1. What we collect
- Account details — name, phone number, and email if provided at sign-up.
- Transaction data — wallet top-ups, voucher purchases, AFA registration details (index numbers, phone numbers submitted for registration), and shop orders.
- Usage data — login timestamps, device/browser information, and basic security event logs (for example, failed login attempts) used to protect your account.
- Communications — messages you send us through the complaint form or WhatsApp, including anything you choose to attach or describe.
2. How we use it
- To process payments, deliver voucher PINs, and submit AFA registrations to MTN.
- To send SMS and email notifications you've opted into — result-ready alerts, voucher codes, and one-time passwords.
- To detect and prevent fraud, and to investigate failed or disputed transactions.
- To respond to support requests and complaints.
3. Who we share it with
We share the minimum data necessary with:
- Payment processors (such as Paystack) to complete mobile money and card transactions.
- SMS gateway providers to deliver checker PINs, OTPs, and notifications.
- MTN, where required to complete AFA registration on the phone number you provide.
We do not sell your personal data to third parties.
4. Data storage and security
Data is stored with Supabase, using row-level access controls so that account data is only reachable by the account holder or platform administrators. Product and service data needed to run the shop and checkers is public by design (for example, product listings); personal account data is not.
5. Your rights
Under the Data Protection Act, 2012 (Act 843) of Ghana, you have the right to:
- Request a copy of the personal data we hold about you.
- Ask us to correct inaccurate information (you can also update most account details yourself under Settings).
- Ask us to delete your account and associated personal data, subject to any records we're legally required to retain (for example, transaction records for tax or dispute purposes).
- Withdraw consent for optional communications, such as promotional messages, at any time from your notification settings.
6. Data retention
We retain transaction and registration records for as long as needed to resolve disputes, meet legal or tax obligations, and maintain accurate service history. Security logs are retained for a limited period for fraud-prevention purposes.
7. Children's data
Our services (such as checker PIN purchases) are frequently used on behalf of students who may be minors. In these cases, the account holder — typically a parent, guardian, or the student themselves if of legal age to contract — is responsible for the data submitted, and we treat submitted index numbers and results data as sensitive.
8. Changes to this policy
We may revise this policy as the platform evolves. Material changes will be reflected in the "Last updated" date above.