Privacy Policy for Unitor

Effective Date: July 26, 2026
Last Updated: July 26, 2026

1. Introduction

Unitor is a peer-to-peer academic support and learning platform designed to connect university students with verified peer tutors for concept explanation, mentoring, study support, exam preparation, course-specific guidance, and problem-solving assistance.

This Privacy Policy explains how Unitor accesses, collects, uses, stores, protects, retains, and shares information when users access or use the Unitor mobile application.

The application is operated by Unitor.app, referred to in this Privacy Policy as “Unitor,” “we,” “us,” or “our.”

By creating an account or using Unitor, you acknowledge the data-handling practices described in this Privacy Policy.

2. Information We Collect

The information collected by Unitor depends on the features that a user chooses to use.

2.1 Account and Profile Information

When a user creates or updates an account, Unitor collects information such as:

Passwords are processed through Google Firebase Authentication. Unitor does not store users’ plain-text passwords in Cloud Firestore.

2.2 Tutor Application Information

Users who apply to become tutors may provide:

This information is used to evaluate whether an applicant is suitable to provide peer academic support through Unitor.

2.3 Academic Proposals and Session Information

When a student creates an academic-support request, Unitor collects information such as:

Users should not submit unnecessary sensitive personal information in proposals, session descriptions, reviews, messages, or other areas visible to another user.

2.4 Messages and Communications

Unitor stores communications exchanged between students and tutors, including:

Messages are intended only for legitimate academic-support communication between the relevant student and tutor.

Authorized administrators may review communications when reasonably necessary to investigate complaints, payment disputes, safety issues, fraud, academic misconduct, or violations of Unitor’s rules.

2.5 Payment and Transaction Information

Unitor currently uses a manual bKash payment-verification process for eligible academic-support sessions.

When a payment is submitted for verification, Unitor may collect:

Unitor does not ask users to provide their bKash PIN, password, one-time password, complete account credentials, bank-card information, or other confidential payment credentials.

Payments made through bKash are also subject to bKash’s own terms, security practices, and privacy policy. Unitor is not responsible for information independently collected or processed by the bKash service.

2.6 Ratings, Reviews, Reports, and Complaints

After a session or interaction, Unitor may collect:

Ratings and reviews may be displayed to other users to help evaluate tutors and maintain service quality.

2.7 Profile Photographs and Uploaded Images

When a user voluntarily selects a profile photograph, Unitor may:

Image compression and resizing are used only to reduce storage requirements and improve application performance. They are not used for facial recognition, biometric identification, or automated decision-making.

2.8 Notifications

Unitor may create and store notifications relating to:

Where device notifications are enabled, limited notification-delivery identifiers may be processed to deliver relevant alerts.

2.9 Technical and Security Information

Unitor and its service providers may automatically process limited technical information necessary to operate and secure the application, including:

This information is used for authentication, security, troubleshooting, fraud prevention, and application performance.

The current version of Unitor is not designed to collect precise location, contacts, SMS messages, call logs, microphone recordings, or health information.

3. How We Use Information

Unitor uses collected information to:

Unitor does not sell users’ personal information.

Unitor does not use personal information for third-party behavioral advertising.

4. Academic Integrity

Unitor is intended for academic support, peer learning, mentoring, concept explanation, and study guidance.

Users must not use Unitor to:

Accounts or sessions may be restricted, suspended, or terminated when misuse is reported or reasonably suspected.

5. How Information Is Shared

Unitor only shares or makes information available in the circumstances described below.

5.1 Between Students and Tutors

Information required to arrange and complete a session may be visible to the relevant student or tutor, including:

Users should not share confidential or unnecessary sensitive information through chat or proposals.

5.2 With Authorized Unitor Administrators

Authorized administrators may access relevant:

Administrative access is used for verification, customer support, safety, payment review, fraud prevention, dispute handling, and platform management.

5.3 With Service Providers

Unitor uses third-party service providers that process information to operate the application, including:

These providers process data according to their respective terms, privacy policies, security practices, and applicable data-protection agreements.

5.4 Legal, Security, and Safety Reasons

Unitor may disclose information when reasonably necessary to:

5.5 Business Changes

If Unitor is involved in a merger, acquisition, reorganization, financing, or transfer of the application, relevant information may be transferred as part of that transaction. Users will be informed where notice is required by applicable law.

6. Application Permissions

Depending on the features used, Unitor may request permission to access:

Photos or Media

Used when a user chooses an existing photograph for their profile.

Camera

Used only when a user chooses to take a new profile photograph and camera-based image selection is enabled.

Notifications

Used to send application, payment, message, session, or administrative notifications.

Internet Access

Used for authentication, database access, image upload, messaging, payment verification, and communication with Firebase services.

Permissions are requested only when needed for the relevant feature. Users can manage application permissions through their device settings. Disabling a permission may prevent the related feature from functioning.

7. Data Security

Unitor uses reasonable technical and organizational safeguards designed to protect user information, including:

Only authorized users and administrators are permitted to access information necessary for their roles.

However, no mobile application, online platform, or electronic storage system can guarantee absolute security. Users are responsible for protecting their login credentials and should immediately report suspected unauthorized access.

8. Data Retention

Unitor retains information only for as long as reasonably necessary to:

Profile and account information is generally retained while the account remains active.

Messages and session information may be retained while necessary to provide the service, handle disputes, investigate misuse, or maintain security.

Transaction records may be retained after account deletion when necessary for fraud prevention, accounting, dispute resolution, security, or legal compliance.

When information is no longer required, Unitor will delete or anonymize it, subject to legitimate technical, security, and legal requirements.

9. Account and Data Deletion

Users can request deletion of their Unitor account and associated personal information.

9.1 Delete an Account Inside the App

To initiate account deletion inside Unitor:

The Delete Account option must permanently initiate deletion and must not merely log the user out, disable the profile, or temporarily suspend the account.

9.2 Request Deletion Outside the App

Users who have uninstalled the application or cannot access their account may request deletion by emailing:

unitor.4dmin@gmail.com

Use the email subject:

Unitor Account Deletion Request

The request should include the email address registered with the Unitor account. Additional information may be requested only when reasonably necessary to verify account ownership and protect the account from unauthorized deletion.

The public webpage containing this Privacy Policy may also be used as Unitor’s account-deletion web resource because this section provides a direct method for requesting deletion without reinstalling the application.

9.3 Information Deleted

After a verified deletion request, Unitor will delete or anonymize eligible information associated with the account, which may include:

9.4 Information That May Be Retained

Limited information may be retained when reasonably necessary for:

Where retained, the information will be restricted to the purpose requiring its retention and will not be used to continue operating a deleted user profile.

Deleting the Unitor application from a device does not automatically delete the user’s Unitor account. Users must use the in-app deletion option or submit a deletion request using the email address above.

10. User Choices and Rights

Subject to applicable law, users may request to:

Requests can be sent to:

unitor.4dmin@gmail.com

Unitor may need to verify the requester’s identity before completing a request.

11. Children and Age Requirements

Unitor is intended primarily for university students and is not directed to children under 13 years of age or the minimum age required to consent to data processing under applicable law.

Unitor does not knowingly collect personal information from children who are not legally permitted to use the service.

If a parent or legal guardian believes that a child has provided personal information without appropriate authorization, they may contact Unitor at unitor.4dmin@gmail.com to request review and deletion.

12. Third-Party Services and Links

Unitor may contain links to or interactions with third-party services, including payment services.

Third-party services operate under their own terms and privacy policies. Unitor is not responsible for the privacy, content, availability, or security practices of an independently operated third-party service.

Users should review the privacy policy of a third-party service before submitting information to it.

13. International Data Processing

Firebase and other service providers may process or store information on servers located outside the user’s country.

Information may therefore be transferred to and processed in countries where Unitor’s service providers operate, subject to their security measures and applicable legal protections.

14. Changes to This Privacy Policy

Unitor may update this Privacy Policy when:

The revised Privacy Policy will display an updated “Last Updated” date.

Where required, users may also be informed through the application or another appropriate communication method.

15. Contact Us

For privacy questions, account-deletion requests, data requests, or complaints, contact:

Application: Unitor
Developer/Organization: Unitor.app
Privacy Contact Email: unitor.4dmin@gmail.com
Mailing Address: House 29, Block C, Bashundhara R/A, Dhaka, Bangladesh