Privacy Policy
What we collect, why we collect it, who sees it, and what you can ask us to do with it.
Last updated 28 July 2026
This policy explains what personal data Unihub Network collects, why, how long we keep it, and the choices you have. It covers this website and the products in the Unihub Network, including Gradsy.
Who we are. Unihub Network is an edtech company operating from Kathmandu, Nepal. For the purposes of data protection law, the data controller is Unihub Network Private Limited, registered at Dillibazar, Kathmandu, Nepal (behind Citizen Bank), company registration number 294235/079/080.
Contacting us about privacy. Write to [email protected]. We aim to respond within two working days and to resolve requests within 30 days.
What we collect
We collect only what we need to do the job you came to us for.
Information you give us
- Account details — your name and email address when you create an account.
- Study profile — the information you enter to get matched: your level of study, grades or expected grades, field of interest, budget range, preferred destinations and intended intake.
- Saved items — the programs and universities you save, and notes you add to them.
- Documents — files you choose to upload to track your own application, such as transcripts or test results.
- Messages — anything you send us by email or through a form on this site.
Information we collect automatically
- Usage data — pages and screens viewed, features used, and actions taken, so we can see what works and what does not. This comes from our own service logs; we do not use a third-party analytics product.
- Device and technical data — device type, operating system, browser, approximate location derived from IP address, and language.
- Cookies and similar technologies — see Cookies below.
What we do not collect. We do not ask for financial account details, passport numbers, or government identity numbers to use our products. If a university requires those, you provide them to that university, not to us.
Why we use it
| What we use it for | Why we are allowed to |
|---|---|
| Creating and running your account | To perform our agreement with you |
| Matching you to programs and showing the reasoning | To perform our agreement with you |
| Storing your saved programs, documents and progress | To perform our agreement with you |
| Answering your messages | Our legitimate interest in supporting users |
| Improving the products and fixing faults | Our legitimate interest in running a working service |
| Security, fraud prevention and abuse handling | Our legitimate interest in keeping the service safe |
| Sending product updates or newsletters | Your consent, which you can withdraw at any time |
Where we rely on legitimate interests, we have weighed those interests against your rights and concluded they do not override them. You can object at any time — see Your rights.
Who sees your data
We do not sell your personal data. We do not sell it to universities, to partners, or to anyone else.
Your data is shared only in these situations:
- When you apply. If you choose to apply to a program, the information needed for that application is shared with that institution. You decide when this happens; it does not happen automatically because a program appeared in your results.
- Service providers. Companies that run parts of our infrastructure on our behalf. They act on our instructions, may not use your data for their own purposes, and are bound by contract to protect it. Our current providers are:
| Provider | What they do for us |
|---|---|
| Supabase | Database, account authentication and file storage for Gradsy — this is where your profile, saved programs and any documents you upload are held |
| Zoho | Sends the email Gradsy needs to send you — account verification, password resets and updates about your application |
| Expo | Delivers app updates to your device, and handles push notifications if you turn them on |
| Google (Firebase Cloud Messaging) | Delivers push notifications to Android devices |
| Cloudflare | Hosting for this website, DNS, and routing for email sent to our @unihubnetwork.com addresses |
| Delivers email sent to our team addresses into the inbox we read |
We will update this list before adding a new provider that handles your personal data.
- Legal obligations. Where we are required by law, or to establish or defend legal claims.
- A change of ownership. If the company is acquired or merges, data may transfer to the new owner, who remains bound by this policy or gives you notice of a replacement.
Aggregated statistics that cannot identify you — for example how many students searched for a destination — may be shared with partners or published. This is never individual-level data.
International transfers
We operate from Nepal and serve students in many countries, so your data is processed outside the country most of you live in.
Where your data is stored. Your account, profile, saved programs and uploaded documents are held in our database in Mumbai, India (South Asia region). Email is processed by providers in their own regions.
If you are in the UK or EEA, this means your data leaves that area. India has no adequacy decision, so we rely on appropriate safeguards for those transfers — standard contractual clauses in our agreements with the providers named above.
How long we keep it
- Account and profile data — while your account is open, then deleted or anonymised within 6 months of closure.
- Documents you upload — deleted when you delete them, or within 6 months of account closure.
- Support messages — 6 months from the last message.
- Waitlist and newsletter addresses — until you ask to be removed, or 12 months after the launch you signed up for, whichever comes first. If you join a waitlist we store only your email address and which list it was.
- Usage data — retained in aggregated form, which cannot identify you.
We may keep limited records for longer where the law requires it.
Your rights
Wherever you live, you can ask us to:
- Access the personal data we hold about you, and receive a copy.
- Correct anything inaccurate or incomplete.
- Delete your data, where we have no overriding reason to keep it.
- Export your data in a portable, machine-readable format.
- Restrict or object to processing based on legitimate interests, including profiling used for matching.
- Withdraw consent to marketing at any time, without affecting anything done before.
To exercise any of these, write to [email protected]. We will not charge you or treat you differently for asking.
If you are in the UK or EEA and are unhappy with our response, you can complain to your national data protection authority. We would rather you came to us first.
Cookies
We use a small number of cookies and similar technologies:
- Essential — keeping you signed in and keeping the service secure. These cannot be turned off without breaking the product.
- Preference — remembering choices such as your language or filters.
You can control cookies through your browser settings. Blocking essential cookies will stop parts of the service from working.
We do not use third-party analytics, advertising or tracking cookies. There is no Google Analytics, no advertising pixel and no tracking SDK in our website or our apps — which is why you are not being asked to dismiss a consent banner. If that ever changes we will update this policy and ask for your consent first, before the change takes effect.
Automated decisions
Our matching engine scores programs against the profile you give us. This is automated, but it is not a decision about you — it produces a ranked list with the reasoning shown, and nothing is accepted or rejected on our side as a result. Admissions decisions are made by universities, not by us. You can see why any program matched, and you can change your profile and run it again at any time.
Children
Our products are intended for people aged 16 and over. If you believe a younger child has given us personal data, write to us and we will delete it.
Security
We protect data in transit and at rest, restrict internal access to those who need it, and review our providers. No system is perfectly secure, and we will not claim otherwise. If a breach affects your rights, we will tell you and the relevant regulator as the law requires.
Changes to this policy
If we make a material change we will tell you before it takes effect — by email where we have your address, and by a notice on this page. The date at the top always shows the current version.
Contact
Questions, requests or complaints: [email protected], or write to Dillibazar, Kathmandu, Nepal (behind Citizen Bank).