Dutch Exams, available at dutchexams.com, is responsible for the personal data described in this policy. Questions and privacy requests can be sent to [email protected].

Depending on how you use the service, we may process:

• Account details such as your name, email address, authentication identifiers, and account settings.
• Practice progress, answers, scores, saved attempts, and learning preferences.
• Subscription status, transaction references, and billing details supplied by payment providers. We do not store full payment-card numbers.
• Messages, feedback, support requests, and instructor-profile information you choose to submit.
• Speaking recordings, writing responses, and generated feedback when you choose an AI-assisted feature.
• Technical and usage information such as page, device, browser, approximate location, and interaction data when optional analytics is enabled.

We process data only for defined purposes and an appropriate legal basis:

• To provide accounts, practice tests, saved progress, subscriptions, and requested AI features: performance of our agreement with you.
• To secure, maintain, troubleshoot, and prevent misuse of the service: our legitimate interests in operating a reliable platform.
• To meet tax, accounting, fraud-prevention, and other legal duties: compliance with law.
• To run optional analytics or marketing technologies: your consent, which you can refuse or withdraw without losing access to the service.

Some practice progress and preferences are stored in your browser. Account and subscription records are stored in our service database. We keep personal data only for as long as needed for the purpose, our legal obligations, dispute handling, and security. Deleting an account starts deletion or anonymisation of data that we are not legally required to retain.

We do not sell personal data. We may share only the data needed with providers that support hosting, authentication, payments, email, analytics, customer support, and AI processing. They act under contractual and confidentiality obligations. If data is transferred outside the European Economic Area, we use an applicable safeguard such as an adequacy decision or standard contractual clauses.

Necessary storage keeps sign-in, security, language, consent, subscriptions, and practice features working. It cannot be disabled through our preference panel because the requested service depends on it.

Optional analytics helps us understand aggregate use and improve Dutch Exams. Optional marketing may measure campaigns or personalise promotion if such tools are enabled. Optional technologies are off until you consent. You can reject them without losing access and change your choice at any time.

When you request AI feedback, the relevant response, recording, task context, and technical instructions may be sent to the named AI service provider to produce the result. Do not include unnecessary sensitive personal information. AI feedback is automated practice guidance, not an official exam assessment.

Subject to applicable law, you may request:

• Access to and a copy of your personal data.
• Correction, deletion, restriction, or portability of your data.
• Objection to processing based on legitimate interests.
• Withdrawal of consent at any time, without affecting earlier lawful processing.
• A review of your request and the right to complain to your local data-protection authority.

We use proportionate technical and organisational safeguards, but no online system is completely risk-free. The service is intended for people aged 13 and over. Where local law requires parental consent for a younger user, that consent must be obtained before an account or optional processing is used.

We may update this policy when the service or law changes. The date above shows the latest version. Material changes will be communicated in an appropriate way. Contact [email protected] with questions or to exercise a privacy right.

This policy also covers Zaban, the language-learning app operated by XVELOPERS LTD, company number 17304426, 17 Azalea Avenue, Manchester M18 8PQ, United Kingdom. Contact [email protected] for mobile-app privacy questions or deletion requests.

The Zaban mobile app is intended only for adults aged 18 and over. This mobile-app age requirement takes precedence over the general website age guidance elsewhere in this policy.

Zaban stores lesson progress and preferences on your device and synchronizes account and learning records with our Convex backend. Google sign-in supplies your verified name, email, profile picture and account identifier. A random guest credential and session tokens keep guest and signed-in accounts secure; native session credentials are stored using the operating system’s secure storage. Push tokens are processed through Expo when you enable notifications. Subscription identifiers and purchase status are verified with Google Play or Apple; we do not receive full payment-card details.

When you allow AI processing and request AI practice, your relevant text, messages, exercise context and speaking recording are sent through our backend to Google Gemini. Our mobile AI endpoint processes those requests without storing the recording as an account audio-history file. Google’s processing and retention are governed by the Gemini API terms and data policies. You can decline AI processing and continue other lessons, or withdraw permission in Settings. The app does not require advertising tracking to use lessons. Exam website pages opened in the app follow the website’s cookie choices and policies.

In Zaban, open Settings → Privacy and account → Delete account and confirm the request. You can also request deletion without installing the app at dutchexams.com/delete-account or by emailing [email protected] from the email associated with your account. We verify ownership before processing requests received through support; never send a password or identity document in your initial email.

Deletion removes your profile, authentication credentials, synchronized progress, preferences, notifications, submitted feedback, AI usage records and associated conversations from our active service database. Linked DutchExams/DeutscheExams access is affected because these services share the account. Store subscriptions must be cancelled separately in Google Play or the App Store; account deletion does not stop store billing. Website subscriptions can be managed through their payment provider or support.

Account data is retained while the account is in use or until you request deletion. In-app deletion starts immediately in bounded background batches; an identifier-only security tombstone is retained for up to 24 hours to block outstanding access tokens. Support requests are normally completed within 30 days after ownership verification. Payment providers may retain transaction records under their own legal obligations. Backups expire under our providers’ retention schedules; they are not used to restore a deleted account to active use. We retain other identifiable information only where required by law or necessary to resolve a specific security or legal issue, and explain any such exception when responding to your request.