from the app, such as today's goal and due words. They stay on your phone.
• Exam practice packs. When you download an exam practice pack, the app asks our server for the pack. For Premium packs the request carries your sign-in so we can check that you have Premium. Your answers in the packs are not saved or sent to us.
• Live conversation with Fleur. You can practise speaking Dutch with an AI tutor, Fleur. Your phone turns what you say into text, and for each answer the app sends that text, the last lines of the conversation and the scenario you chose to our server in the European Union. Our server passes the text to OpenAI to write and safety-check Fleur's reply, and passes Fleur's reply text to Microsoft Azure AI Speech (in the European Union) so it can be spoken aloud. We do not send your account details to either service, and we never receive or keep audio. We store the text of each conversation (your answers and Fleur's replies) on our server in the European Union, linked to your account, for 180 days, so we can monitor quality, improve Fleur and prevent misuse. Only the Dutchnest team can see it. When a conversation ends we also save a short summary (what went well, corrections, words to practise) so you can see your history and progress. You can delete one conversation, or all of them, in History inside the app, and they are deleted with your account. Each answer uses one exchange; your first conversation is free. Please keep names and private details out of your conversations. You can avoid this processing by not using the feature.
• Optional questions. The app may ask you an optional question about a possible future feature. Answers are counted anonymously, and only if you ask to be told when the feature is ready is that choice saved on your account.
• Notifications. Daily reminders are scheduled on your phone. If you turn reminders off, the app may tell our server to stop sending notifications to your phone.
• Support. If you email us, we keep the correspondence for as long as needed to help you.
• Device and usage data. The app has no advertising and no analytics or tracking tools. Apple and Google may give us aggregate crash and usage reports.

3. Third-party services we use or may use

We rely on a small number of service providers. Each processes data under its own terms:

• Hosting: our own server in the European Union (Germany) and Cloudflare (content delivery and security).
• Sign-in: Apple and Google.
• Live conversation: OpenAI, which receives the recognised text and recent conversation lines to write and safety-check Fleur's replies, and Microsoft Azure AI Speech (European Union), which receives Fleur's reply text to turn it into speech.
• Purchases: Apple App Store or Google Play, and RevenueCat.

4. Why we process data (legal bases)

• Contract: creating your account, syncing your progress, delivering purchases, and providing live conversation when you use it.
• Legitimate interest: keeping the service secure, preventing misuse, improving and checking the quality of the AI tutor, fixing crashes.

5. Sharing

We do not sell personal data. We share data only with the service providers listed above, to the extent needed for the service, and where required by law. Aggregated, non-identifying statistics (for example "how many learners finished A2") may be used freely.

6. International transfers

Our own storage is in the European Union. Some partners (Apple, Google, Cloudflare) may process data outside the European Economic Area. Where they do, the transfer is covered by an adequacy decision or Standard Contractual Clauses.

RevenueCat processes purchase data on our behalf and stores it in the United States, under Standard Contractual Clauses. It keeps purchase data only as long as it needs it to run the service and meet legal obligations. To have your Premium record removed, email us and we will ask RevenueCat to delete it.

OpenAI may process the text you send in a live conversation outside the European Economic Area, including in the United States, under its Data Processing Addendum and Standard Contractual Clauses. OpenAI acts as our processor, does not use this data to train its models, and keeps abuse-monitoring logs for up to 30 days.

7. Retention

• Account and progress data: kept until you delete your account.
• Server backups: rotated automatically; deleted data disappears from backups within 30 days.
• Logs: kept only as long as needed, typically no longer than 14 months.
• Support email: kept while relevant to your request.
• Live conversation: the text of each conversation is kept for 180 days. The short summary is kept until you delete it in the app or delete your account. Deleting a conversation in History removes both. We do not store recordings. OpenAI keeps abuse-monitoring logs for up to 30 days.
• Credits: a record of your credit balance and credit changes is kept until you delete your account.

8. Deleting your data

You can delete your account directly in the app (Account, then Delete account) or by emailing us. Your account, your synced progress, your conversations and summaries, and your notification links are deleted from our server, and your sessions end. Backups are purged within 30 days. Purchase records held by Apple, Google and RevenueCat are kept as long as the law and their own policies require. You can also delete conversations one by one, or all at once, in History inside the app, without deleting your account.

9. Your rights

Under the GDPR you may request access, correction, export, restriction or erasure of your data, and object to processing based on legitimate interest — email support@dutchnest.nl. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.

10. Children

Dutchnest is an education app for users aged 13 and older. We do not knowingly collect personal data from children under 13.

11. Changes

We may update this policy as the app changes. We will post the changes here, update the date, and tell you in the app before material changes take effect.

12. Contact

Dutchnest · the Netherlands · support@dutchnest.nl