Our commitment to protecting your privacy

1. What data we process

Your account

• Your mobile number (verified with a code; it is how you sign in and how friends find you)
• Your name as you enter it, and your language
• When your account was created

We do not ask for an e-mail address, a password, a photo or your date of birth.

Signing in

• The one-time codes we text you (stored only in hashed form), when they were requested and the IP address of the request — to limit abuse
• Your sessions: a hashed session key, whether it is the app or the website, and when it was last used

Answering a plan without an account

• The first name you enter and your answers (votes, whether you can make it)
• Your mobile number, only if the plan asks you to confirm it with a code
• A cookie in your browser that lets you return to the plan as the same person (kept up to 180 days)

Plans, groups and chat

• Events: name, description, the dates, times and places suggested, votes, the final choice and who is coming
• Groups: name, members, and the chat messages sent in them (text only)
• Notifications we show you in the app

Your contacts (only with your permission)

• When you create a group, the app asks for access to your address book. It then sends the phone numbers in it to our server, to show which of your contacts are on GoingDutch. Numbers of contacts you do not pick are not stored.
• For a contact you add who is not on GoingDutch yet, we store the name from your address book and the number as an open invitation, so that person sees the group when they sign in with that number.
• You can refuse access and add people by number instead.

Splitting costs

• Expenses, amounts, who shares in them, and settlements between members and their status
• Bank account numbers (IBAN) or payment links you add, shown to the members of a Splitter who need to pay you

Push notifications

If you allow notifications: a push token for your device, used only to deliver our notifications.

Usage statistics

We record what happens in the Service (for example “a plan was started from this QR code”, “a group chose an option”) under a random key per person, not your account id or number. We use these records to improve the Service and to give partners totals. We do not use third-party analytics, advertising or tracking tools in the app or on the plan pages.

Partner staff

For people who sign in to the partner portal: their mobile number, name and which partner they work for.

2. Why we process data

• To sign you in and keep your account secure
• To run plans, groups, chat and the Splitter, and show what you share to the people you share it with
• To let people answer a plan without an account, and to add those plans to your account when you sign in with the same number
• To help you find friends who already use GoingDutch (with your permission)
• To send you the notifications you allowed
• To prevent abuse (limits on codes, logs) and to handle reports
• To improve the Service and give partners totals about their QR codes and links
• To answer your questions

We do not sell your personal data and do not use it for advertising.

3. Legal basis (GDPR)

• Performance of our agreement with you: your account, plans, groups, chat, the Splitter, notifications
• Legitimate interest: security and abuse prevention, usage statistics under a random key, totals for partners, answering a shared plan without an account
• Consent: access to your contacts and push notifications (you can withdraw it in your phone’s settings)
• Legal obligation, where the law requires us to keep or hand over data

4. Who receives data

Other people see what you share with them: your name, votes and messages in the plans and groups you are in, and the payout details you add to a Splitter.

Partners receive only totals, never your name, number or answers. If you follow a booking link to a partner’s website, that site’s own privacy policy applies; we send it no personal data.

Service providers that process data on our behalf, under a data processing agreement:

• Nodge — hosting of the website, the server and the database [region: to confirm]
• CM.com (the Netherlands) — sends the text messages with your sign-in code; receives your mobile number and the message
• Expo (650 Industries, United States) — delivers push notifications through Apple and Google; receives your push token and the notification text
• Apple and Google — deliver push notifications to your device and distribute the app
• Google Fonts — the going-dutch.com website loads two typefaces from Google, which receives your IP address when you open it

Where a provider is outside the European Economic Area, we rely on [the EU–US Data Privacy Framework or standard contractual clauses — to confirm].

Authorities, only if the law requires us to.

5. How long we keep data

• Account data: as long as your account exists.
• Sign-in codes and their request records: [period to confirm].
• A guest’s answers on a plan: as long as the plan exists; the browser cookie expires after 180 days.
• Usage statistics: [period to confirm]; they are not linked to your account.

6. Deleting your account

You can delete your account in the app: Profile → Delete Account. This is refused while you still owe money or are owed money in a Splitter; settle up first.

When you delete your account we sign you out everywhere, remove your push tokens and the payout details you added, replace your name with “Deleted user” and release your number so it is no longer linked to you. Plans, chats and Splitters you shared with others stay available to them, with your contributions shown as “Deleted user”.

Answered a plan without an account? Ask privacy@going-dutch.com to remove your answers.

7. Security

Codes and session keys are stored only in hashed form, access is limited per person and per plan, and connections are encrypted. No system is 100% secure; if something goes wrong, we will inform you and the authorities as the law requires.

8. Your rights

You have the right to access, correct and delete your data, to restrict or object to processing, and to data portability. You can withdraw consent at any time.

Write to privacy@going-dutch.com. We may ask you to confirm your number so we know the request is yours. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Children

GoingDutch is not meant for children under 13. We do not knowingly collect their data. If you think we have, write to privacy@going-dutch.com.

10. Contact

GoingDutch B.V., [address], Chamber of Commerce (KvK) no. [number]

• Support: support@going-dutch.com
• Privacy: privacy@going-dutch.com
• Website: https://going-dutch.com