Privacy Policy

1. Who we are

Ontym is operated by ModStack Limited Company, a company incorporated in Ghana (ORC number: CS131070626).

For any question about this policy or your data, contact us at privacy@ontym.co.

2. What we collect

From providers: name, phone number, email, business details, branch addresses, services, staff information, photos, and payout details submitted to Paystack. Production verification is currently manual and does not collect Ghana Card images, Ghana Card numbers, or selfies.

From customers: name, phone number, email, booking and payment history, reviews, and any notes you choose to add to a booking. At signup, we use your complete date of birth once to confirm that you are at least 18. We retain an eligibility timestamp, not your birth year. If you opt in to birthday greetings, we also retain your birth month and day.

From your provider: a provider may add the name and phone number of an existing client so they can manage appointments and send service messages through Ontym. The provider is responsible for having permission to use those details. You can opt out of optional messages at any time.

Collected automatically or with device permission: IP address, device and push-notification identifiers, basic app usage and diagnostic data, and location when you choose to grant location permission.

3. Why we collect it and our legal basis

• Account, booking, and payment information to create and manage appointments and provider payouts. Legal basis: performance of a contract.
• Age eligibility to confirm that a customer opening an account is at least 18. The complete date is discarded after the check. Legal basis: performance of a contract.
• Phone and email for login codes, booking updates, receipts, and essential account messages. Legal basis: performance of a contract and our legitimate interest in securing the service.
• Optional greetings, offers, and reminders when you choose to receive them. Legal basis: your consent.
• Booking notes so the booked provider can prepare for your appointment. Legal basis: performance of a contract.
• Location to show relevant nearby services when you grant permission. Legal basis: your consent.
• Usage and diagnostic data to secure, maintain, and improve Ontym. Legal basis: our legitimate interest in running the service.

4. Identity verification data

Ontym's current production verification process reviews business profile information and does not collect identity documents or biometric data. Customers are not asked for biometric data. If a document or biometric verification mode is introduced, the app will explain what is collected and why before submission, and this policy will be updated before that mode is enabled.

5. Who we share it with

We do not sell your personal data. We share only the data needed by providers that help operate Ontym, including:

• Paystack, to process payments and provider payouts;
• Supabase, to provide authentication, database, and file hosting;
• Vynfy, to send login codes and service messages by SMS;
• Expo and the mobile platform provider, to deliver push notifications;
• the provider you book, to fulfil and manage your appointment.

6. International transfers

Some providers that host our database, process payments, send SMS, or deliver push notifications operate outside Ghana. Where personal data is transferred abroad, we use contractual and technical safeguards intended to protect it to the standard required by Act 843.

7. How long we keep it

• Booking and payment records are retained as needed to provide the service, resolve disputes, and meet financial and legal obligations; some transaction records may be retained for up to 6 years.
• When you delete your account, identifying profile data is anonymised and reviews you authored are deleted, except where the law requires a record to be retained.
• Optional greetings, offers, and reminders stop when you opt out.

8. How we keep it secure

We use encryption in transit, access controls, and restricted database permissions. No online service can promise perfect security. If a breach affects your data, we will investigate and make notifications required by law.

9. Your rights

Under Act 843, you may ask to access, correct, or delete your personal data, object to certain processing, or withdraw consent. The mobile app also provides an in-app account-deletion control.

Email privacy@ontym.co to exercise a right. You may also complain to Ghana's Data Protection Commission.

10. Cookies and app storage

Ontym uses cookies or local app storage to keep you signed in, remember preferences, and operate the service. You can limit some storage and permissions through your browser or device settings, but essential functions may then be unavailable.

11. Children

You must be at least 18 to create an Ontym account. We do not knowingly allow children to create accounts or knowingly collect personal data directly from children. Contact us if you believe a child has created an account or provided personal data.

12. Changes to this policy

We may update this policy. We will change the Last updated date and provide additional notice when a significant change requires it.

13. Contact

Privacy questions: privacy@ontym.co. General support: support@ontym.co.