Legal
Privacy Policy
Last updated: 6 November 2026
Draft. This document is a working draft and has not yet been reviewed by a Ghanaian lawyer. Items shown like [this] are still to be filled in.
This policy explains what personal data Slayd collects, why, who we share it with, how long we keep it, and the rights you have.
1. Who we are
Slayd is a product of Alumspire Ltd, a company in Ghana (“Slayd”, “we”, “us”). We are the data controller for the personal data described here.
- Registered address: [REGISTERED ADDRESS OF ALUMSPIRE LTD]
- Company registration number: [REGISTRATION NUMBER]
- Data Protection Commission registration number: [DATA PROTECTION COMMISSION REGISTRATION NUMBER]
- Contact for privacy questions and requests: support@slayd.app
Slayd is a marketplace that connects clients with hairdressers, barbers and braiders (“shops”). It is for people aged [MINIMUM AGE, e.g. 18, or 16 with a parent’s consent] and over.
2. What we collect
Everyone with an account
- Account details: your full name, email address, phone number (optional for clients), profile photo, your role (client, shop owner, staff or admin), and when you agreed to our data terms.
- Your activity: posts you like, save or comment on, shops and people you follow, shops and products on your wishlist, products you view, reviews you write (ratings and comments), and messages you send in the app.
- Reports: if you report a post or a user, what you tell us.
- Notifications: your notification settings, a push token for your phone, and the notifications we send you.
Clients, when you book or buy
- Bookings: the shop, the style, the date and time, whether it is in-shop or home service, and your address if you ask for a home service. Check-in and attendance records for your visits.
- Orders: the products you buy, quantity, and whether you pick up or use the shop’s delivery partner.
- Payments: the amount, the payment reference, the status and the date. Payments and deposits are taken by Paystack. We do not receive or store your card number or mobile money PIN.
- Mobile money number when a shop collects a payment: if a shop asks you to pay by mobile money, the shop enters your mobile money number and an amount. We store that number with the amount, network, date, payment reference and outcome. You do not need a Slayd account for this. Only the shop that sent the request and Slayd administrators can see the full number; elsewhere it is partly hidden.
- Shop notes: a shop may keep its own notes and visit history about its clients.
Shop owners and staff
- Shop details: shop name, description, type, phone number, address, map location (latitude and longitude), opening hours, services and prices, photos, products, and posts (photos and videos).
- Verification: to be shown to clients, a shop sends us a phone number we can call, one to three photos of the shop, the shop’s location, and (optional) a photo of its business registration certificate. We do not ask for a Ghana Card, passport or driving licence, and we do not collect ID numbers. The photos are reduced in size and stripped of location data on your phone before upload.
- Earlier ID checks: before we changed the method, some shops sent a photo of a Ghana ID. [STATE WHETHER THIS OLD DATA HAS BEEN DELETED AND ON WHAT DATE]
- Payout details: your mobile money number or bank account, used to pay you. Bank and mobile money details are registered through Paystack.
- Business records: bookings, earnings, payouts, attendance, walk-ins, subscriptions and the performance of your posts and products.
Photos, videos, camera and location
- Photos and videos you upload (posts, styles, products, shop photos) are stored by us and are visible to others according to where you put them. Posts and style photos are public.
- Camera: used to take photos for your shop and to scan a shop’s QR code when you check in. Scanning a code does not save a picture. The app does not use your microphone.
- Location: the app asks for your phone’s location (while you are using it) to set a shop’s map pin and to sort shops by who is nearby. A shop’s pin is saved with the shop. We do not track your location in the background.
- Device and technical data: basic technical information needed to run the service, such as your push token and device type. [CONFIRM WITH YOUR DEVELOPER: ANY OTHER LOGS, IP ADDRESSES OR ANALYTICS KEPT]
3. Why we use it
| Purpose | Examples |
|---|---|
| Provide the service | Create and run accounts, show shops and styles, make and manage bookings and orders, let clients and shops message each other, check clients in. |
| Take and pay out money | Process deposits and payments, refunds, and payouts to shops; keep payment records; send receipts. |
| Keep people safe and the service fair | Verify shops, review reports, remove content that breaks our rules, prevent fraud and abuse (for example repeated payment requests to one number), settle disputes. |
| Communicate with you | Booking reminders, notifications, one-time codes and text receipts, and replies to your emails. |
| Improve Slayd | Show shops how their posts and products perform; write short summaries of reviews (see section 5). |
| Meet legal duties | Accounting, tax and responding to lawful requests. |
Our legal bases include your consent, performing our contract with you, our legitimate interests in running a safe service, and legal obligations. [LAWYER TO CONFIRM LAWFUL BASES UNDER ACT 843]
4. Who sees your data
- Other users: your name, photo, posts, reviews and comments are visible to other users. A shop sees the details of the clients who book with it. Clients see a shop’s public details.
- Slayd administrators can see what they need to run the service, such as verification files, reports, payments and payouts.
- Service providers (section 5), who process data for us.
- Authorities, where the law requires it.
We do not sell your personal data.
5. Service providers who process data for us
| Provider | What for | Data involved |
|---|---|---|
| Supabase | Our database, sign-in, file storage and back-end functions | Everything in section 2. Data region: [SUPABASE REGION, e.g. Ireland / UK / US] |
| Cloudflare | Hosting this website and Slayd share pages | Pages you visit and technical request data (such as IP address). Share pages read public shop, style, product and post details. |
| Paystack | Card and mobile money payments, deposits, refunds, payouts | Payment details you give Paystack, amounts, references, mobile money numbers, payout accounts. Paystack’s own privacy policy applies. |
| Google Firebase Cloud Messaging and Expo push notification service | Delivering push notifications to your phone | Push token, notification text. |
| mNotify | Sending text messages (one-time codes and payment receipts) | Phone number, message text. |
| Anthropic (Claude API) | Writing a short summary of a shop’s reviews | The shop’s name and its review ratings and comments. Reviewer names are not sent. Anthropic’s terms apply. |
| OpenStreetMap (Nominatim) | Searching for a place by name when a shop owner sets its map pin | The place name typed in the search box, and the network address of the phone making the search. |
Some of these providers are outside Ghana, so your data may be transferred abroad. We use providers that protect data, and we only send what each needs. [LAWYER TO CONFIRM CROSS-BORDER TRANSFER WORDING UNDER ACT 843]
6. How long we keep data
- Account and profile data: while your account is open. [RETENTION AFTER ACCOUNT CLOSURE]
- Payment, payout and booking records: for as long as we need them to meet accounting and legal duties and to handle disputes. [NUMBER OF YEARS]
- Shop verification photos: in private storage, visible only to the owner and Slayd’s verification team. [HOW LONG KEPT, e.g. N MONTHS AFTER THE SHOP CLOSES]
- Deleted photos: when a photo, style, shop or account is deleted, its files are queued and removed from storage.
- Messages, reviews and posts: until you or we remove them or your account is deleted. [CONFIRM]
- Reports: [RETENTION]
7. Your rights
Under Ghana’s Data Protection Act, 2012 (Act 843), you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct data that is wrong or incomplete;
- delete your data, where we no longer need it or the law does not require us to keep it;
- stop or limit how we use your data, including withdrawing consent you gave;
- object to direct marketing (we do not currently send marketing messages).
Email support@slayd.app from the address or phone number on your account so we can check it is you. [RESPONSE TIME YOU COMMIT TO, e.g. 30 days] You may also complain to the Data Protection Commission of Ghana: [COMMISSION CONTACT DETAILS].
8. Deleting your data and account
See Delete your account for how to ask, what we delete, and what we must keep.
9. Security
We use access controls so that people can only see the data they are meant to, private storage for verification files, and secure payment partners. No system is perfectly secure. Tell us at once if you think your account has been misused.
10. Children
Slayd is not for children under [MINIMUM AGE]. If you think a child has made an account, email support@slayd.app and we will deal with it.
11. Changes
We may update this policy. We will change the date at the top and, for important changes, tell you in the app or by email.
12. Contact
Alumspire Ltd, [REGISTERED ADDRESS]. Email support@slayd.app. General questions: hello@slayd.app.