Scholarship Finder
Privacy Policy
Version 1.0 · Effective 15 August 2026 · Last updated 16 August 2026
Who we are
Scholarship Finder is provided by Tsegazeab Hailu Tedla, trading as Nku App Services, established in Finland (EU). We are the data controller for the personal data described below. Contact us at enlightnkugen@gmail.com.
What we collect and why
| Data | Why we collect it | Legal basis |
|---|---|---|
| Email address, Firebase UID | Sign-in, account recovery, syncing your data | Contract (providing the app to you) |
| Password | Authentication — handled entirely by Firebase; we never see or store it ourselves | Contract |
| Name (only if you sign in with Google/Apple) | Display, account identity | Your consent (choosing that sign-in method) |
| Profile details you choose to add (nationality, residence, date of birth, gender, study level, field(s), target countries, GPA/grades, test scores, work experience, admission/degree status) | Match you to relevant scholarships and check your eligibility | Consent — all optional |
| Saved items, notes, application status, reminders, alert preferences | Let you build a shortlist, track applications, and receive the alerts you set up | Contract / Consent (for alerts) |
| Push notification token, device platform, app version, locale, timezone | Deliver deadline reminders you enable; show the app in your language/region | Consent (notifications) / Legitimate interest (locale) |
| IP address and basic request metadata | Keep the service secure and reliable, and prevent abuse | Legitimate interest |
| Advertising identifier and ad-interaction data — only if and when advertising is switched on | Show and measure ads that help fund free access to the app | Consent (personalised ads) / Legitimate interest (non-personalised ads) |
Scholarship Finder does not collect your precise location, contacts, photos, camera or microphone access, or any health or other special-category data — the app never asks for these permissions.
Advertising
As of this version, advertising is switched off. The app is built so that advertising can be turned on remotely in a future release to help sustain free access; if that happens, this policy, the in-app consent flow, and (on iOS) Apple's App Tracking Transparency prompt will all be updated and shown to you before any ad-related data is collected. We will never share the profile details you enter (grades, nationality, test scores, etc.) with advertisers for targeting.
Who we share data with
Google Firebase (authentication and push notifications) and our cloud/database host process data on our instructions, under contract. If advertising is enabled, Google (AdMob) and/or Meta (Audience Network) act as independent controllers for the limited advertising data described above. We do not sell your personal data.
International transfers
Some of our processors (e.g. Google) operate outside the European Economic Area. Where that happens, transfers rely on appropriate safeguards such as EU adequacy decisions or Standard Contractual Clauses.
How long we keep data
We keep your data while your account is active. If you delete your account, your personal data is permanently deleted within 30 days, except for a small set of items we may be legally required to retain briefly (see our Account & Data Deletion page for the full list).
Your rights
Under GDPR, you can ask us to: give you a copy of your data (access); correct it (rectification); delete it (erasure); limit how we use it (restriction); object to certain processing, including profiling for ads; receive it in a portable format; and withdraw any consent you've given, at any time. Exercise these in the app (Profile → Data & privacy) or by emailing enlightnkugen@gmail.com. We respond within one month (extendable by two months for complex requests, with notice), after verifying it's really you. You can also complain to Finland's supervisory authority, the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).
Children
Scholarship Finder is not directed at children under 16, and we do not knowingly collect their data or show them personalised ads.
Security
Data is encrypted in transit (HTTPS/TLS) and at rest. Access to our systems is access-controlled and requires multi-factor authentication.
Changes to this policy
We'll update the version and effective date above and, for material changes, notify you in the app.