Privacy Policy

Pathminder (“we”, “us”, “our”) is a guidance tool that helps students navigate UK study and visa pathways. It is a product operated by Eccentrixity Systems Ltd, a company incorporated in the Federal Republic of Nigeria under the Companies and Allied Matters Act 2020 (RC 9810000). This policy explains what personal data we handle and the choices you control.

For the purposes of data-protection law, the data controller is Eccentrixity Systems Ltd, registered in Nigeria (RC 9810000). If you have any questions, contact us at privacy@pathminder.app.

We aim to comply with the Nigeria Data Protection Act / NDPR (our primary users are in Nigeria) and, where it applies, the UK GDPR and Data Protection Act 2018.

We only collect what we need to help you. That includes:

• Profile answers: name, email, nationality, intended intake date, course level, subject area, budget range, qualifications, funding, offer/CAS status, and English-test results.
• Account details: your email address and a securely hashed password (we never see your actual password).
• Usage data: basic technical information needed to run the service securely (for example, anti-bot verification via Cloudflare Turnstile).

We do not ask for passport numbers, financial-account numbers, or payment-card details in your profile. Never enter those into Pathminder.

• To build your profile and give you personalised guidance, deadlines, cost breakdowns, readiness scoring, document checklists, and next steps.
• To create and secure your account, and let you save and return to your progress.
• To operate, maintain, debug, and improve Pathminder.
• To contact you about your profile (for example, deadline reminders) where you would reasonably expect it.

Depending on the activity, we rely on one of these lawful bases:

• Performance of a service you asked for: to deliver the guidance you signed up for.
• Consent: for the optional uses in sections 5 and 6, which are off unless you switch them on.
• Legitimate interests: to keep the service secure and to improve it, balanced against your rights.

If you opt in, we may share the profile details relevant to an introduction (such as your course level, intake, budget range, and contact email) with a verified education agency or service so they can help with your application.

• This is off by default. Nothing is shared unless you choose it.
• We only route introductions to partners we have verified (for example, against universities’ official authorised-agent lists).
• This may include our own Pathminder Concierge service, where, by invitation and with your agreement, we help prepare and submit your university applications on your behalf.
• You can withdraw this consent at any time; it won’t affect guidance you’ve already received.

If you opt in, we may include your data in aggregated, anonymised insights about study-abroad demand and trends (for example, “demand for nursing courses rose this year”).

• These insights are aggregated and anonymised: they describe groups, not individuals, and are not intended to identify you.
• We may share or license these anonymised insights with third parties such as universities, education providers, or researchers.
• This is off by default and you can withdraw consent at any time.

We use trusted service providers to run Pathminder. They act on our instructions:

• Supabase: database and authentication (stores your profile and account).
• Vercel: hosting.
• Cloudflare Turnstile: anti-bot verification.
• Our email provider: sending account and reminder emails.

We do not sell your personal data.

Some of these providers store or process data outside your country. Where that happens, we rely on appropriate safeguards (such as recognised standard contractual protections) to keep your data protected to a comparable standard.

We keep your profile for as long as your account is active, or as needed to provide the service. If you delete your account, we delete your personal profile data. Anonymised insights that no longer identify you may be retained.

• Row-Level Security so each account can only access its own data.
• Passwords are hashed by our authentication provider, we never store them in plain text.
• Anti-bot verification to protect sign-up and submission.
• Encryption in transit (HTTPS).

You can, at any time:

• See the data we hold about you and correct it (edit your profile any time).
• Delete your account and personal data (self-service in your account, or by emailing us).
• Withdraw any optional consent (sections 5 and 6).
• Ask for a copy of your data in a portable form.
• Complain to a data-protection authority, in Nigeria, the Nigeria Data Protection Commission (NDPC); in the UK, the Information Commissioner’s Office (ICO).

To exercise any of these, email privacy@pathminder.app.

You can explore Pathminder as a guest. If you complete the profile builder as a guest, we capture those answers to understand demand and improve the product. This guest data is stored securely and is not linked to an account until you create one.

Pathminder is intended for people aged 16 and over who are making study decisions. It is not directed at younger children.

If we make material changes, we’ll update the version and date at the top of this page, and, where appropriate, ask for fresh consent.

Questions, requests, or complaints: privacy@pathminder.app.