Legal

Privacy Policy

Anais uses account data, study progress, and basic technical data to operate the app, protect accounts, and improve the product. This page explains what we collect and how we use it.

Last updated

April 19, 2026

A direct privacy contact address will be added here once support email is set up.

Overview

How Anais handles personal data

This privacy policy applies to the Anais website and app available at bibprep.nl. The service described here is operated under the bibprep brand.

Anais is a study app for people preparing for the Dutch Basisexamen inburgering buitenland (BIB). It is not an official government service.

Data We Collect

What data we collect

Account and sign-in data

When you create an account or sign in, we may process your email address, authentication provider, internal user ID, session data, and related account metadata.

Study and usage data

We store the data needed to run the learning product, including study progress, review history, reading session scores, speaking and KNS progress, topic progress, and account settings such as audio and review preferences.

Messages and feedback

If you submit feedback through the app, we store your rating, message, and the account linked to that submission.

Technical data

We process technical information needed to deliver the service, such as IP-derived request data, browser and device information, session cookies, performance signals, and aggregated route analytics.

Use Of Data

Why we use it

We use personal data to:

  • create and secure your account;
  • let you sign in with email or Google;
  • save and restore your study progress and preferences;
  • operate review sessions, reading drills, speaking practice, and KNS study;
  • measure product performance and diagnose technical issues;
  • review feedback and improve the app;
  • prevent abuse, fraud, or misuse of the service;
  • comply with legal obligations where required.

Legal Bases

Our GDPR legal bases

We generally rely on contract necessity to provide the app you asked to use, including account login, study progress, saved settings, and core app functionality.

We rely on legitimate interests for service security, abuse prevention, product diagnostics, and privacy-conscious analytics where permitted by law.

Where consent is required by applicable law, such as for specific non-essential tracking tools if they are added later, we will ask for it before those tools are activated.

Sharing

Who processes data for us

Anais does not sell your personal data.

We use service providers that process data on our behalf, including:

  • Supabase for authentication and database infrastructure;
  • Vercel for hosting, web analytics, and speed insights;
  • Google as an identity provider when you choose Google sign-in.

We may also disclose data if required to comply with law, protect rights and security, or complete a business transfer such as a merger or sale.

Retention

How long we keep data

We keep account, progress, and settings data while your account remains active. If you delete your account, we will delete or de-identify the related personal data unless we need to retain limited information for security, legal, fraud-prevention, or backup purposes.

Feedback and technical records may be kept for a limited period when needed to operate, improve, or defend the service.

Cookies And Analytics

How cookies and similar tools are used

Anais uses essential cookies and similar technologies to keep users signed in, protect sessions, and make the app function correctly.

The app also uses Vercel Analytics and Vercel Speed Insights to understand route usage and site performance. These tools are used to monitor and improve the service, not to run advertising profiles.

If we add tools that require consent under applicable cookie or ePrivacy rules, we will request that consent before enabling them.

International Transfers

Where data may be processed

Our service providers may process data in countries outside your own, including outside the European Economic Area. Where required, we rely on appropriate transfer safeguards, such as contractual protections offered by those providers.

Your Rights

Your privacy rights

Depending on where you live, you may have the right to request access, correction, deletion, restriction, objection, or portability of your personal data.

You can delete your account from the app settings. If you are in the EU or EEA, you may also complain to your local supervisory authority, including the Dutch Autoriteit Persoonsgegevens where relevant.

Contact

How to reach us

A dedicated privacy contact address is not yet published. This page will be updated once support email is configured.

If the operator is later formalized through a registered business or legal entity, this page will be updated to reflect that.