Legal

Privacy Policy

Akwaaba App Limited operates the Akwaaba platform. This policy explains how we collect, use, and protect your personal information — including your rights under Ghana's Data Protection Act.

Last updated: August 7, 2026

The short version

  • We collect only what we need to run the platform and improve your experience.
  • We never sell your personal data.
  • We use IP geolocation solely to comply with Bank of Ghana currency rules — not to profile you.
  • Pulse (the live map) and Circles (group spaces) only see your location or profile info if you choose to turn them on.
  • Ghana users have rights under the Data Protection Act 2012 (Act 843).
  • You can delete your account and data at any time.
01

What We Collect

We collect what you give us directly, plus some automatic data when you use the app.

Information you provide

  • Name, email address, and phone number
  • Billing and payment information (processed securely via Paystack — we never store full card details)
  • Travel preferences, itinerary details, and booking history, including Vetted Stays reservations
  • Profile information and photos you choose to upload
  • Circle messages and content you post, if you join or create a Circle
  • Communications you send to us (support requests, feedback)

Automatically collected

  • Device information (device type, operating system, browser)
  • IP address and approximate geographic location — used to determine your currency (GHS for Ghana users, per Bank of Ghana Notice BG/GOV/SEC/2022/04)
  • Precise device location — only if you turn on Pulse or share location in a Circle; see Section 03
  • Usage data (pages visited, features used, time spent)
  • Referral source and affiliate tracking data
02

How We Use It

We use your data to run the platform, process bookings, and improve your experience. Not to sell to advertisers.
  • Provide, maintain, and improve the Service
  • Process bookings, payments, and refunds, including Vetted Stays reservations
  • Generate personalized travel itineraries using AI
  • Power Pulse's live map and Circles' group matching, if you opt in
  • Send booking confirmations, updates, and customer support communications
  • Send promotional emails (with your consent — you can unsubscribe at any time)
  • Analyze usage patterns to improve user experience
  • Detect and prevent fraud or security incidents
  • Comply with legal obligations including Ghana's Data Protection Act (Act 843) and Bank of Ghana directives
03

Location Data & Pulse

Approximate location (IP-based) is used for currency compliance. Precise location is only collected if you turn on Pulse, and only shared with others if you choose to.

Akwaaba uses two different kinds of location data, and they are not the same thing:

Approximate (IP-based) location

Collected automatically for every visitor, solely to determine your currency and comply with Bank of Ghana Notice BG/GOV/SEC/2022/04. We do not use this to build a location history or profile of you.

Precise device location (Pulse)

Pulse is an optional feature that shows a live map of nearby activity and, if you enable location sharing, approximate markers for other opted-in users nearby. We only collect your precise device location while Pulse is turned on in your device settings and the app is in use. You can turn Pulse off at any time in the app; when it is off, we stop collecting precise location and any location marker showing your position on the map is removed. We do not sell precise location data or share it with advertisers.

04

Circles

Circles are small, temporary group spaces. Your first name and avatar are visible to other members; we don't publish Circle content outside the group.

If you join or create a Circle, other members of that same Circle can see your first name, avatar, and any messages or content you post inside it. Circles are scoped to a location or trip, are capped in size, and expire automatically — we do not keep Circle membership or content visible to other users after a Circle expires. You can leave a Circle at any time. We may retain Circle content for a limited period after expiry for safety, moderation, and abuse-investigation purposes, consistent with Section 08 of our Data Retention practices.

05

Cookies & Tracking

We use essential cookies and cache your location for 24 hours to avoid repeat API calls.

We use cookies and similar technologies to enhance your experience, remember preferences, track referral codes, and analyze site traffic. Your IP-based country is cached for 24 hours in your browser's local storage (akw_geo_cache) solely to serve compliant currency pricing without repeated geolocation calls.

You can control cookie preferences through your browser settings. Essential cookies required for site functionality cannot be disabled.

06

Third-Party Services

We share data only with vendors who need it to run the platform — Paystack, Supabase, Resend, Vercel.
P

Paystack

Payment processing. Handles your payment information securely in accordance with PCI DSS standards. We do not store your full card details.

S

Supabase

Database and authentication infrastructure. Your account data is stored with encryption at rest.

R

Resend

Email delivery for transactional and marketing communications.

V

Vercel

Website hosting and edge network. Processes request headers including IP address.

i

ipapi.co

IP geolocation used exclusively to determine your country for currency display compliance. No personal profile is created or stored with them.

G

Google Maps

Powers the Pulse live map and place search. Receives location coordinates only while Pulse is active on your device.

07

Data Sharing

We never sell your data. We share it only to fulfill your bookings, run opt-in features, or when legally required.
  • With hosts and experience providers to fulfill your bookings (name, contact details, booking info only)
  • With other members of a Circle you join, limited to your first name, avatar, and Circle content (see Section 04)
  • With nearby Pulse users, limited to an approximate map marker, only while Pulse is turned on (see Section 03)
  • With service providers as described in Section 06
  • To comply with legal obligations, court orders, or government requests (including Ghana DPC inquiries)
  • To protect the rights, safety, and property of Akwaaba and its users
  • In connection with a merger, acquisition, or sale of assets (you will be notified in advance)
08

Data Retention

We keep your data as long as your account is active. Booking records are kept 3 years for legal compliance.

We retain your personal information for as long as your account is active or as needed to provide services. Booking records, including Vetted Stays reservations, are retained for a minimum of 3 years for legal and accounting purposes under Ghana Revenue Authority requirements. Precise Pulse location is not retained once you turn Pulse off — we keep only aggregated, non-identifying activity data to improve the feature. Circle content is generally deleted when a Circle expires, subject to a limited safety/moderation retention window. You may request deletion of your account and data at any time by contacting support@akwaaba.app.

09

Security

We use TLS encryption, secure auth, and regular reviews. No system is 100% secure.

We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest, secure JWT-based authentication with short token lifetimes, and regular security reviews aligned with the Cyber Security Authority of Ghana (Act 1038). However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. See our Security page for more detail, including how to report a vulnerability.

10

Your Rights

Access, correct, export, or delete your data. Opt out of marketing anytime.

All users

  • Access, correct, or delete your personal information
  • Turn Pulse location sharing off, or leave any Circle, at any time
  • Opt out of marketing communications (unsubscribe link in every email)
  • Request a copy of your data in a portable format
  • Withdraw consent where processing is based on consent
  • Delete your account entirely via Settings → Account → Delete Account

GDPR rights (EU/EEA residents)

You have the right to lodge a complaint with a supervisory authority, restrict or object to processing, and data portability under the General Data Protection Regulation.

CCPA rights (California residents)

You have the right to know what data we collect, request deletion, and opt out of sale (we do not sell personal data), without discrimination for exercising these rights.

11

Ghana Data Protection Act (Act 843)

Akwaaba is registered with the Ghana Data Protection Commission. Ghana users have specific rights under Act 843.

DPC Registration

Akwaaba App Limited is registered as a Data Controller with the Ghana Data Protection Commission (dataprotection.org.gh) in compliance with the Data Protection Act 2012 (Act 843).

Under Act 843, Ghana-based data subjects have the following rights:

  • Right to be informed about the collection and use of your data
  • Right of access — you may request a copy of personal data we hold about you
  • Right to correction of inaccurate or incomplete data
  • Right to erasure — request deletion of your personal data
  • Right to object to processing of your personal data
  • Right to complain to the Data Protection Commission at dataprotection.org.gh

To exercise any of these rights, contact our Data Protection Officer at privacy@akwaaba.app. We will respond within 21 days as required by Act 843.

12

Children's Privacy

You must be at least 13 to use Akwaaba. Bookings and payments require legal capacity to contract.

Our Service requires users to be at least 13 years old, and we do not knowingly collect personal information from anyone younger. Bookings, payments, and other binding transactions additionally require the user to be of legal age to contract in their jurisdiction, or to have a parent or guardian complete the transaction on their behalf — see our Terms of Service. If you believe we have collected information from a child under 13 in error, please contact us immediately at privacy@akwaaba.app and we will delete it promptly.

13

International Data Transfers

Your data may be processed in the US and Ghana. We ensure appropriate safeguards are in place.

Your information may be transferred to and processed in countries other than your country of residence, including the United States (Supabase, Vercel, Resend infrastructure) and Ghana (Paystack processing, and where Akwaaba App Limited is based). We ensure appropriate contractual safeguards are in place for all international transfers, consistent with Ghana's Data Protection Act and applicable international standards.

14

Changes to This Policy

We'll notify you of material changes via email. Continued use = acceptance.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website, updating the "Last updated" date, and sending an email notification for significant changes. Continued use of the Service after changes constitutes acceptance.

15

Contact & Data Protection Officer

Questions about privacy? Email our DPO directly.

For privacy questions, data subject requests, or DPC-related matters:

🔒
🏢Akwaaba App Limited — registered in Ghana
🇬🇭C470/26, Abotsi Street, East Legon, Accra, Ghana
🇬🇭Registered Data Controller — Ghana Data Protection Commission (Act 843)
⚖️To file a complaint with the DPC: dataprotection.org.gh