Legal

Privacy Policy Theorio.nl

At Theorio, we attach great importance to protecting your personal data. In this policy we explain which data we collect, why we do so and how we handle it.

1. Cookies and Tracking (Website & Marketing)

To improve our website and show relevant advertisements, we use various analytics and tracking technologies on theorio.nl:

  • → Marketing Pixels: We use pixels from Meta (Facebook/Instagram), Google, TikTok and Snapchat. These pixels allow us to measure the success of our advertisements and to show targeted advertisements to users who have visited our website.
  • → Google Analytics: We use Google Analytics to analyse visitor statistics. IP addresses are anonymised and we have concluded a data processing agreement with Google.
  • → PostHog: To gain deeper insight into how our platform is used, we use PostHog for product analytics and session replays. This helps us track down technical errors and optimise the interface by seeing how users navigate the site.

2. App Analytics and Attribution

For our mobile applications we use Tenjin. This tool helps us understand through which advertising channels users download our app. This is essential for optimising our marketing campaigns and improving the installation experience.

3. Processing of Personal Data

We collect and process data that is necessary for the functionality of our services:

  • → Account functionality: To use the Theorio app, we collect your email address. This is needed for identification, security and synchronising your progress.
  • → Student offer: For the student offer, we verify your mobile number via Firebase Authentication. Google processes and stores the number for verification and abuse prevention. In our offer registration we use a protected derivative of the number, your account reference and the end date to recognise repeat requests. This is not an anonymous registration. We use your email address for installation instructions and for securely linking your account. Learning tips and offers by email require separate, voluntary consent. We do not send advertising by text message (SMS). Questions about your registration or deletion? Email [email protected].
  • → Payments (Web): Payments on our website are handled via Stripe.
  • → Payments (Mobile): For in-app purchases we use the official payment systems of Apple (iOS App Store) and Google (Android Play Store).
  • → Bank details: Your financial data (such as bank account numbers or credit card details) is processed directly by our payment providers. This data remains anonymous to Theorio; we do not have access to your full payment details.
  • → AI assistant: If you use the assistant in our English-language driving licence guide, we send your question to OpenAI to generate an answer and to check the input for abuse. We do not store the question or the answer and do not use them for marketing. By default, OpenAI does not use API data to train models, but it may retain content in logs for up to 30 days for abuse monitoring. Therefore, do not share your BSN (citizen service number), DigiD details, driving licence number or other sensitive personal data.

4. Retention and Security

  • → Form data: Data entered via forms (such as a PGB application) is used exclusively for the specific purpose of the request. We do not keep this data longer than strictly necessary for handling it.
  • → Security: We take appropriate technical and organisational measures to protect your data against loss or unlawful processing.

5. Your Rights

Under the GDPR you have the following rights:

  • → Access and rectification: You can request which data we hold about you and have it corrected.
  • → Erasure: You can request that your account and email address be deleted.
  • → Cookie settings: You can change your tracking and cookie preferences at any time via the cookie banner on our website or your browser settings.

6. YouTube API Services

  • → Use of YouTube API Services: Our internal publishing tool uses YouTube API Services to upload and schedule videos to our own YouTube channel and to read basic statistics of those videos. By using features that rely on YouTube, you agree to the YouTube Terms of Service.
  • → Google Privacy Policy: Data obtained through YouTube API Services is also subject to the Google Privacy Policy.
  • → What we access and store: Only data of our own channel: the channel ID, name and profile image, the IDs of videos we uploaded, and view statistics of those videos. We store this on our own server in the EU, do not share it with third parties and do not use it for advertising.
  • → Revoking access: Access granted to our tool can be revoked at any time via the Google security settings page.
  • → Deletion: When access is revoked or the channel is disconnected, we delete the stored tokens and channel data within 30 days. Statistics are refreshed or deleted at least every 30 days. You can also request deletion by emailing [email protected].

7. Contact

Do you have questions about how we handle your data? Please contact us via:

Theorio

Email: [email protected]

Website: theorio.nl