AuPairHub

Last updated 2026-10-04

Privacy policy

AuPairHub is a place where au pairs and host families find each other directly. That only works if both sides share real things about themselves, so we owe you a plain account of what happens with those things. This is it.

Lees deze pagina in het Nederlands

Who is responsible

AuPairHub is run from the Netherlands and is the controller of the personal data described on this page. Questions, requests and complaints about your data go to the address at the bottom.

What we collect, and why

We only collect what a matching service needs to work. In practice that is:

  • Waitlist (the website): your email address, which country you want to go to or live in, and a few qualifying answers — nationality, age, earliest start and childcare experience for au pairs; city, number and ages of children, desired start, whether a private room is available and how well you know the costs for families. We also store where you came from (the campaign parameters in the link), if someone invited you, their invite code, and, if you joined through one of the free tools on the site — the eligibility check, a visa checklist or the cost calculator — which one, and which of the two languages you filled the form in, so that we write to you in it. What you enter in those tools stays in your browser; only what you then send in the form reaches us. Purpose: to pre-match by hand before launch and to tell you when the app opens.
  • Account: the email address you sign in with. Sign-in is by one-time code, so there is no password to store. If you change the address in Settings, both the old and the new address get a code to confirm it.
  • Profile: your side (au pair or family), display name, city, current country, the country of the placement, when you are available, languages, a few words about yourself, and the answers each side gives — for au pairs, age, experience, driving licence, first aid, how many children you are comfortable with and whether pets are fine; for families, the children (first name, age, gender), pets, room and bathroom, monthly allowance and whether a language course is paid. Purpose: to show you to the other side and to work out who fits whom.
  • Photos and video: a profile photo, up to six gallery photos, and an optional short video pitch in which you introduce yourself. Purpose: the same as the profile — it is what the other side sees. During sign-up, the photo and the pitch are uploaded as soon as you pick them; if you never finish signing up, they are deleted after 14 days.
  • Pitch views: the first time you watch somebody’s pitch, we note that you did and when. Only the person whose pitch it is can see that, so they know who has seen it. Purpose: showing members who is interested in them.
  • Messages and calls: text and photos you send in a conversation, and the steps of a match you complete together. For a video call we keep what is in the conversation: who proposed it, for when, what it was about and whether it was accepted. We never record calls. In topic groups, the messages you post there. Purpose: delivering them to the person or group you sent them to.
  • Invites: if you invite someone, we record that they joined through you, and show you how many people did. We store no contact details of the people you invite; the share sheet on your phone sends the message.
  • Reports: if you report a member, a conversation or a group message, we keep the report, the reason, what you wrote and what it points at — for a conversation, a copy of its most recent messages — so staff can look into it. The person you report is not told who reported them. Purpose: keeping the service safe.
  • Identity check: if you verify your identity, you upload a photo of your ID document and a selfie. A person at AuPairHub compares them by hand. We ask you to cover your citizen service number (BSN) first, for example with the KopieID app. The photos are deleted as soon as the check is done; we keep only the outcome and when it was. Purpose: showing the other side that you are who you say you are.
  • Payments: host families buy a plan in the app, through the App Store or Google Play. Apple or Google is the seller: they take the payment, charge the VAT and send the receipt, and we never see your card details. RevenueCat passes the purchase on to us, and we keep a record of it: the plan, the amount and currency, the store’s transaction number and the dates. Purpose: giving you the access you paid for, and our bookkeeping.
  • Support and data requests: when you write to support from the app, the message, the topic you picked and your sign-in address, so we can answer you, and for a day when you wrote, so the inbox cannot be flooded. When you ask for a copy of your data, when you asked and how often the download link was used.
  • Technical data: our hosting providers keep short-lived request logs — IP address, time, what was requested — for security and to keep the service running. On the website we also count the steps of signing up — landing, choosing a side, opening a free tool and getting an answer from it, starting and finishing the form — against a random id that lives in your browser tab, together with the campaign parameters in the link and the site you came from. No email, account or IP address is attached to it, and it never leaves our own database. Purpose: to see where people drop out before launch. No third-party analytics software runs in the app or on the site.
  • Crash and performance reports (the app): when the app crashes or something fails, and how long it takes to start and to open a screen, are sent to Expo’s EAS Observe service, from half of the installed apps. A report carries the kind of error, its technical trace, which screen it happened on — the screen’s type, never which profile, chat or search — the app version and release channel, and basic details of the phone and its system. Before they leave the phone, error messages are cleaned of email addresses, links, account ids and long numbers. Never your messages, profile or what you type. Purpose: finding and fixing faults (our legitimate interest).

The order in which profiles are shown is worked out automatically from these answers. That is all the automation there is: no decision with a legal or similarly significant effect on you is ever made automatically, and whether you match is always the choice of the two people involved.

What stays on your device

A few things are kept in your own browser or on your own phone rather than with us. None of it is used to follow you across other sites or apps.

  • On the website, for as long as the tab is open: the random id the sign-up steps are counted against, and the campaign parameters, referring site and invite code of the link you arrived through, so a sign-up is credited to where the visit started. Both are sent along with those steps and with the waitlist form, as described above, and are gone when you close the tab.
  • On the website, until you clear it: which items you ticked on a visa checklist, so your progress is still there next time. It is never sent to us.
  • In the app: your sign-in session, so you stay signed in; the language you chose; the invite code of a link you opened, until your profile is created; and whether the app has already asked you to pause your profile after a match. Signing out removes the session, and uninstalling the app removes all of it.
  • In the app, while you sign up: your answers to the sign-up questions and the step you were on, so you can pick up where you left off. They are stored unencrypted on your phone, next to your sign-in session, until you finish signing up or sign out.
  • Cookies: the website sets none for visitors. Its only cookie is for staff signing in to an internal dashboard.

You can clear any of this in your browser or phone settings at any time. The site and the app keep working; they just forget.

On what basis

  • Performing the service you asked for, or the steps you asked us to take before it: your waitlist answers, so we can pre-match you and let you in at launch, and then everything in your profile, your photos, your messages and your matches. Without those there is nothing to match.
  • Your consent: uploading a video pitch and, for families, entering details of your children. You can withdraw it at any time by removing the item or deleting your account.
  • Our legitimate interest in running a safe service: handling reports, keeping request logs, fixing crashes and faults, preventing abuse and spam, counting how many people an invite brought in, and counting the sign-up steps on the website.
  • Legal obligations: keeping what tax or other law requires us to keep, which today means the records of payments.

Who can see what

  • The other side only. An au pair’s profile, photos and pitch are visible to host families, never to other au pairs; a family’s, to au pairs, never to other families. This is enforced in the database, not just in the app.
  • People you talk to see your messages, and photos you send them. Nobody else does. We do not read private conversations unless one of the two people in it reports it.
  • Topic groups are visible to their members, who are always all from your own side. Staff can read group messages and reports in order to moderate.
  • The photos for an identity check are seen only by the person at AuPairHub who does the check. The other side sees only whether you are verified.
  • What you are looking for — your saved searches — is visible only to you.
  • We do not sell or rent your data, we do not show advertising, and we do not hand your details to agencies. If you match with a family and a recognised sponsor has to file the permit, you give them your details yourself.

Who processes it for us

A few companies run the infrastructure. Each acts on our instructions under a data-processing agreement.

  • Supabase — the database, file storage and sign-in emails. Hosted on Amazon Web Services in the European Union (Ireland). Supabase is a US company; any access from outside the EU is covered by the EU standard contractual clauses in its data-processing agreement.
  • Vercel — hosts this website. Vercel is a US company that serves the site from European locations; transfers are covered by the EU standard contractual clauses.
  • Expo — builds the app, delivers updates to it and receives the crash and performance reports described above. Expo does not receive your profile or messages. Expo is a US company; the request logs and reports it keeps are covered by the EU standard contractual clauses.
  • Apple and Google — distribute the app through their stores under their own privacy terms, and sell the family plans in it as the seller.
  • RevenueCat — handles the in-app purchases for us. It receives your account number and your purchases from the store, not your profile or messages. RevenueCat is a US company; transfers are covered by the EU standard contractual clauses.
  • Resend — sends our emails: sign-in codes, the link to a copy of your data, and the messages you send to support. Resend is a US company; transfers are covered by the EU standard contractual clauses.

Children

You must be at least 18 to create an account. Host families describe their children in their profile — a first name, an age and a gender — because au pairs need to know who they would be looking after. Enter only what you are comfortable with; a nickname is fine. We never collect anything from a child directly, and the details are visible only to au pairs, as above.

How long we keep it

  • Waitlist answers: until the corridor you signed up for has launched and you have been invited to the app, and at most twelve months after that. Earlier if you ask.
  • Your account, profile, photos, pitch, searches and matches: for as long as you keep the account.
  • Messages: as long as the conversation exists. Deleting your account deletes every conversation you were in, whole — the other person loses that thread too, including what they wrote in it.
  • Reports: twelve months after staff resolved them.
  • Pitch views: twelve months.
  • Photos for an identity check: until the check is done, then deleted.
  • Photos and pitches from a sign-up that was never finished: 14 days.
  • Payment records: as long as tax law requires, which in the Netherlands is seven years — also after you delete your account. They then no longer point to an account.
  • The link to a copy of your data: seven days.
  • Request logs: kept by our hosting providers for a few weeks, then discarded.
  • Crash and performance reports: as long as Expo keeps them for our account.
  • Sign-up steps on the website: twelve months, then deleted.

Deleting your account

You can delete your account yourself, under Settings in the app. It removes your account, your profile, every photo and video you uploaded, your matches, favourites, searches and group memberships, and your waitlist answers if you had any. Every one-to-one conversation you were in goes with it, for both sides: the person you talked to loses the thread as well. It is immediate and cannot be undone. Records of payments stay, as tax law requires, without the account they belonged to. One more exception: our database provider keeps a daily backup for seven days, so a copy of a deleted account can survive in a backup for up to seven days before it is gone for good. Backups are only ever used to restore the whole service after a failure, never to bring back a single account. If you would rather write to us, use the address below and we will do it for you.

Your rights

Under the General Data Protection Regulation you can:

  • see the data we hold about you, and get a copy in a usable format — in the app, under Settings, Download my data
  • have it corrected — most of it you can edit yourself in the app
  • have it deleted — see above
  • object to, or ask us to restrict, processing based on our legitimate interest
  • withdraw consent you gave, without it affecting what happened before
  • complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens, at autoriteitpersoonsgegevens.nl

Write to the address below for any of these. We answer within a month.

Changes

When this page changes, the date at the top changes with it. If a change affects what you agreed to when you created your account, the app asks you to read it again before you go on.

Contact

For anything about your data, or this page:

Write to privacy@aupairhub.com.