Política de Privacidad

Hey, Rick here. Privacy policies are usually boring walls of legal text. I'll keep this as human as possible. The short version: your data is yours. We only collect what we need to make Dutch Fluency work for you, and we never sell it. Así de simple.

Quiénes somos

Dutch Fluency is a language learning platform created by Rick (that's me) based in Bangkok, Thailand. We provide podcasts, interactive apps, coaching, and reading materials for people learning Dutch. Our website is dutchfluency.com and our dashboard lives at dashboard.dutchfluency.com.

Qué recopilamos

Cómo usamos tus datos

• 1. To provide the service (apps, podcasts, transcripts, coaching)
• 2. To send you things you signed up for (email training, assessment results)
• 3. To improve Dutch Fluency (understanding which apps people actually use)
• 4. To process payments (via Stripe)

We never sell your data. We never share it with advertisers. We never use it to train AI models. Full stop.

Servicios de terceros

Usamos estos servicios de confianza para operar Dutch Fluency:

• Anthropic (Claude AI) — writing feedback, speaking analysis, AI conversations (USA)
• OpenAI (Whisper) — speech-to-text transcription for voice exercises (USA)
• ElevenLabs — text-to-speech audio generation for podcasts and lessons (USA)
• Stripe — payment processing (USA/EU)
• Supabase — database and authentication (EU — Frankfurt)
• Hetzner — website hosting
• Microsoft Clarity — session recordings and heatmaps
• Heroku (Salesforce) — dashboard application hosting (EU)
• Resend — transactional emails
• BunnyCDN — audio and media delivery
• Cloudflare — CDN, security, and bot protection

Some of these are US-based. Data transfers are protected by Standard Contractual Clauses (SCCs) as required by GDPR. Each service has their own privacy policy and we chose them because they take data protection seriously.

Base legal (RGPD)

Para los amantes de lo legal: aquí te explicamos por qué procesamos tus datos:

• Contrato (Art. 6(1)(b)) — providing the learning platform, processing payments
• Consentimiento (Art. 6(1)(a)) — AI-powered feedback, personalized content, email notifications
• Consentimiento explícito (Art. 9(2)(a)) — voice recording processing (biometric data)
• Interés legítimo (Art. 6(1)(f)) — account security, fraud prevention, service improvement

Tus derechos

Según el RGPD, siempre puedes:

• ● Access your data (Art. 15) — download it from your dashboard Settings, or ask us
• ● Correct your data (Art. 16) — wrong email? Name change? Just tell us
• ● Delete your data (Art. 17) — delete your account in Settings, or email us. We'll wipe everything within 30 days
• ● Export your data (Art. 20) — download a JSON export from your dashboard Settings
• ● Retirar el consentimiento (Art. 7(3)) — revoke voice recording or AI processing consent anytime in Settings
• ● Cancelar suscripción from emails — every email has an unsubscribe link

We respond to all data requests within 30 days. You can also lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) at autoriteitpersoonsgegevens.nl.

Seguridad de los datos

Nos tomamos la seguridad muy en serio:

• Todas las conexiones cifradas con HTTPS (TLS)
• Contraseñas cifradas con bcrypt (12 rondas de sal)
• Contenido sensible (diarios, conversaciones, transcripciones de voz) cifrado en reposo con AES-256-GCM
• Control de acceso basado en roles para todos los sistemas internos
• Límite de velocidad y protección CAPTCHA contra abusos
• Escaneo de seguridad automatizado en cada cambio de código
• Datos personales redactados automáticamente de los registros de aplicación

Retención de datos

We keep your data as long as you have an account. If you cancel your subscription, your account and data remain so you can come back anytime. If you want everything deleted, email us and we'll wipe it within 30 days.

Children

Dutch Fluency is designed for adults learning Dutch. We don't knowingly collect data from anyone under 16. If you're a parent and think your child signed up, reach out and we'll remove their data.

Changes

If we update this policy, we'll post the changes here. No sneaky edits. For major changes, we'll send an email.