BURSASEARCH — PRIVACY POLICYLast updated: 15 July 2026THE SHORT VERSION- We only collect what we need to match you with bursaries and grants.
- We never sell your data to anyone.
- We delete stored personal data every month as part of a routine data-clearing cycle.
- You can ask us to delete your data at any time — just email us.1. WHO WE AREBursaSearch ("we", "us", "our") is a UK-based app that helps students find bursaries, grants and scholarships they may be eligible for. We are the data controller for the personal data described in this policy.Contact: [email protected]2. WHAT DATA WE COLLECT- Your answers to our eligibility questions (e.g. your course, university, household circumstances) — used to match you with bursaries and grants you may qualify for. This is the core function of the app.- Account details (email address), if you create an account — used to sign you in and let you return to your saved results.- Basic technical data (device type, crash reports, anonymised usage data) — used to keep the app working reliably and fix problems.Some eligibility questions may touch on information such as household income or personal circumstances. We only use this to run your bursary match — nothing else.We do NOT collect your precise location, contacts, photos, or browsing history, and we do not track you across other apps or websites for advertising.3. HOW WE USE YOUR DATA (LAWFUL BASIS)Under UK data protection law (UK GDPR and the Data Protection Act 2018) we need a lawful basis to use your data:- Contract — processing your answers to generate your bursary matches, which is the service you ask us to provide.- Legitimate interests — keeping the app secure, fixing bugs, and understanding aggregate (anonymised) usage so we can improve the service.- Consent — anything optional, such as emails from us. You can withdraw consent at any time.4. WE DO NOT SELL YOUR DATAWe do not sell, rent, or trade your personal data to any third party. We do not share your data with advertisers or data brokers.5. HOW LONG WE KEEP YOUR DATAWe run a monthly data-clearing cycle: personal data stored on our systems is routinely deleted every month. This means your questionnaire answers and match data are not kept long-term.The only data that may be kept longer is:- account sign-in details, for as long as you keep an account with us;
- records we are legally required to keep (for example, purchase records for tax purposes).You can also request deletion at any time — see "Your rights" below.6. WHO WE SHARE DATA WITHWe use a small number of trusted service providers (data processors) to run the app:- Google Firebase (Google Ireland Ltd) — secure hosting of app data and authentication.- Apple App Store / Google Play — if you make a purchase, payment is handled entirely by Apple or Google. We never see your card details.These providers only process data on our instructions and are contractually bound to protect it. Where data is transferred outside the UK, it is protected by safeguards recognised under UK law (such as the UK International Data Transfer Agreement or adequacy regulations).We will only disclose personal data beyond this if required by law.7. SECURITYYour data is stored on secure, encrypted infrastructure. Access is restricted, data is encrypted in transit, and our monthly deletion cycle keeps the amount of data we hold to a minimum.8. YOUR RIGHTSUnder UK GDPR you have the right to:- Access — ask for a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data ("right to be forgotten").
- Restriction — ask us to limit how we use your data.
- Portability — receive your data in a portable format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — at any time, where processing is based on consent.To exercise any of these rights, email [email protected]. We will respond within one month, free of charge.If you are unhappy with how we handle your data, you have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, or by phone on 0303 123 1113.9. CHILDRENBursaSearch is intended for people exploring university funding, typically aged 16 and over. We do not knowingly collect data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it.10. CHANGES TO THIS POLICYIf we make significant changes to this policy, we will update the "Last updated" date above and, where appropriate, notify you in the app. Please check back occasionally.11. CONTACT USQuestions about this policy or your data? Email us at [email protected].© 2026 BursaSearch. All rights reserved.