Privacy notice

1. Controller. The business identified on this page with its address and Chamber of Commerce number, trading as Netje, is responsible for processing for the platform. This notice covers the app, website and support. For questions and privacy requests: support@netje.app or the published telephone number. You may complain to the Dutch Autoriteit Persoonsgegevens at autoriteitpersoonsgegevens.nl.

2. Account data. We process your chosen name (including a nickname), email address, account ID, role, language, communication languages, self-declaration of being 18 or over, login/session data and timestamps. Password processing and account recovery use our authentication service. Acceptance of terms and receipt of privacy information are recorded with the document version, language, timestamp and content identifier. Reading or accepting a privacy notice is not blanket consent to all processing.

3. Profiles and searching. For customers we process postcode, home characteristics, services, frequency/hours, general availability, supplies, pets, smoking and voluntary preferences/notes. Preferences may concern fragrance-free products, sensitive surfaces and bed linen. The free-text notes field lets you describe working preferences, such as products you do not want used. Do not enter health information, diagnoses, information about children or unnecessary sensitive information. For helpers we process profile name, biography, photo, experience, indicative rate, services, languages, work area (postcode and distance), availability and household preferences. A profile photo is reviewed before display; this is not identity verification. Netje does not request GPS access to determine your work or search area.

4. Who sees what? A customer sees a limited helper card and only an approved profile photo. A helper sees, only once a conversation exists, the name the customer entered at sign-up (this may be a nickname) and a limited summary of the customer request, including PC4, services, frequency/hours, general availability, supplies, pets, and smoking. Full address, email, telephone and private notes are not standard parts of that summary. A message may contain additional information you choose to share. Do not share passwords, recovery codes, payment details or identity documents.

5. Messages, safety and support. We process messages, participants, timestamps, read markers, hidden conversations and blocks. Reports include the reason, explanation and necessary information about the user or conversation involved. A limited snapshot of reported messages may be retained separately for investigation, including after account deletion. Authorised staff have task-specific access. A technical support request contains text, account reference, language and any app/platform details. The app offers no screenshot attachment for this. Reports and support requests may be emailed to support.

6. Subscriptions. Apple or Google handles store payments. Netje and RevenueCat process account ID, store, product, purchase/transaction reference, subscription status, start and end times, renewal, refund and any plan change. This allows us to grant, restore and correct Plus access and prevent fraud or duplicate access. Restoring with the same store account may transfer access between Netje accounts. Netje does not receive a full payment-card number or bank login credentials in this process. Payment for household work is arranged directly between customer and helper.

7. Notifications and technical data. Optional push notifications use an installation ID, platform, token and preference. Push contains a generic notification, not conversation text. The app offers to enable notifications in the conversation screen and inbox; system permission is requested only after you tap the relevant button or switch yourself. You can disable notifications in your account settings and in the separate device settings. Hosting and authentication process necessary request, security and error data, including IP addresses where needed. The website may use necessary technical storage; Netje does not use advertising profiling or advertising tracking cookies.

8. Purposes and legal bases. Accounts, profiles, searching, messages and Plus are processed for the platform agreement. Necessary security, abuse prevention, moderation, support and error investigation serve our legitimate interests in a reliable and safe service, balanced against your rights. Statutory records, required disclosure and legal claims may involve a legal obligation or legitimate interest. Where consent is required, we request it separately; device choices for photos or push are not unlimited permission for other purposes. Withdrawal does not affect prior lawful processing. Required account data is needed for the relevant service; optional fields may be left blank. Do not share special-category data without an appropriate separate legal basis.

9. Recipients and transfers. We use Supabase for authentication, database and storage; RevenueCat for subscription verification; Expo and Apple/Google for app and push services; Resend for account and support emails; and our business support mailbox to respond. The website is hosted through Sites/Cloudflare. They receive data necessary for their function. Apple and Google also process store data under their own privacy terms. Service providers may process outside the EEA. Where required, transfers need appropriate safeguards such as an adequacy decision or standard contractual clauses. Ask support@netje.app for information about applicable safeguards and recipients. We do not sell your personal data.

10. Retention. Account, profile and conversation data is kept for the service while the account exists; linked data is deleted or anonymised on deletion, subject to necessary exceptions. Conversation and profile reports are deleted twelve months after the case is closed; if reopened, that period starts again only upon a subsequent closure. Deletion waits while a separate evidence copy or an unfinished associated email task remains. Separate copies of reported messages are kept for six months from capture. Store and subscription event history is deleted twelve months after receipt; the current subscription record, the latest event-ordering evidence and a necessary record of a deleted account remain under their own retention periods to maintain the correct subscription status. Admin audit records are cleared after twelve months; technical support requests after twelve months from submission once no ongoing email task is attached. Completed email tasks are cleared thirty days after their last change; unfinished tasks are ended after thirty days. This cleanup uses daily automated tasks and does not automatically determine retention of the copy in the support mailbox. If there is a legal dispute or statutory obligation, the relevant record is retained with a documented reason and a separate retention period.

11. Exceptions. After account deletion, a limited subscription record may remain for store events and restoration: until ninety days after the later of the processing time or known period end. New store events may extend this while the subscription continues. Other necessary acceptance, purchase, complaint and security information is retained while the relevant request, check, legal obligation or claim requires it. Photos and operational copies follow the deletion and backup processes of the systems involved. Ask for the specific period for your data; not all backups, emails and store records disappear immediately on account deletion.

12. Rights and choices. You may request access, correction, deletion, restriction and, where applicable, portability, or object to processing based on legitimate interests. Preferably email from your account address; we verify identity appropriately and do not ask for your password or recovery code. We normally respond within one month and explain a permitted extension. Deletion is available in Settings or at https://netje.app/account-deletion and does not cancel an Apple or Google subscription. Matching uses profile/search filters and a fixed unpaid order; Netje does not allocate work or make solely automated decisions about it with legal effects. Customers and helpers choose for themselves. Material changes to this notice are communicated through the service or an appropriate contact channel.