Privacy policy

Last updated: 2026-11-05. Applies to Westerwork on westerwork.nl and the Westerwork apps for Android and iOS.

1. Who is responsible

Westerwork is developed and operated by an independent developer (“the operator”). Privacy questions and requests: privacy@westerwork.nl. Help with the app: support@westerwork.nl.

2. What data we process

A. Your account

• Username, e-mail address and a secure hash of your password (never the password itself).
• That you accepted the terms and this policy (version and time).
• Account emails: whether and when your e-mail address was confirmed. To confirm your address or reset a forgotten password we email you a link from noreply@westerwork.nl; only a secure hash of that link's code is stored, it works once and expires (password reset: 15 minutes, confirmation: 24 hours). To stop abuse (for example many reset emails to one inbox) we keep keyed codes derived from your IP address, the typed e-mail address and your account number — never the values themselves — for at most 2 days. These emails contain no advertising and no tracking.
• Sign in with Google or Apple (in the apps, optional): the account ID of that provider, the e-mail address it shared when you linked it (with Apple this can be a private relay address) and, for Apple, an encrypted token that is only used to revoke the link when you delete your account or unlink Apple. Your name from Apple/Google is not stored. This sign-in gives no access to Gmail, Drive or health data.
• Settings: language, theme, which dashboard items you want, onboarding progress; passkeys if you add one (public key only).

B. What you enter yourself

• Your own tasks (with repetition and reminder time), your own appointments and completed items.
• Study: school level, year, subjects, topics and progress.
• Training schedule (days, times, reminders) and, if you switch it on, a daily creatine reminder time.
• Notification preferences (which notifications, morning summary time).

C. Magister — only if you connect it

You sign in on Magister's own sign-in page; Westerwork never sees or stores your Magister password. Westerwork receives a connection (token) that is kept only on our server side, never in the app or your browser. With it Westerwork reads (never changes) :

• timetable (lessons, times, rooms, cancellations), homework and tests;
• grades, including earlier school years;
• absences — note: an absence reason (e.g. “ill”) can reveal health information; it is shown only to you;
• learning resources (title, subject, publisher);
• messages — fetched only when you open them and not stored.

You can disconnect at any time (More → Connections). Synchronised Magister data is then removed from Westerwork.

If you connect Somtoday, Westerwork reads your school timetable, homework, tests, grades and available school resources to show them in your account. Dalton choices and calendar information are read only. Westerwork does not change school data in either service.

D. Device and technical data

• Notifications: if you allow them, a push token of your device (Apple Push Notification service on iPhone, Firebase Cloud Messaging on Android, or a browser Web Push subscription), a random installation ID and the app version, linked to your account.
• Cookies: a session cookie and, if you choose “remember this device”, a login cookie. These are necessary for signing in; there are no advertising or analytics cookies. The app stores small preferences (theme, language, whether you hid a tip) on your device.
• Security: sign-in attempts (the username or e-mail as typed, IP address, time) to block password guessing; sign-up attempts are counted by a hashed IP address.
• Server logs of our hosting providers (IP address, time, requested page), used for operation and security.

E. Optional connections

• Google Health (sleep), Gmail and Outlook: only if you connect them on westerwork.nl, and only the data needed to show them in Westerwork (for example last night's sleep). Sleep is only shown while the Google Health connection is active. You can disconnect them at any time.
• The older web views of westerwork.nl contain an optional, experimental study assistant. If the operator enabled it and you use it, your question and the relevant study context are sent to an AI service to produce an answer. This feature is not part of the Westerwork apps for Android and iOS.

F. Ideas and votes (Feedback / Community)

• If you send in an idea: its title and description, and the date. If you vote: which idea you voted on.
• Internally this is linked to your account, only to prevent spam and to allow one vote per person. Other users see an idea as coming from an “Anonymous user” — never your name, e-mail, school or class.
• Only titles the operator has approved (planned, in progress, released) appear publicly on westerwork.nl/roadmap, without the description. Please do not put names or personal details in an idea; the operator can edit, hide or delete ideas.
• You may attach a photo or short video to a Community idea. Westerwork stores the file privately with your account and removes embedded metadata before storing it; other users can see approved media with the idea.

H. Premium

If you buy Premium, Westerwork stores the product, purchase reference, subscription status, start and expiry date and whether the subscription renews automatically with your account. This is needed to check and restore your access. The purchase is linked to your account through a random account code, and Google tells us about changes such as a renewal, cancellation or refund. Apple or Google handles the payment; Westerwork does not receive your payment card details.

G. Usage statistics (switched off by default)

• Westerwork has its own, simple usage statistics. They are switched off by default and are only used if the operator switches them on. We will update this policy before that happens.
• When switched on, Westerwork records per day only whether certain actions happened: completing the introduction, opening the dashboard, creating or completing a task, completing a Study topic, using the grade calculator in the app, connecting Magister, sending in or voting on an idea. The public calculator on westerwork.nl/cijfer-berekenen sends nothing.
• No content: no task titles, grades, school, lessons, messages, health or sleep data, e-mail or username. This is stored under a pseudonym (a code computed from your account number with a secret server key), separate from your account data. No cookies, no advertising IDs, no device IDs and no third parties: it stays on our own hosting.
• Why: to see, in totals only, whether Westerwork helps (for example: do new users come back after a week?). The operator only sees totals, and groups smaller than 5 people are never shown.
• You can switch this off at any time in the app via More → Privacy. Rows are deleted after 180 days and when you delete your account.

Westerwork does not collect your location, contacts or microphone recordings. Photos or videos are collected only when you choose to attach them to a Community idea. The weather on the dashboard is for a fixed location.

3. Why

Only to provide Westerwork to you: showing your school data and your own planning, sending the notifications you chose, keeping your account secure, and preventing abuse. We do not use your data for advertising, do not sell it and do not share it with other users.

4. Who processes data for us

• Web hosting (PHP/MySQL database) for the website and your account data.
• Cloudflare (background service, database and storage) for the Magister connection, synchronisation and notifications.
• Magister: only if you connect it, to read your school data.
• Purelymail: to send account emails (confirming your e-mail address, resetting a forgotten password) from noreply@westerwork.nl. Not used for newsletters.
• Apple and Google: to deliver notifications to your device (token + notification text) and, if you choose "Continue with Apple/Google", to sign you in.
• Google / Microsoft: only if you connect Google Health, Gmail or Outlook.

5. Security

All connections use HTTPS. Passwords are stored as hashes. Data is separated per account. Connection tokens stay server-side. The Android app does not include your data in device or cloud backups.

6. How long we keep data

• As long as your account exists. Magister data is replaced on every synchronisation and removed when you disconnect Magister.
• When you delete your account, your account and associated data are deleted (see below). A minimal technical record of the deleted account number (without name, e-mail or school data) is kept to prevent the number from being reused and to block delayed requests for that account.
• Ideas and votes: until the operator deletes them or you delete your account (then your ideas and votes are deleted too).
• Usage statistics (only if switched on): at most 180 days, and deleted when you delete your account.
• Notifications already delivered to a device and data in your own Magister account are not affected by Westerwork.
• Backups and logs of hosting providers are kept for the provider's own retention period.

7. Your rights

You can view and correct your data in the app, disconnect Magister, and delete your account yourself: in the app via More → Account → Delete account, or without the app at westerwork.nl/account-verwijderen. You may also ask for access, correction, deletion or restriction, or object via privacy@westerwork.nl. You can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Students under 16

Westerwork is made for secondary-school students, some of whom are minors. If you are under 16, please discuss using Westerwork with a parent or guardian. Westerwork has no advertising and no social features such as profiles, chat or friends; ideas and votes are anonymous to other users.

9. Changes

If this policy changes materially, we update it here with a new date. New accounts accept the version that applies when they sign up.

10. Launch waitlist on westerwork.nl

• What: only the email address you enter, the time you signed up, the page language and, if you came through a link with one, a simple campaign label (for example “tiktok”). No name, school, class, device ID, advertising ID or fingerprint.
• Why: to email you once Westerwork is available, and to see in totals which channel people came from. Only launch updates, no newsletter, no spam. We do not sell the list or share it with others, and there is no advertising tracking on the website.
• Abuse protection: to limit repeated signups, a keyed code derived from your IP address (not the address itself) is kept for 24 hours. The form uses one functional cookie (ww_wl) that is only there to protect the form and disappears when you close the browser.
• Where: stored in the Westerwork database at our web host; the website runs through Cloudflare.
• How long: until we have told you about the launch, and at most 6 months after the launch. After that the list is deleted.
• Unsubscribe / delete: every launch email contains an unsubscribe link (no password needed). You can also ask for deletion via privacy@westerwork.nl.