Privacy Policy

1. Who we are

Ontym is operated by ModStack Limited Company, a company incorporated in Ghana (ORC number: CS131070626). We are registered as a Data Controller with Ghana's Data Protection Commission (Registration no: [DPC registration number]).

For any question about this policy or your data, contact us at privacy@ontym.co or by post at [registered physical address].

2. What we collect

From providers: name, phone number, email; Ghana Card number and photographs (front and back); a selfie for identity verification; bank account or mobile money number for receiving payments; and business address.

From customers: name, phone number, email; date of birth (optional — used only for birthday greetings, you can book without it); booking history; and any notes you choose to add to a booking.

From your provider: if you were already a client of a provider before they joined Ontym, that provider may share your name and phone number with us so they can keep reaching you through Ontym — for example to send appointment reminders or greetings. The provider confirms to us that they collected your details lawfully and may contact you. You can opt out of these messages at any time (see section 9).

From everyone automatically: IP address and basic app usage data.

3. Why we collect it and our legal basis

Under Act 843 we must have a lawful basis for each use of your data:

• Ghana Card and selfie — to confirm providers are who they say they are and keep customers safe. Legal basis: our legitimate interest in verifying providers to keep customers safe and prevent fraud.
• Bank / mobile money details — to pay providers after completed bookings. Legal basis: performance of a contract.
• Phone and email — for booking confirmations and account notifications. Legal basis: performance of a contract.
• Date of birth, greetings and offers — only to send birthday and holiday greetings, and occasional (never guaranteed) offers, on behalf of your provider; you can opt out at any time. Legal basis: your consent.
• Appointment reminders — where a provider chooses to remind you that a visit is due (for example a dental check-up or a regular grooming appointment), we send that reminder on their behalf. You can opt out at any time. Legal basis: your consent.
• Booking notes — passed to your provider so they can prepare for your appointment; only that provider can see them. Legal basis: performance of a contract.
• Usage data — to improve the app and fix problems. Legal basis: our legitimate interest in running the service.

4. Special personal data

Verifying a provider's Ghana Card and selfie involves biometric data (a face-match), which is special personal data under Act 843. We process it only with the provider's explicit consent, only to confirm identity, and with additional safeguards. Customers are never asked for biometric data.

5. Who we share it with

We do not sell your personal data. We share it only with the service providers we rely on to run Ontym:

6. International transfers

Our database and login systems are hosted by Supabase and Firebase (Google) on servers outside Ghana. Where your data is transferred abroad, it is done under agreements that require these companies to protect it to the standard required by Act 843.

7. How long we keep it

• Ghana Card and selfie: 7 years after your account is permanently closed.
• Booking history: 3 years.
• Greetings, offers and reminders: until you opt out, then stopped immediately.
• Contact details a provider imported: kept while you are that provider's client and you have not opted out; removed on request.

8. How we keep it secure

We protect your data with encryption in transit and at rest, access controls that limit who can see it, and regular review of our systems. No online service can promise perfect security, but if a breach ever affects your data we will act on it and notify the Data Protection Commission and affected users as the law requires.

9. Your rights

Under Act 843 you have the right to:

• see what data we hold about you;
• correct data that is wrong or out of date;
• delete your account and data;
• object to how we use your data;
• withdraw consent (for example, stop greetings, offers, or appointment reminders) at any time.

To exercise any of these, email privacy@ontym.co. You also have the right to complain to Ghana's Data Protection Commission if you believe we have handled your data unlawfully.

10. Cookies and app tracking

Our website and app use a small amount of usage data to keep you signed in, remember your preferences, and understand how the service is used so we can improve it. You can limit this through your browser or device settings.

11. Children

Ontym is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has given us their data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date above and, for significant changes, notify you by email or in-app message.

13. Contact

Privacy questions: privacy@ontym.co. To complain about how your data has been handled, you may also contact Ghana's Data Protection Commission.