Privacy Policy

1. Who we are

The Platform is operated by [Legal Entity Name], a company registered in Ghana (registration no. [number]), built in collaboration with sktlive.com.

For the purposes of Ghana's Data Protection Act, 2012 (Act 843), we act as the data controller for the personal data described here. Metropolitan, Municipal and District Assemblies (“MMDAs”) that moderate address records for their jurisdictions act as independent or joint controllers for the moderation activities described in section 6.

2. Scope of this policy

This policy applies to personal data we process through the One Address Ghana mobile app (Android and iOS), this website, and the MMDA web console used by assembly officers. It does not apply to third-party services that have their own privacy policies (for example the app stores you download the app from), or to the internal data-handling practices of an MMDA beyond the Platform.

3. The personal data we collect

3.1 Information you give us

• Account details — your first and last name, email address and/or mobile phone number, and a password (which we store only as a secure cryptographic hash, never in plain text).
• Identity information — where you choose to link a national ID, we store a one-way hash of your Ghana Card number for matching purposes. We do not store your raw Ghana Card number, PIN, or biometric data, and we do not connect to the National Identification Authority.
• Address records — the GPS coordinates, street, house number, landmark, and description of properties you register, together with photos you upload of those properties.
• Occupancy information — your relationship to a property (owner or occupant) and invitations or confirmations you make about who lives at an address.
• Contributions — community proposals, reports/flags, and other content you submit.
• Communications — messages you send to support and your contact preferences.

3.2 Information collected automatically

• Precise location — when you capture a property pin, with your device-level permission.
• Device & usage data — app version, device type and operating system, language, and diagnostic/crash information used to keep the app stable.
• Verification metadata — the status of your records (unverified, pending review, verified, requires update, flagged), timestamps, and your trust score and contribution counts.

3.3 Information from others

MMDA officers generate verification decisions, audit entries and notifications attached to your records when they review them.

4. How we collect it

We collect data directly from you when you create an account, register or edit an address, upload photos, or contact us; automatically through your use of the app (with permissions you grant for location, camera and photos); and from MMDAs when they moderate your records.

5. How and why we use your data

We use personal data only for the purposes below, each with a lawful basis under Act 843:

We do not sell your personal data, and we do not use it for unrelated advertising.

6. The role of MMDAs

One Address Ghana is owned and moderated by local assemblies. Each address carries the identifier of the MMDA responsible for its area. Officers of that MMDA can view and act on records within their jurisdiction in order to verify them, approve community corrections, and resolve reports. Where an MMDA determines the purposes and means of this moderation, it acts as a controller in its own right, and its own obligations under Act 843 apply in addition to ours.

7. When we share data, and with whom

We share personal data only as follows:

• With MMDAs — record data is made available to the assembly that moderates the relevant area (section 6).
• With service providers — the vetted processors listed in section 8, who act on our instructions under contract.
• For public display — only the limited, non-sensitive fields of a verified address that you choose to share (for example via a QR code or share link). We never expose your account credentials, hashed identifiers, or private occupant lists.
• With authorities — where required by law, court order, or to protect rights, safety and property.
• In a business transfer — if the Platform is reorganised or acquired, subject to this policy.

8. Our service providers

We rely on a small number of trusted processors:

Each processor is bound by contractual data-protection obligations and may use your data only to provide its service to us.

9. International data transfers

Our primary database and authentication are hosted in the European Union (Ireland), which offers a strong, comparable standard of data protection. Some providers may process limited data in other countries. Where personal data leaves Ghana, we rely on appropriate safeguards (such as contractual protections and providers operating under recognised data-protection frameworks) consistent with Act 843.

10. How long we keep data

We keep personal data only for as long as necessary for the purposes in this policy:

• Account & address records — for as long as your account is active. When you delete your account, we delete or irreversibly anonymise your personal data within [e.g. 30 days], except records we must retain for legal, audit, or dispute purposes.
• Audit & activity logs — retained for [e.g. 24 months] to support accountability and security.
• Diagnostics — retained for a short period for stability and security.

Verified address records that have become part of an MMDA's public register may be retained by that assembly under its own retention rules.

11. How we protect your data

We apply technical and organisational measures appropriate to the sensitivity of the data, including:

• Row-Level Security enforced in the database, so each user and each MMDA can only access the data they are entitled to;
• Encryption in transit (HTTPS/TLS) and encryption at rest with our hosting provider;
• Hashing of passwords and of Ghana Card numbers, so the originals are never stored;
• Signed, time-limited uploads for photos and a strict separation of privileged keys from client apps;
• Audit logging of moderation actions and least-privilege access controls.

12. Your rights

Subject to Act 843, you have the right to:

• Access the personal data we hold about you;
• Correct data that is inaccurate or incomplete;
• Delete your account and personal data (“right to erasure”), subject to lawful retention;
• Object to or restrict certain processing, including analytics;
• Withdraw consent at any time, without affecting prior lawful processing;
• Data portability — receive a copy of data you provided in a usable format;
• Lodge a complaint with Ghana's Data Protection Commission.

13. How to exercise your rights

You can update much of your information directly in the app. For access, deletion, or other requests, contact us at support@oneaddressghana.com. We will verify your identity and respond within the timeframe required by law (and in any case without undue delay). There is no fee for a reasonable request. See our Data Protection page for the full request process.

14. Children's privacy

The Platform is intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

15. Cookies, analytics & diagnostics

The website uses only the cookies and local storage necessary to function. The app and website use PostHog for product analytics and Sentry for crash diagnostics. Analytics are consent-based — you can decline, and you can change your choice at any time. We configure these tools to minimise the data collected and do not use them to track you across unrelated services.

16. Changes to this policy

We may update this policy as the Platform evolves or the law changes. We will post the new version here with an updated effective date and, for material changes, notify you in the app or by email.

17. Contact us