Last updated 2026-09-16

Privacy policy

AuPairHub is a place where au pairs and host families find each other directly. That only works if both sides share real things about themselves, so we owe you a plain account of what happens with those things. This is it.

Lees deze pagina in het Nederlands

Who is responsible

AuPairHub is run from the Netherlands and is the controller of the personal data described on this page. Questions, requests and complaints about your data go to the address at the bottom.

What we collect, and why

We only collect what a matching service needs to work. In practice that is:

Waitlist (the website): your email address, which country you want to go to or live in, and a few qualifying answers — nationality, age, earliest start and childcare experience for au pairs; city, number and ages of children, desired start, whether a private room is available and how well you know the costs for families. We also store where you came from (the campaign parameters in the link), if someone invited you, their invite code, and, if you joined through one of the free tools on the site — the eligibility check, a visa checklist or the cost calculator — which one. What you enter in those tools stays in your browser; only what you then send in the form reaches us. Purpose: to pre-match by hand before launch and to tell you when the app opens.
Account: the email address you sign in with. Sign-in is by one-time code, so there is no password to store.
Profile: your side (au pair or family), display name, city, current country, the country of the placement, when you are available, languages, a few words about yourself, and the answers each side gives — for au pairs, age, experience, driving licence, first aid, how many children you are comfortable with and whether pets are fine; for families, the children (first name, age, gender), pets, room and bathroom, monthly allowance and whether a language course is paid. Purpose: to show you to the other side and to work out who fits whom.
Photos and video: a profile photo, up to six gallery photos, and an optional short video pitch. Purpose: the same as the profile — it is what the other side sees.
Messages: text and photos you send in a conversation, the calls you propose, and the steps of a match you complete together. In topic groups, the messages you post there. Purpose: delivering them to the person or group you sent them to.
Invites: if you invite someone, we record that they joined through you, and show you how many people did. We store no contact details of the people you invite; the share sheet on your phone sends the message.
Reports: if you report a group message, we keep the report, the reason and the message it points at until staff have handled it.
Technical data: our hosting providers keep short-lived request logs — IP address, time, what was requested — for security and to keep the service running. On the website we also count the steps of signing up — landing, choosing a side, opening a free tool and getting an answer from it, starting and finishing the form — against a random id that lives in your browser tab, together with the campaign parameters in the link and the site you came from. No email, account or IP address is attached to it, and it never leaves our own database. Purpose: to see where people drop out before launch. No third-party analytics or crash-reporting software runs in the app or on the site today. If that changes, this page changes first.

Payment for host families is planned but not built. When it is, the payment provider and what we keep of a payment will be added here before the first payment is taken.

The order in which profiles are shown is worked out automatically from these answers. That is all the automation there is: no decision with a legal or similarly significant effect on you is ever made automatically, and whether you match is always the choice of the two people involved.

What stays on your device

A few things are kept in your own browser or on your own phone rather than with us. None of it is used to follow you across other sites or apps.

On the website, for as long as the tab is open: the random id the sign-up steps are counted against, and the campaign parameters, referring site and invite code of the link you arrived through, so a sign-up is credited to where the visit started. Both are sent along with those steps and with the waitlist form, as described above, and are gone when you close the tab.
On the website, until you clear it: which items you ticked on a visa checklist, so your progress is still there next time. It is never sent to us.
In the app: your sign-in session, so you stay signed in; the language you chose; the invite code of a link you opened, until your profile is created; and whether the app has already asked you to pause your profile after a match. Signing out removes the session, and uninstalling the app removes all of it.
Cookies: the website sets none for visitors. Its only cookie is for staff signing in to an internal dashboard.

You can clear any of this in your browser or phone settings at any time. The site and the app keep working; they just forget.

On what basis

Performing the service you asked for, or the steps you asked us to take before it: your waitlist answers, so we can pre-match you and let you in at launch, and then everything in your profile, your photos, your messages and your matches. Without those there is nothing to match.
Your consent: uploading a video pitch and, for families, entering details of your children. You can withdraw it at any time by removing the item or deleting your account.
Our legitimate interest in running a safe service: handling reports, keeping request logs, preventing abuse and spam, counting how many people an invite brought in, and counting the sign-up steps on the website.
Legal obligations: keeping what tax or other law requires us to keep, which today is nothing beyond ordinary business records.

Who can see what

The other side only. An au pair’s profile, photos and pitch are visible to host families, never to other au pairs; a family’s, to au pairs, never to other families. This is enforced in the database, not just in the app.
People you talk to see your messages, and photos you send them. Nobody else does. We do not read private conversations unless one of the two people in it reports it.
Topic groups are visible to their members, who are always all from your own side. Staff can read group messages and reports in order to moderate.
What you are looking for — your saved searches — is visible only to you.
We do not sell or rent your data, we do not show advertising, and we do not hand your details to agencies. If you match with a family and a recognised sponsor has to file the permit, you give them your details yourself.

Who processes it for us

A few companies run the infrastructure. Each acts on our instructions under a data-processing agreement.

Supabase — the database, file storage and sign-in emails. Hosted on Amazon Web Services in the European Union (Ireland). Supabase is a US company; any access from outside the EU is covered by the EU standard contractual clauses in its data-processing agreement.
Vercel — hosts this website. Vercel is a US company that serves the site from European locations; transfers are covered by the EU standard contractual clauses.
Expo — builds the app and delivers updates to it. Expo does not receive your profile or messages. Expo is a US company; the request logs it keeps are covered by the EU standard contractual clauses.
Apple and Google — distribute the app through their stores under their own privacy terms.

Children

You must be at least 18 to create an account. Host families describe their children in their profile — a first name, an age and a gender — because au pairs need to know who they would be looking after. Enter only what you are comfortable with; a nickname is fine. We never collect anything from a child directly, and the details are visible only to au pairs, as above.

How long we keep it

Waitlist answers: until the corridor you signed up for has launched and you have been invited to the app, and at most twelve months after that. Earlier if you ask.
Your account, profile, photos, pitch, searches and matches: for as long as you keep the account.
Messages: as long as the conversation exists. Deleting your account deletes every conversation you were in, whole — the other person loses that thread too, including what they wrote in it.
Reports: twelve months after staff resolved them.
Request logs: kept by our hosting providers for a few weeks, then discarded.
Sign-up steps on the website: twelve months, then deleted.

Deleting your account

You can delete your account yourself, from the Profile tab in the app. It removes your account, your profile, every photo and video you uploaded, your matches, favourites, searches and group memberships, and your waitlist answers if you had any. Every one-to-one conversation you were in goes with it, for both sides: the person you talked to loses the thread as well. It is immediate and cannot be undone. One exception: our database provider keeps a daily backup for seven days, so a copy of a deleted account can survive in a backup for up to seven days before it is gone for good. Backups are only ever used to restore the whole service after a failure, never to bring back a single account. If you would rather write to us, use the address below and we will do it for you.

Your rights

Under the General Data Protection Regulation you can:

see the data we hold about you, and get a copy in a usable format
have it corrected — most of it you can edit yourself in the app
have it deleted — see above
object to, or ask us to restrict, processing based on our legitimate interest
withdraw consent you gave, without it affecting what happened before
complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl

Write to the address below for any of these. We answer within a month.

Changes

When this page changes, the date at the top changes with it. If a change affects what you agreed to when you created your account, the app asks you to read it again before you go on.

Contact

For anything about your data, or this page:

Write to privacy@aupairhub.com.