Privacy Policy

Last updated: 8 July 2026

This policy is a working draft describing UniStep’s actual data practices. Please have it reviewed by a qualified lawyer for your jurisdiction before public launch.

UniStep (“UniStep”, “we”, “us”) provides a mobile application that helps students discover courses, get matched to universities in Canada, Australia and the United Kingdom, apply, and track their student-visa process. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and the choices you have. By using UniStep you agree to this policy.

1. Data we collect

Information you give us

Account: your email address (used to sign in with a one-time code), your name, and optionally a phone number.
Study profile: education level, marks/grades, English test type and score, preferred country, subject and intake, budget, backlogs, gap years and work experience.
Documents: files you choose to upload — for example passport pages, marksheets and offer letters — for your applications.
Messages: messages you send to our support or counselling team.

Information collected automatically

Device & push tokens: a push-notification token (if you enable notifications) and basic device information needed to deliver the service.
Usage: app activity such as applications created and documents uploaded, used to operate and improve the service.

We do not collect your precise location, your contacts, or advertising identifiers, and we do not show third-party ads.

2. How we use your data

To create your account and sign you in securely.
To generate university and course matches based on your profile.
To submit and track your applications and to manage your documents and visa checklist.
To send you service messages and, if enabled, push notifications about your applications.
To provide support and respond to your requests.
To keep UniStep secure, prevent abuse, and comply with legal obligations.

3. Who we share it with

Universities & education partners: when you apply to a program, the information needed for that application (your profile and relevant documents) is shared with the relevant institution or its authorised representatives.
Our counsellors / staff: authorised UniStep staff may access your profile to assist with your applications and visa process.
Service providers: vendors who process data on our behalf under contract — for example email delivery (to send your sign-in codes), cloud file storage, and push-notification delivery.
Legal: where required by law, regulation or valid legal process.

We do not sell your personal data.

4. Data retention

We keep your data for as long as your account is active or as needed to provide the service. When you delete your account, we permanently delete your profile, applications, documents, messages and notifications, except where we are required to retain certain records to comply with legal obligations.

5. Your rights & choices

Access & correction: you can view and edit your profile in the app at any time.
Deletion: you can permanently delete your account and all associated data from Profile → Settings → Delete account in the app, or by following the steps on our account deletion page.
Notifications: you can turn push notifications off in your device settings.

Depending on where you live, you may have additional rights (for example under the GDPR or India’s data-protection law), including the right to object to or restrict certain processing. To exercise any right, contact us at support@unistep.app.

6. Security

We use industry-standard measures to protect your data, including encrypted transport (HTTPS), secure token storage on your device, and access controls on our systems. No method of transmission or storage is 100% secure, but we work to protect your information and to notify you of material incidents where required.

7. International transfers

Because UniStep supports applications to institutions in Canada, Australia and the United Kingdom, your data may be processed in countries other than your own. Where we transfer data internationally we take steps to ensure it remains protected in line with applicable law.

8. Children

UniStep is intended for users aged 17 and over. We do not knowingly collect data from children under this age. If you believe a child has provided us data, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the “Last updated” date above.

10. Contact

Questions about this policy or your data? Email us at support@unistep.app.