Privacy Policy

1. Who we are

NederPro (“we”, “us”, “our”) is an online Dutch language learning platform. For the purposes of the General Data Protection Regulation (GDPR), we are the data controller of your personal information.

If you have any questions about this policy or how we handle your data, you can contact us at: nederprohelp@gmail.com

2. What data we collect

We collect the following categories of personal data:

• •Account data: Your email address and encrypted password when you register.
• •Usage data: Which lessons, exams, and vocabulary sets you access, and your progress scores.
• •Writing submissions: Text you submit in writing exam tasks for AI feedback purposes. These are processed by the Anthropic API and are not stored permanently on our servers.
• •Payment data: Billing is handled by our payment processor (Stripe). We do not store your card details.
• •Technical data: IP address, browser type, device type, and session identifiers — collected automatically when you use the service.

3. Legal basis for processing

Under GDPR, we rely on the following legal bases:

• •Contract: Processing your account data is necessary to provide the service you signed up for.
• •Legitimate interests: We use technical data to maintain security, prevent fraud, and improve the platform.
• •Consent: Where we use cookies for analytics, we ask for your consent first.

4. How we use your data

We use your data to:

• ✓Create and manage your account
• ✓Provide and personalise the learning experience
• ✓Track your progress across lessons and exams
• ✓Process payments and manage subscriptions
• ✓Send transactional emails (e.g. password reset)
• ✓Improve the platform based on aggregated, anonymised usage patterns
• ✓Comply with legal obligations

We do not sell your personal data to third parties.

5. Third-party processors

We share data with the following sub-processors, all of whom are GDPR-compliant:

6. Data retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or accounting purposes (up to 7 years for financial records under Dutch law).

Writing submissions sent to the AI feedback service are not stored by us after the response is delivered. Anthropic’s own data retention policy applies to data processed through their API.

7. Your rights under GDPR

You have the right to:

• •Access: Request a copy of the personal data we hold about you.
• •Rectification: Ask us to correct inaccurate or incomplete data.
• •Erasure: Request deletion of your personal data ("right to be forgotten").
• •Restriction: Ask us to limit how we process your data in certain circumstances.
• •Portability: Receive your data in a machine-readable format.
• •Object: Object to processing based on legitimate interests.
• •Withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, email us at nederprohelp@gmail.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

8. Security

We use industry-standard measures to protect your data, including HTTPS encryption, hashed passwords, and access controls. Supabase row-level security restricts data access to authenticated users only. No system is 100% secure; if you discover a security issue please contact us immediately.

9. Children

NederPro is intended for users aged 16 and over. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will notify you by email or by displaying a prominent notice on the platform. Continued use of NederPro after changes take effect constitutes acceptance of the updated policy.