Privacy Policy

Last updated: February 11th, 2026

Welcome to Zwemlesmaatje. We take your privacy seriously. This privacy policy explains how Bobika (KVK: 95172076), based in the Netherlands, collects, uses, and protects your personal data.

1. Controller

The controller of your data is: Bobika Chamber of Commerce (KVK): 95172076 Address: Request via contact page Email: Contact us

2. What Data We Collect

We process the following data to ensure the app functions:

• Account Data: Email address, encrypted password, and name (if provided).
• Child Profiles: First name, swimming level, and progress data (scores, requirements met).
• Media: Profile photos (optional, stored locally or securely).
• Technical Data: IP address, device ID, and logs for debugging and security.
• Purchase Data: Transaction history via Apple App Store or Google Play Store (we do not store credit card details).

3. Purpose & Legal Basis

We process this data based on:

• Contractual Necessity: To deliver the app and premium features.
• Legal Obligation: For tax administration and legal compliance.
• Legitimate Interest: To improve app stability and security.

3a. One-Time Premium Notification

When a swimmer makes progress beyond Level 3 in the app — a premium feature — the swimming instructor may send, via the application, one single email to the address linked to the account. This email is standardized by Zwemlesmaatje; the content is pre-determined and cannot be modified by the swimming instructor. The email contains a friendly request to purchase a Premium subscription so that the swimmer's full progress can continue to be tracked. By downloading and using the app you consent to receiving this one-time communication. This notification cannot technically be sent if the user already has a premium account. No further marketing emails will be sent without explicit consent.

4. Sharing with Third Parties

We never sell your data. We only share data with strictly necessary service providers:

• Database & Storage: MongoDB (for data) and AWS (for images) for secure data storage.
• Email Communication: Resend API for email delivery.
• Payments: Apple and Google process payments and manage subscription status.
• Analytics: Anonymized crash reports to fix bugs. We require all our third-party service providers to adhere to strict data protection standards that are at least as protective as those described in this Privacy Policy.

5. Your Rights & Data Deletion (GDPR/CCPA)

You have the right to request access, correction, or objection to the processing of your data, as well as data portability. If you are located in the EEA, you also have the right to lodge a complaint with your local Data Protection Authority.

Account & Data Deletion: You can exercise your rights and initiate complete account and data deletion directly within the app settings at any time (as explained in our FAQ). Alternatively, if you no longer have the app installed, you can submit a Data Deletion Request without the app by contacting us via our contact page.

6. Security & Retention

We keep your data as long as your account is active. Upon account deletion, all personal data is immediately and permanently removed, unless the law requires a longer retention period (e.g., for tax purposes).

7. Children

This app is intended for parents to track their children's progress. We do not collect data directly from children under 16 without parental consent (which is implied as the parent manages the app). If a parent or guardian becomes aware that their child has provided us with personal information without their consent, they should contact us immediately. We will take steps to delete such information from our files as soon as possible.