Legal
Privacy Policy
ChopChaw connects people with surplus food from local businesses in Ghana. This policy explains what personal information we collect when you use the ChopChaw app and this website, why we collect it, who it is shared with, and the choices you have.
Who we are
ChopChaw, Accra, Ghana ("ChopChaw", "we", "us") decides how and why your personal information is used, which makes us the data controller under Ghana's Data Protection Act, 2012 (Act 843). You can reach us at support@chopchaw.app.
What we collect
It depends on how you use ChopChaw.
If you buy Surprise Bags
- Account details: username, email address, and (optionally) phone number. If you sign in with Google, Apple or Facebook we receive your name, email address and that service's account ID. We store your password only in scrambled (hashed) form.
- Orders: the bags you reserve and pay for, pickup status, cancellations and refunds, and reviews you write.
- Payments: payments are processed by Paystack. Paystack collects your card or mobile-money details; we never see or store your full card number or mobile-money PIN. We keep the payment reference, amount, status and the payer details Paystack sends back.
- Location: if you allow it, the app uses your device's location to show where you are on the map. This stays on your device — we do not send it to our servers or store it.
- Notifications: a record of messages we send you (in the app, by SMS or by email), such as verification codes and reservation updates.
If you run a partner business
- Your name, email, phone number and role, and the same sign-in details as above.
- Business and store details: name, address, GPS location and opening hours.
- Payout details: mobile-money or bank account number and account name, used only to pay you.
- Your offers and the orders collected from them. Business owners may add staff logins; we store those staff members' name and contact details.
If you are a ChopChaw field agent
- Your sign-in details and mobile-money payout details.
- For each shop you submit: the shop's details, your device's location at the time (to confirm you were there), a storefront photo, and the checklist you completed. Photos are private and visible only to authorised ChopChaw staff.
- Your submissions and earnings.
If you fill in the "Partner with us" form on this website
Business name, your name, email, phone number, GhanaPost GPS or map location, and any notes you write. We use it to contact you about joining ChopChaw.
Collected automatically
- Your IP address and basic request information when you use the app or website. We use this to keep the service secure (for example, limiting repeated sign-in attempts) and to fix problems.
- For ChopChaw staff accounts, an audit trail records what each staff member did and from which IP address.
We do not use advertising trackers or analytics cookies in the app or on this website, and we do not sell your personal information.
Why we use it
- To create and secure your account, and verify your email address and phone number.
- To let you reserve, pay for, collect, cancel and review Surprise Bags, and to run refunds and payouts.
- To pay partner businesses and field agents.
- To send you service messages: verification codes, reservation and payment updates, account notices.
- To onboard partner businesses and verify field-agent visits.
- To prevent fraud and abuse, enforce our Terms of Use, and meet our legal and accounting obligations.
- To answer your support requests.
Who we share it with
| Who | What they receive | Why |
|---|---|---|
| Partner businesses | Your name (or username if you haven't set one), the bag you reserved, and your pickup code or QR when you collect. Not your email or phone number. | So they can hand over your order. |
| Paystack | Your email, the amount and your payment details. | To take payment and process refunds. |
| Hubtel | Your phone number and the text of the SMS. | To send verification codes and alerts by SMS. |
| Email delivery provider | Your email address and the message. | To send verification, reset and notification emails. |
| Hosting and database providers | All data stored by the service, in encrypted storage. | To run ChopChaw. They may only act on our instructions. |
| OpenStreetMap | Your IP address and the map area you view, when map tiles load. | To draw the map. |
| Google, Apple, Facebook | Only if you choose to sign in with them. | To sign you in. |
| Google Fonts | Your IP address when you open this website. | To load the website's fonts. The app bundles its fonts and does not contact Google for them. |
If you tap "Open in Google Maps" or a WhatsApp support link, you leave ChopChaw and that service's own privacy policy applies.
We may also disclose information if the law requires it, to respond to a valid request from a public authority, or to protect the safety and rights of our users and ourselves. If ChopChaw is ever sold or merged, your information may transfer to the new owner, who must honour this policy.
Some of our providers store data outside Ghana. Where that happens we rely on those providers' contractual and technical safeguards to protect it to the standard this policy describes.
How long we keep it
- Your account details stay until you delete your account.
- Verification codes, reset links and notifications are short-lived and removed when no longer needed, and always on account deletion.
- Orders, reservations and payment records are kept, with your personal details removed after you delete your account, for as long as we need them for refunds, payouts, accounting and legal obligations.
- Reviews you wrote stay on the store's page, shown as "Deleted user" after you delete your account.
- Partner-form enquiries are kept while we are in contact with you and for a reasonable time after.
- Staff audit records are kept permanently by design, so the trail can't be altered.
Deleting your data
You can delete your account in the app (Profile → Delete account) or by email. Seehow to delete your account for exactly what is removed and what is kept. We can't delete an account while a reservation, refund or payout is still open — the app tells you what's pending.
Your rights
Under the Data Protection Act, 2012 (Act 843) you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong or out of date (most details can be edited in Profile → Security);
- delete your information, as described above;
- stop using your information for a purpose you object to.
Email support@chopchaw.app and we'll reply within a reasonable time, usually within 30 days. If you're not happy with our answer you can complain to Ghana's Data Protection Commission.
How we protect it
Traffic between the app, the website and our servers is encrypted. Passwords are hashed. Staff access is limited by role, and consequential staff actions are logged. Repeated sign-in and code attempts are rate-limited. No system is perfectly secure, so please use a strong, unique password and tell us right away if you think your account has been compromised.
Children
ChopChaw is not for anyone under 18, and we don't knowingly collect personal information from them. If you believe a child has given us information, email us and we'll delete it.
Changes to this policy
If we change this policy in a way that matters, we'll update the date at the top and tell you in the app or by email before the change takes effect.
Contact
ChopChaw, Accra, Ghana · support@chopchaw.app