Privacy policy

Data controller

Keykad (the operating company, registered in Ghana — full legal name, registration number and registered address are published on the support page before launch) processes your personal data as a data controller under Ghana’s Data Protection Act, 2012 (Act 843), and is registered with the Data Protection Commission. This policy explains what we collect, why, and the choices you have.

What we collect

• Account: name, mobile number, optional email, city, and an optional profile photo.
• Bookings and check-ins: the sessions you book, cancel and attend, and the check-in method used.
• Payments: order references and the last four digits and expiry of a saved card. Card numbers never reach our servers; Paystack processes them.
• Device: a push notification token when you allow notifications, and your approximate location when you allow it for venue search.
• Usage: in-app events such as searches and bookings, used to run and improve the service. We do not use third-party trackers.

Why we use it (purpose limitation)

We use your data only to run the membership: to take bookings, check you in, pay venues per visit, send booking reminders and receipts, prevent fraud, and provide support. Marketing messages are sent only with your consent, which you can withdraw in settings.

What venues see

A venue sees the name, booking reference and the last four digits of the phone number of members booked into its sessions, so its staff can check you in. Venues never see your full number or email.

Retention

Booking, payment and ledger records are kept for 6 years to meet accounting obligations. Other account data is deleted or anonymised within 30 days of a deletion request.

Your rights

You may access, correct or delete your personal data, object to processing, and withdraw consent at any time. Deleting your account in the app removes your profile, cancels upcoming bookings and invalidates your sessions; unused credits are lost. Complaints can also be made to the Data Protection Commission of Ghana.

Where your data lives

Our servers and daily encrypted backups are hosted with a cloud provider outside Ghana; payment data is processed by Paystack. Transfers are limited to what running the service needs (Act 843 s.47).

Security

Data is stored on servers with encrypted connections, access limited to staff who need it, and daily backups. Card details are held by Paystack under PCI DSS.

Contact

Use the support page or the app to reach us about your data.