Privacy policy

We keep the service deliberately small: no advertising, no analytics trackers and no sale of personal information.

What this policy covers

This policy covers the SayDutch language-learning website, installable web app and its Android edition. It was last updated on 15 August 2026.

Information we handle

Required account

An account is required to enter the learning app. We store your email address, a one-way password hash, verification status and security-session records. Your readable password is never stored.

Learning and personalisation

We store your learning progress, lesson scores, adaptive review schedule, earned Petals, chosen support language, self-selected interests, theme and avatar settings, and community-consent preference. A local copy is kept on your device for speed and offline continuity, then synced to your account. We do not infer interests from nationality or ethnicity.

Speech and AI coaching

Browser pronunciation uses the Dutch voice installed on your device. If you use speech recognition, your browser or phone may process microphone audio according to its own speech-service settings. When protected AI coaching is enabled, recent conversation text, selected support language and selected interests are sent to OpenAI to generate language feedback. The app server does not store AI conversation text, and OpenAI requests are configured not to be stored by the API.

Community, avatar generation and payments

Live community posting, AI face generation and paid virtual currency are not currently enabled. The current community examples are previews and publish nothing. Before these features open, this policy will be updated with the final moderation, consent, payment, retention and deletion details.

Operational information

The host may process limited network and security information such as IP address, requested route, time and response status. We do not use advertising identifiers, analytics trackers or cross-app tracking.

Why we use it

Create and protect the account required to access the app.
Provide lessons, pronunciation, adaptive review, points and personalisation.
Sync progress across the learner's devices.
Verify email addresses and recover passwords.
Provide protected AI conversation feedback when enabled.
Secure, diagnose and maintain the service.

Service providers

Oracle Cloud hosts the application and encrypted account database. Google Workspace sends transactional account emails. OpenAI processes text supplied to the protected AI coach. Tailscale currently provides the encrypted public connection. Each provider handles data under its own terms and privacy commitments.

Storage, protection and retention

Traffic uses HTTPS. Account passwords are salted and hashed. Sessions use secure HttpOnly cookies. Database backups are encrypted, access-restricted and rotated after 30 nightly copies.

Active account data remains until the account is deleted. After deletion, the live account, synced progress and sessions are removed immediately. A deleted record can remain only inside inaccessible rotating backups for up to 30 days before aging out.

Your choices and rights

Choose from the available support languages and change self-selected interests at any time.
Turn protected AI feedback off in the coach.
Keep community consent off; it is off by default and no live sharing is currently available.
Reset learning progress from Settings.
Permanently delete the account and synced data from Account & sync.
Ask through Support about access, correction, portability, restriction or objection rights that apply to you.

Open the account-deletion guide.

Children

SayDutch is designed for adult language learners and is not directed to children under 13.

Questions

Use the support page for privacy or data questions. This policy may be updated when the service or its providers change; the date above will change with it.

SayDutch provides language practice, not immigration, legal, medical or professional-certification advice.