Last Updated: March 28, 2025
uNepal Australia Pvt Ltd ("Company," "we," "us," "our"), a private limited company incorporated under the Corporations Act 2001 (Cth) with its principal office at Canberra, Australian Capital Territory, Australia, is committed to safeguarding your privacy. This Privacy Policy ("Policy") outlines how we collect, use, disclose, store, and protect your personal information when you use the uNepal mobile application ("App"), a social networking platform designed primarily for Nepalese individuals residing in Australia. By downloading, installing, accessing, or using the App, you consent to the data practices described herein, in compliance with the Privacy Act 1988 (Cth) and applicable Australian Privacy Principles (APPs). If you do not agree with this Policy, you must immediately cease using the App.
1.1. Purpose: This Policy governs the handling of personal information collected through your use of the App, including all features such as profiles, posts, Circles, Pages, messaging, ratings, and notifications.
1.2. Definition of Personal Information: Under the Privacy Act 1988 (Cth), "personal information" means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether true or not, and whether recorded in a material form or not. This includes data such as your name, email address, and profile details.
1.3. Ancillary Policies: This Policy is incorporated into our Terms and Conditions, Community Guidelines, and Rewards Policy, accessible within the App or by request at unitednepalaustralia@gmail.com.
1.4. Updates: We may revise this Policy at our discretion. Material changes will be notified via in-app alerts, email to your registered address, or posting within the App. Your continued use after such notice constitutes acceptance of the revised Policy.
We collect various types of information to provide and enhance the App’s services. This includes:
3.1. Direct Collection: Provided by you during account registration, profile setup, content creation, or interactions with support (e.g., emails to unitednepalaustralia@gmail.com).
3.2. Automated Collection: Gathered via the App’s integration with Firebase services and device sensors during normal operation. Examples include logging your IP address upon login or tracking feature usage via Firebase Analytics.
3.3. Third-Party Sources: Received from Firebase (Google LLC) as part of authentication, messaging, or analytics processes. Potentially from other users (e.g., if they tag you in a post or message you), subject to your privacy settings.
3.4. Consent: By using the App, you consent to the collection methods described herein. Where required by the Privacy Act 1988 (Cth) (e.g., sensitive information), we will seek your express consent.
We use your information for the following purposes, consistent with APP 6 (Use or Disclosure of Personal Information):
We may disclose your information under the following circumstances, per APP 6:
In the event of a merger, acquisition, restructuring, or sale of uNepal Australia Pvt Ltd, your information may be transferred to a successor entity, with notice provided via email or in-app notification.
We may share anonymized or aggregated data (e.g., usage statistics) with third parties for research, marketing, or operational purposes, ensuring it cannot identify you.
We will not disclose your personal information beyond these purposes without your express consent, except where permitted by law.
6.1. Current Practices: As a mobile app, we do not use traditional browser cookies. However, Firebase Analytics collects equivalent tracking data, including device identifiers (e.g., UDID, advertising ID), usage events (e.g., feature clicks, session duration), and crash logs and performance metrics. This data serves purposes akin to cookies (e.g., personalization, analytics) but is native to mobile environments.
6.2. Purpose: To monitor App performance, diagnose errors, and optimize user experience. To deliver targeted notifications via Firebase Cloud Messaging.
6.3. Future Use: If we introduce a web version or cookies, we will comply with the Australian Privacy Act 1988 and Spam Act 2003 (Cth), providing notice and consent options (e.g., a cookie banner). Any such change will be detailed in an updated Policy.
6.4. Control: You may limit tracking by disabling Firebase Analytics in App settings (where available) or device privacy controls (e.g., resetting advertising ID). Opting out of push notifications via device settings. Note: Disabling tracking may reduce functionality (e.g., personalized content).
6.5. Transparency: We do not currently support "Do Not Track" signals, as they are not applicable to mobile apps, but we will evaluate this for future web integrations.
7.1. Storage Location: Your data is stored in Firebase’s cloud infrastructure, primarily hosted in data centers in the United States, with potential replication to other regions per Google’s operational policies. Local caching may occur on your device for offline functionality, subject to device security.
7.2. Security Measures: We implement industry-standard safeguards, including encryption in transit (e.g., HTTPS/TLS) and at rest (where supported by Firebase), Firebase Authentication and App Check to verify identity and prevent unauthorized access, and access controls restricting data to authorized personnel only. Despite these measures, no system is entirely secure, and we cannot guarantee absolute protection against breaches, hacking, or data loss.
7.3. Retention: Personal information and User Content are retained as long as your account remains active or is necessary to provide services. Upon account deletion, data is removed from active systems within 30 days, though backups may persist for up to 90 days for recovery or compliance purposes. We may retain data longer if required by Australian law (e.g., tax records under the Taxation Administration Act 1953).
7.4. Risk Acknowledgment: You accept inherent risks in data transmission over the internet and storage in cloud systems, releasing us from liability for breaches not caused by our negligence.
7.5. Incident Response: In the event of a data breach involving personal information, we will assess the breach per the Notifiable Data Breaches scheme under the Privacy Act 1988. Notify you and the Office of the Australian Information Commissioner (OAIC) if there is a risk of serious harm, as required by law.
Under the Privacy Act 1988 (Cth) and APPs, you have certain rights regarding your personal information:
9.1. Age Restriction: The App is not intended for users under 13 years of age, per our Terms and Conditions.
9.2. Parental Consent: Users aged 13-17 require verifiable parental consent, submitted to unitednepalaustralia@gmail.com, to comply with the Privacy Act 1988.
9.3. Protection: We do not knowingly collect personal information from children under 13 without consent. If we discover such data, we will delete it promptly and terminate the account, notifying the parent/guardian where possible.
9.4. Reporting: Contact us if you suspect unauthorized use by a minor.
10.1. Transfer Locations: Your data is transferred to and processed in the United States via Firebase servers, and potentially other jurisdictions depending on Google’s infrastructure. Local device storage may occur within Australia or your country of residence.
10.2. Legal Framework: Transfers comply with APP 8 (Cross-Border Disclosure), ensuring reasonable steps are taken to protect your data (e.g., contractual safeguards with Google). You consent to this transfer as a condition of App use, acknowledging that overseas recipients may not be subject to identical privacy laws.
10.3. Risk: You accept that data stored outside Australia may be subject to foreign legal access (e.g., U.S. law enforcement), beyond our control.
11.1. Current Status: As of March 28, 2025, we do not collect payment or billing information, as the App is free.
11.2. Anticipated Collection: If payments or subscriptions are introduced (e.g., for premium features), we may collect credit/debit card details, billing address, and transaction history, and payment processor tokens (e.g., from Stripe). This data will be secured per the Payment Card Industry Data Security Standard (PCI-DSS) and the Australian Consumer Law.
11.3. Notice and Consent: We will update this Policy and obtain your express consent before collecting payment data, detailing its use and disclosure. Opting into paid features will be voluntary, with clear terms provided.
12.1. Obligation: Under the Notifiable Data Breaches scheme (Part IIIC of the Privacy Act 1988), we will notify you and the OAIC if a breach is likely to result in serious harm (e.g., identity theft, financial loss).
12.2. Process: We will assess breaches within 30 days of discovery. Notification will include the nature of the breach, affected data, and recommended actions (e.g., changing passwords). Contact will be via email or in-app alert unless impractical.
12.3. Mitigation: We will take reasonable steps to contain and remediate breaches, though we are not liable for harm not caused by our negligence.
13.1. Revision Process: We may update this Policy to reflect changes in law, technology, or our practices. Minor changes (e.g., clarifications) will be posted in the App without direct notice. Material changes (e.g., new data uses) will be communicated via email to your registered address and in-app notification at least 7 days before taking effect.
13.2. Acceptance: Continued use of the App after notification constitutes acceptance of the revised Policy. If you reject changes, you must delete your account and cease use.
13.3. Historical Versions: Previous versions are available upon request for comparison.
For privacy inquiries, requests, or complaints:
Email: unitednepalaustralia@gmail.com (include “Privacy Request” in the subject line for priority handling)
Address: uNepal Australia Pvt Ltd, Canberra, Australian Capital Territory, Australia
Response Time: We aim to respond within 30 days, per APP 1.5, though complex matters may require additional time.
External Oversight: If unresolved, contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or 1300 363 992.
15.1. Legal Compliance: This Policy adheres to the Privacy Act 1988 (Cth), APPs, Spam Act 2003 (Cth), and other relevant Australian laws.
15.2. Transparency: We strive for openness in our data practices, per APP 1, and welcome your feedback on improving this Policy.
15.3. Language: This Policy is provided in English, which is the authoritative version. Translations, if offered, are for convenience only.