Privacy Policy

Version 2026-10-28

Updated 2026-10-31: we added the section "How Kora uses AI". It explains how Kora already uses AI. It does not change what we collect, why, or what you agreed to, so you do not need to accept this policy again.

Updated 2026-11-13: we added "Copying and printing" to the list of what we collect, and how long we keep it.

This policy explains what Kora does with your information. We wrote it in plain language, so you can follow it even if English is not your first language.

Who runs Kora

Kora is a trade name of Onboardly B.V., Admiralengracht 60-H, 1057 GB Amsterdam, the Netherlands. Onboardly B.V. is the data controller for the information in this policy.

For anything about your privacy, write to privacy@mykora.nl. We answer within one month.

What Kora is

Kora is a practice tool for the Dutch inburgering exams. We are independent. Practice results in Kora have no official standing and do not affect any decision by a Dutch government body.

What we collect and why

We try to collect as little as possible.

Your account. Your email address and a login identifier. If you sign in with a password, our login provider checks it; we never see your password. If you sign in with Google, we receive your email address and name from Google.
Your profile. The language you think in, which exam you are working toward (A2 or B1), your Dutch level, and your first name if you give it. If you add them, your exam dates. Older accounts may also hold answers to earlier onboarding questions (study hours, what worries you about the exam, and a free text box).
Your practice. Which questions you answered, whether you got them right, how long you took, your scores, and which mock exams you finished. This lets Kora show your progress and suggest what to practice next.
Your writing and speaking feedback. To give feedback, we send your answer to our AI provider (see "Who else processes your data"). We save the score and the feedback Kora wrote. We do not save the full text you wrote or said. Before we save feedback, we remove personal numbers such as a BSN, IBAN, passport number, V-number, phone number or email address, in case the AI repeated them.
Exam results you share. If you tell us how an exam went, we save what you told us.
Payments. Payments go through our payment provider. We never see or store your card or bank details. We store your customer number at the payment provider, whether your plan is active, and, if you cancel, the reason you chose.
Your answers to our questions. If you answer a short question in one of our emails (for example why you did not start a plan), or send us feedback from inside the app, we save your answer. We remove personal numbers and email addresses from feedback messages before saving them.
How you found us. On your first visit we note where you came from: the campaign tag in the link if there was one, the name of the website that sent you (not the full address), and the first Kora page you opened. We save this with your account when you finish onboarding, so we can see which channels help people find Kora.
Emails we send you. We keep a record of which emails we sent you and when, so we do not send the same email twice.
Copying and printing. When you copy text or print a page inside the app, we record that it happened: which screen, and how many characters. We never record the text itself. We do this to protect Kora's content against bulk copying. You can still copy a word to look it up; nothing is blocked.
Technical logs. Our servers keep short logs of requests (such as the time, the page and the IP address) to keep Kora secure and working.

Please do not enter sensitive information, such as your BSN, passport number, health information, religion or residence status. You never need it to practice, and we do not ask for it.

What we do not store

Your voice. When you speak in a practice session, your browser sends the audio straight to our speech provider, which turns it into text. The audio never reaches our servers and we do not store it. We only receive the text, which we use for your feedback and then do not keep.
The questions you ask Kora about a practice question. We send them to our AI provider to answer you. We do not store them.
Kora's voice. Audio that Kora reads out to you is made when you need it and kept only briefly in memory.

How Kora uses AI

Kora uses AI to help you practice. This section explains where we use it, what it can get wrong, and what it sees. You can also read it on our page How Kora uses AI.

Where Kora uses AI:

Coach Kora. When you chat with Coach Kora or ask about a question, an AI writes the answers. Coach Kora is not a person.
Feedback on speaking and writing. An AI reads your answer and writes tips: what is good and what to fix.
Dutch audio. The Dutch voices you hear in Kora are made by a computer. They are not recordings of real people.
Video questions. The people in the speaking video questions are made with AI. They are not real people.
Some pictures. Many KNM pictures and some speaking pictures are made with AI. We mark them in the app. Our other photos are real photos that we took ourselves.
Practice questions. AI helps us write practice questions and explanations. People on our team check them.

Kora uses AI models from established providers. We build Kora's coach on top of them.

AI can make mistakes. AI can be wrong. Sometimes it misses a mistake, or it says something is wrong when it is right. If something looks strange, check it or ask us. For facts about the exam, use the official sources, like inburgeren.nl and DUO.

Practice, not an exam result. Kora's feedback and points are for practice only. They are not an official assessment by DUO or CvTE. They decide nothing about your exam.

Kora does not judge your feelings. Kora does not use AI to judge emotions. It does not try to tell if you are nervous, stressed or confident. The feedback is only about your answer: what you said or wrote, your grammar and your words.

What the AI sees. To give feedback, the AI sees your answer: the text you write, or the text of what you said. When you speak, your recording is first turned into text. The AI also sees a little context, like the question and the language you think in. When you chat with Coach Kora, it sees your messages. What we keep, and for how long, is explained in the other sections of this policy.

You can always reach a person. Questions about Kora or about the AI? Write to hello@mykora.nl, and a person on the Kora team answers.

Why we may use your data (legal bases)

To provide Kora to you (performance of our agreement with you): your account, profile, practice, feedback, payments and the emails about your account and payments.
Our legitimate interests: keeping Kora secure, protecting Kora's content against bulk copying, fixing problems, improving Kora, learning which channels bring people to Kora, and sending you short tips about using Kora. You can stop the tips at any time with the link in each tip email.
Legal obligations: we keep payment and invoice records as long as Dutch tax law requires.

We do not sell your data. We do not use it for advertising. We do not use tracking cookies or advertising trackers.

Using Kora inside AI assistants (Claude, ChatGPT)

You can add Kora to an AI assistant such as Claude or ChatGPT as a connector. The assistant can then ask Kora for exam information, practice questions, KNM facts and grammar explanations while you chat.

No account, no personal data. The connector works without signing in. Kora does not receive your name, email address or account details from the assistant.
What we log. For each request we log only which Kora tool was used, the name of the assistant app, whether it worked, and how long it took. We do not log or store your questions or answers.
Your conversation stays with the assistant. Your chat is handled by the company that runs the assistant (for example Anthropic for Claude, or OpenAI for ChatGPT), under its own privacy policy. Kora only sees the short request the assistant sends to a Kora tool, such as a topic or a practice question number.
Never asked, never stored. The connector never asks for your BSN, V-number, residence status or how you came to the Netherlands.

Who else processes your data

We use a small number of service providers to run Kora. Each one may only use your data to provide its service to us, under a data processing agreement. They are:

Hosting provider (Netherlands): runs our servers and database, and keeps our server logs.
Login provider: handles signing in. It processes your email address and login details.
Website hosting provider: serves our website and passes requests on to our servers. It processes technical request data, such as your IP address.
AI provider (United States): writes feedback on your writing and speaking, answers your questions about practice questions, and helps translate. It receives your answer or question and a little context, such as the language you think in. It does not use this data to train its models.
Speech provider (United States): turns your spoken answers into text and makes Kora's voice. It receives your voice recordings and the text Kora reads out.
Payment provider (European Union): handles payments, VAT and your subscription. It processes your payment details, email address and country.
Email providers: one sends our emails to you (United States); one forwards emails you send to an @mykora.nl address to our team. They process your email address and the content of those emails.

When a provider processes data outside the European Economic Area, such as in the United States, the transfer is protected by the EU-US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.

If you want to know which companies we use, write to privacy@mykora.nl and we will tell you.

How long we keep your data

Your account, profile and practice: for as long as your account exists. When you delete your account, we remove them from our database.
Payment and invoice records: 7 years, because Dutch tax law requires it, also after you delete your account. Our payment provider keeps its own records under its legal obligations.
Server logs: about 30 days.
Copying and printing records: 90 days, or until you delete your account if that is sooner.
Deletion record: when you delete your account, we keep a note that an account was deleted at a certain time, without anything that identifies you, so we can show that we honor deletions.

Our providers delete or return data under their own terms when we stop using it or when we delete your account.

Your rights

You have the right to:

See your data and get a copy of it. Write to privacy@mykora.nl.
Correct your data. You can change your profile in Settings, or write to us.
Delete your account. Use Delete account in Settings. If you cannot sign in, write to privacy@mykora.nl and we will delete it for you.
Take your data with you in a common format. Write to privacy@mykora.nl.
Object to how we use your data, or ask us to limit it. This includes stopping tip emails, which you can also do with the link in any tip email.
Withdraw your consent at any time. This does not affect what we did before.
Complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) if you think we did not handle your data correctly. We would like to hear from you first, so we can fix it.

We may ask you to confirm your identity before we act on a request.

On your device

Kora saves a few things in your browser so the app works: your sign-in session, your language choice, how you found Kora, and which tips you closed. These are not used for tracking or advertising, and they stay on your device.

Children

Kora is for people aged 16 and older; our Terms require it. We do not knowingly create accounts for children under 16. If you think a child under 16 has an account, write to privacy@mykora.nl and we will delete it.

Security

Our database is stored in the Netherlands, with a hosting provider that encrypts stored data. Kora's website and app only use encrypted connections (HTTPS). Only the people who run Kora can access your data, and only when needed to run Kora or help you.

Changes to this policy

If we change this policy in an important way, we change the version date at the top and ask you to read and accept the new version the next time you sign in. We do not change it silently.

Contact

Onboardly B.V. (trading as Kora) Admiralengracht 60-H, 1057 GB Amsterdam, the Netherlands privacy@mykora.nl

We have not appointed a Data Protection Officer, because the law does not require one for Kora. Privacy questions go to privacy@mykora.nl.