Privacy policy
Version 19 September 2026 · Lees in het Nederlands
- You don't need an account. We don't ask for your name, email address or phone number.
- Your progress, answers and results stay on your own phone or tablet.
- On our server we only keep what is needed to give your purchase access: which package, until when, and on how many devices. 90 days after your access ends, we delete this automatically.
- Payment goes through Apple or Google. We never see your payment details.
- No ads, no trackers, no analytics, and we don't sell anything on.
This is an English translation of the Dutch privacyverklaring. If the two versions differ, the Dutch version applies.
1. Who is responsible?
The VCA Start app (in the stores: "VCA Start: examen oefenen") is offered by Maray Digital. Maray Digital is the controller for the personal data processed through the app and through app.vcastart.nl.
| Company name | Maray Digital |
|---|---|
| Trade name | VCA Start |
| Chamber of Commerce (KvK) | 42139108 |
| Address | Oostdorpseweg 18, 3176 PL Poortugaal, the Netherlands |
| info@maraydigital.nl |
2. What is stored on your own device?
The app keeps the following only on your phone or tablet. We never see it:
- your language choice and settings (such as text size and reading speed);
- your progress, given answers, flagged questions and results;
- the downloaded exam packages and read-aloud audio (encrypted);
- the proof of purchase that the App Store or Google Play gives the app after your purchase;
- an installation code: a random code that the app creates itself. It is not a device number from Apple, Google or your phone, and it cannot be used to find out who you are.
If you delete the app, all of this disappears from your device.
3. What do we keep on our server?
To open an exam, the app sends your proof of purchase and the installation code to our server. The server checks with Apple or Google that the purchase is genuine and still valid, and then provides the key the app needs to open the questions. For this we keep, per purchase:
| Data | Why |
|---|---|
| Store (Apple or Google) and the transaction number of the purchase | To recognise the purchase and not count it twice |
| Product: exam type (B-VCA or VOL-VCA) and language | To provide the right package |
| Purchase date and end date of the access | To determine until when you can practise |
| Date of a refund or revocation by the store | To stop the access in that case |
| Installation codes (at most four) and how often the key was fetched, with the latest date | To prevent one purchase from being shared across many devices |
We do not keep your name, email address, payment details, location or answers to the questions.
Legal basis: performance of the contract (you bought access) and our legitimate interest in preventing misuse of purchases.
4. Paying through Apple or Google
You buy a package in the App Store (Apple) or on Google Play (Google). They process the payment and your customer data; their own privacy policies apply to that. From them we only receive the proof of purchase, without your name, email address or payment details. Our server sends that proof of purchase back to Apple or Google to check that it is genuine.
5. Technical data
With every connection to our server, the server sees your device's IP address. This is necessary to be able to reply. The web server records connections in log files for security and troubleshooting; these are deleted automatically, after 30 days at the latest. To prevent anyone from overloading the server, the server remembers for one minute how many requests were made per IP address.
6. How long do we keep data?
| Data | Retention period |
|---|---|
| Purchase data and installation codes | Up to 90 days after the access ends; then deleted automatically |
| Web server log files | 30 days at the latest |
| Emails to us | As long as needed to handle your question, at most 2 years |
Would you like us to delete your purchase data sooner? Email us (see section 10). Please note: while your access is running, the app will then no longer be able to open your exams.
7. Who do we share data with?
- Our hosting provider, which manages the server where the data is stored (within the European Union).
- Apple or Google, only the proof of purchase, to verify the purchase. These companies may also process data outside the European Union; see their privacy policies.
- Authorities if the law requires us to.
We do not sell data and do not use it for advertising.
8. Read-aloud
The read-aloud voice is pre-recorded and included in the package. For the free sample questions, the app fetches the recording from our server (see section 5). Nothing of yours is recorded or sent, and the app does not use a microphone.
9. Security
All connections to our server are encrypted (https). The exam packages are stored encrypted on your device; the key is only kept in working memory while you practise and is not stored. On the server, only we have access to the data.
10. Your rights and having your data deleted
You have the right to access your data, have it corrected or deleted, object to the processing and have your data transferred. Because we don't know who you are, we need the transaction number of your purchase to find your data. You will find it in the receipt that Apple or Google sends you by email. Email your request to info@maraydigital.nl; you will receive a reply within one month.
How to have your data deleted:
- Find the transaction number in the receipt from Apple or Google.
- Email it to info@maraydigital.nl and ask us to delete your data.
- We delete the purchase data and installation codes of that purchase (see section 3) within one month and let you know. While your access is running, the app can no longer open your exams after that.
- You delete the data on your device (section 2) yourself by deleting the app.
After that we keep nothing of that purchase. Apple and Google keep their own data about your purchase; their privacy policies apply to that. Without a request, we delete everything automatically 90 days after your access ends.
Do you disagree with how we handle your data? You can file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl) or with the supervisory authority in your own EU country. We would like to hear from you first, so we can look for a solution together.
11. Who is the app for?
The app is intended for people preparing for a VCA exam and is not aimed at children under the age of 16.
12. Changes
If we change this privacy policy, we will publish the new version on this page with a new date.
