Privacy Policy

Your shortlists, chats, and account details belong to you. This page explains what we store and why.

Last updated: 13 September 2026

Reaching Expatations, a sole proprietorship registered in the Netherlands under Chamber of Commerce (KvK) number 84654589, operates DutchDiscovery.

This Privacy Policy explains how Reaching Expatations ("we", "us", or "our") collects, uses, stores, and protects personal data when you use DutchDiscovery, including when you create or access an account using Google Sign-In or purchase a subscription.

1. Who We Are

Reaching Expatations
Keurenplein 41, Unit C3127
1069 CD Amsterdam
The Netherlands

Chamber of Commerce (KvK): 84654589
Email: legal@reachingexpatations.com

DutchDiscovery is an online application and service operated by Reaching Expatations.

For purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Dutch data protection legislation, Reaching Expatations acts as the data controller for the personal data described in this Privacy Policy, except where a third-party provider acts as an independent controller for its own processing activities.

2. Personal Data We Collect

The personal data we process depends on how you use DutchDiscovery.

2.1 Account and authentication information

When you create an account or sign in using Google Sign-In, DutchDiscovery may receive:

Your Google account email address;
Your name and basic profile information;
Your Google account identifier; and
Your Google profile picture, where available and used by the application.

Google Sign-In uses the following OAuth/OpenID Connect scopes:

openid
https://www.googleapis.com/auth/userinfo.email
https://www.googleapis.com/auth/userinfo.profile

These permissions are used to authenticate you and associate your Google identity with your DutchDiscovery account.

We do not request access through these permissions to your Gmail, Google Drive, Google Calendar, Google Contacts, Google Photos, or other Google services.

2.2 Application and account information

When you use DutchDiscovery, we may process information associated with your account and your use of the application. This may include:

Account identifiers;
Account settings and preferences;
Subscription status;
Information about access to paid features;
Information you provide through the application; and
Technical information necessary to maintain the service and security.

3. How We Use Personal Data

We process personal data for purposes including:

Creating and managing user accounts;
Authenticating users;
Providing and operating DutchDiscovery;
Providing access to features and content;
Managing subscriptions and paid features;
Processing and managing payments through Link and Stripe;
Maintaining account and application security;
Preventing fraud, abuse, and unauthorized access;
Providing customer support;
Communicating with users about their account or the service;
Maintaining and improving DutchDiscovery;
Complying with legal and regulatory obligations; and
Protecting our legal rights and the security of the service.

4. Google User Data

Personal data obtained through Google Sign-In is used only for purposes directly related to providing authentication and functionality within DutchDiscovery.

Google user data may be used to:

Create your DutchDiscovery account;
Authenticate you when you sign in;
Identify your account;
Display your name or profile information within DutchDiscovery where necessary;
Associate your application activity with your account; and
Associate your subscription with your account.

We do not sell Google user data.

We do not use Google user data for advertising or targeted advertising.

We do not use Google user data for purposes unrelated to the functionality of DutchDiscovery.

We do not request or access Google user data beyond the permissions necessary for the Google Sign-In functionality described above.

5. Legal Bases for Processing

Depending on the circumstances, we process personal data on the following legal bases under the GDPR:

Performance of a contract

We process information necessary to create and manage your account, provide DutchDiscovery, provide paid features, and fulfill our agreement with you.

Legitimate interests

We may process information where necessary for our legitimate interests, such as maintaining security, preventing fraud and abuse, improving our services, communicating with users, and protecting our legal rights, provided that these interests do not override your rights and freedoms.

Legal obligations

We may process and retain information where necessary to comply with applicable legal, tax, accounting, or other regulatory obligations.

Consent

Where applicable law requires consent for a particular processing activity, we will request your consent before carrying out that processing.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. Data Storage and Hosting

DutchDiscovery uses Lovable Cloud for application infrastructure, including database and authentication functionality.

The database associated with the DutchDiscovery application is configured in the European region (Ireland).

Account information and application data may therefore be stored and processed within the European Economic Area (EEA), subject to the infrastructure and service configuration used by DutchDiscovery.

Lovable Cloud may rely on underlying infrastructure and service providers to operate its services. These providers may process personal data on behalf of Lovable or Reaching Expatations as necessary to provide the infrastructure.

The specific technical infrastructure, service providers, and data locations may change over time as the service develops. Where such changes materially affect how personal data is processed, we will update this Privacy Policy where required.

7. Google Authentication

Google provides authentication and identity services when you choose to sign in using Google.

Google may process information in accordance with Google's own privacy policies and terms.

The use of Google Sign-In does not give DutchDiscovery general access to your Google account. The permissions requested by DutchDiscovery are limited to the scopes described in Section 2.1.

8. Link and Stripe Payments

DutchDiscovery offers paid subscriptions that may be processed through Link and Stripe, including Stripe's payment and subscription services.

The checkout may be provided through Link. The checkout may state that the subscription is offered by Reaching Expatations and that Link is authorized to charge the applicable recurring amount until the subscription is cancelled.

Depending on the payment configuration, Stripe may act as the merchant of record for transactions sold through Link and may process payment, order, subscription, renewal, refund, and related information.

We may receive information necessary to manage your DutchDiscovery account and subscription, such as:

Subscription status;
Payment status;
Transaction or subscription identifiers;
Billing information where applicable; and
Information necessary to provide or restrict access to paid features.

We do not directly store your complete payment card number when payment is handled by Link/Stripe.

Link and Stripe may process personal data under their own terms and privacy policies. Their processing may include activities for which they act as independent controllers.

9. Third-Party Service Providers

We use selected third-party service providers to operate DutchDiscovery, including:

Google — authentication and identity services.

Lovable Cloud — application infrastructure, hosting, database, authentication, and related functionality.

Link / Stripe — payment processing, subscription management, recurring billing, refunds, and related payment services.

Third-party providers may process personal data on our behalf or, where applicable, as independent controllers for their own processing activities.

We seek to use third-party services only where reasonably necessary for operating DutchDiscovery, providing requested functionality, maintaining security, processing payments, or complying with legal obligations.

10. International Data Transfers

We aim to process and store personal data within the European Economic Area where possible.

However, some third-party service providers or their infrastructure providers may process personal data outside the EEA.

Where personal data is transferred outside the EEA, we take appropriate measures to ensure that the transfer complies with applicable data protection law. Depending on the circumstances, this may include an adequacy decision, Standard Contractual Clauses, or another legally recognized transfer mechanism.

11. Data Retention

We retain personal data for as long as reasonably necessary to:

Provide DutchDiscovery;
Maintain your account;
Manage subscriptions and payments;
Provide customer support;
Comply with legal and accounting obligations;
Resolve disputes; and
Enforce our agreements.

If you delete your account, we will delete or anonymize personal data associated with your account where reasonably possible.

Certain information may need to be retained for longer where required or permitted by law, including financial, accounting, tax, fraud-prevention, or legal records.

Subject to applicable legal conditions, you may have the following rights:

The right to access your personal data;
The right to correct inaccurate or incomplete information;
The right to request deletion of your personal data;
The right to request restriction of processing;
The right to object to certain processing;
The right to data portability; and
The right to withdraw consent where processing is based on consent.

To exercise your rights, contact:

legal@reachingexpatations.com

We may need to verify your identity before fulfilling certain requests.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or another competent supervisory authority.

13. Account Deletion

You may request deletion of your DutchDiscovery account and associated personal data by contacting:

legal@reachingexpatations.com

Where DutchDiscovery provides a direct account deletion function, you may also use that function.

Deletion is subject to any information that we are legally required or permitted to retain.

Deleting a DutchDiscovery account does not necessarily cancel a separately managed subscription. Where applicable, subscriptions should also be cancelled through the available subscription-management functionality.

14. Cookies and Similar Technologies

DutchDiscovery may use cookies, local storage, session technologies, and similar technologies necessary to operate the application, authenticate users, maintain sessions, and provide requested functionality.

Where required by applicable law, we will obtain consent before using non-essential cookies or similar technologies.

15. Security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction.

These measures may include secure authentication, access controls, encrypted connections, and appropriate protection of credentials and authentication information.

No internet-based service can guarantee absolute security.

If we become aware of a personal data breach that requires notification under applicable law, we will take the required measures to investigate, mitigate, and notify the relevant parties.

16. Children's Privacy

DutchDiscovery is not intended for children under the age of 16.

We do not knowingly collect personal data from children under 16 where doing so would require parental authorization under applicable law.

If you believe that a child has provided us with personal data improperly, please contact us at legal@reachingexpatations.com.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in DutchDiscovery, our service providers, applicable legislation, or our processing activities.

When we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice.

18. Contact

If you have questions about this Privacy Policy, our processing of personal data, or your rights, please contact: