How we handle your data

Who we are

Klimbo is a service of Ginn Education B.V. (Chamber of Commerce number 90280903, Elisabethpark 11, 4872 BM Etten-Leur). Ginn Education B.V. is the controller of the data on this page. Klimbo will soon move to a company of its own; when that happens, you will hear about it by email and we will put the new name here. That does not change what we do with your data. Questions about privacy go to luuk@upyourself.nl.

In short

• From your child we only ask for a first name and the groep.
• A child profile only works after you, as a parent, have given your consent.
• The account and your child's progress are stored in the European Union. Only the emails we send you are stored by our email service in the United States, under European agreements.
• If your child taps “Ik snap het nog niet” (I still don't get it), Klimbo asks an AI model from Anthropic to show the first step. That model only gets the question, the right answer and the kind of mistake. What your child typed does not go with it, and neither does anything that could identify your child. Anthropic is based in the United States and does not train its models on that data.
• No adverts, no trackers, no selling of data.
• You can see everything, download it and delete it with one button.

The waiting list

When you sign up for the waiting list, we keep your email address, the moment you signed up, the language you signed up in and whether you confirmed your sign-up. If you also fill in your child's groep or the short questionnaire (where things are hard, what you do now, what you would pay, on which device, whether you would like a demo, and your phone number), we keep those answers with your sign-up. Everything in it is optional. If you fill in how you found Klimbo, we keep that answer too, as well as the name of the website you came from (for example google.com, never the full address). We only use this to let you know when Klimbo opens, to decide what we build first, to know which channels work, and, if you asked for it, to arrange a demo. Only the founders see your phone number. You only receive email after you have confirmed your address (double opt-in). You can unsubscribe with one click at the bottom of every email. After you unsubscribe, we keep your address for another 30 days so that we do not email you again by mistake; after that we delete it automatically.

The app: what we process about your child

First name and groep (7 or 8). No surname, date of birth, photo, location, school or email address. Besides that, what is practised: which questions your child does, which answer they give, whether it was right, which thinking mistake we spot, how many hints they used and how long it took. From those attempts Klimbo works out, per topic, how solid it is and when it needs repeating. That is needed to fit the practice to your child; without that data Klimbo cannot work.

Your child's device also sends usage statistics (which button is used when, for example how often a hint is asked for) to PostHog in the EU, under the device's anonymous technical user and never with the first name. Your child can read this in the app, under "Wat bewaart Klimbo van jou?" (What does Klimbo keep about you?).

Your child never sees a level or a mark. You see, per topic, where the practice starts, in five steps from "Building up to this year's work" to "This year's work is in place". It is not a school advice and not a test prediction, and we share it with no one. Not with the school, a municipality or Stichting Leergeld either: at most they get numbers without names.

Your child's device is linked with a code or QR code that you make. An anonymous technical user goes with it; your child does not need to fill in anything and cannot make an account.

The app: what we process about you

Your email address and password (stored encrypted), the PIN for parent mode (as a hash), the language you use Klimbo in, your consents with the version of the text, the moment and the language you gave them in, your email preferences (weekly summary, tips and offers), and your subscription: which plan, its status and the payments. We do not store bank account or card details; Mollie processes those.

If you came through a link with a campaign code or through another family's share link, we keep with your family the way you came (for example "newsletter" or "referral"). If you say yourself how you found Klimbo when you make an account, we keep that answer too, as well as the name of the website you came from (for example google.com, never the full address). We only use that to know which channels work; the founders only see numbers per channel and the short notes under "other", never which family came which way.

To make sure a referral reward is only given once per household, at the first payment we keep a hash of the bank account number or the card: a code that cannot be traced back. The account number itself stays with Mollie; we only compare hashes with each other.

From two weeks on, we ask you at most once every three months whether you would recommend Klimbo (a score from 0 to 10). We keep that with your family to see whether we are doing well.

Email you get from us

Your account comes with messages about your child's practice: the confirmation of your account, the report after the starting check, a few emails in the first two months about how it is going, and personal notes from someone on the team. They are part of the service and contain your child's first name and what was practised. We keep track of when each email was sent, so that you never get the same one twice.

You only get a weekly summary and tips or offers if you switch them on yourself under Settings. Every email of that kind has a link at the bottom to switch it off with one click, without logging in.

Sharing: the share link and the review

Every family has its own share link. If another family uses that link, we keep that your family brought that family. Your child sees nothing of this. The rules are at klimbo.nl/en/terms/referrals.

After four weeks you can share a review: a page on klimbo.nl with your child's first name, three numbers (days practised, questions, topics solid) and the names of the topics that became solid, nothing else. That page only exists once you press the button; you see beforehand what will be on it. The link cannot be guessed, is not picked up by search engines and expires after ninety days. Anyone on your parent account can withdraw a shared link in the app; the page is then gone at once.

Our WhatsApp channel

Klimbo has a channel on WhatsApp with news about the app. If you follow that channel, you do so in WhatsApp, under the terms and privacy policy of WhatsApp (Meta), which is responsible for that itself. A channel is public: anyone can find and follow it. We do not see your phone number or your name in the channel, unless your number is already in the phone of one of us; other followers never see it. We see how many people follow and react. The channel never contains data about a child.

What for, and on what basis

• To provide the service (account, practice, dashboard, payment, the messages about practising, the share link): performance of the agreement with you.
• To process your child's data: your consent as a parent, which you give before the profile becomes active and which you can always withdraw by deleting the profile.
• For the weekly summary, tips and offers, and the review page: your consent, each time or through a switch you turn on yourself.
• To prevent misuse, to know which channels work and to improve the service with anonymous statistics: our legitimate interest, with as little data as possible.

AI in Klimbo

The explanations and hints in Klimbo were written in advance with the help of AI and checked by people. Only when your child taps “Ik snap het nog niet” (I still don't get it) does Klimbo ask an AI model from Anthropic, in the United States, for a text at that moment. That model only gets the question, the right answer and the kind of mistake. What your child typed does not go with it, and neither does a name, a child ID or any history. Anthropic does not train its models on that data. The text goes through a filter before your child sees it. The AI never decides whether something is right, which level your child is at or what comes next; the fixed learning engine does that.

Who gets your data

We work with a small number of suppliers who process data for us. We sign a data processing agreement with each of them. We do not sell or share your data with anyone else. Our email service stores sent emails in the United States; the European standard contractual clauses and the EU-US Data Privacy Framework apply to that.

How long we keep it

• Your account and your child's data: as long as you use Klimbo.
• After twelve months without a subscription and without practice, we delete the family automatically.
• Link codes: valid for 24 hours, deleted a week later.
• A shared review: 90 days, or earlier if you withdraw it.
• Filtered AI texts without personal data: 90 days, for quality control.
• Waiting list: until 30 days after you unsubscribe.

No trackers

There are no advertising cookies and no third-party trackers on klimbo.nl or in the app. We do not place cookies that need consent. If you come to klimbo.nl through a link with a campaign code or a share link, or from another website, your browser itself remembers that code and the name of that website for up to thirty days (in the browser's storage, not as a cookie); none of it leaves your device until you send a form or make an account yourself. We collect usage statistics with our own anonymous events, without a name or free text. We count visits to klimbo.nl with Vercel Web Analytics, without cookies: a visit is recognised by a code that expires after 24 hours, your IP address is not kept, and of a page's address only the campaign code goes along. We only see totals, such as how many people visited a page and through which link.

Your rights

You may always see which data we have about you, have it corrected or have it deleted. In the app, under Settings, you can download all your family's data as one file and delete your account with everything in it; that happens straight away. If something does not work, email luuk@upyourself.nl. If you do not agree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

When this statement changes, we put the new version here with the date and you will see it in the app. If there is a substantial change in what we process about your child, we ask for your consent again.