Privacy Policy

Who we are

Shikaly is operated by BetaForge Labs ("Shikaly", "we", "us"), based in Accra, Ghana. We act as the data controller for account and usage data, and as a processor for the business records you store in Shikaly. We handle personal data in line with the Ghana Data Protection Act, 2012 (Act 843).

What we collect

• Account details: your name, email address, phone number, password (stored only as a secure hash) and role.
• Business details: business name, category, location, branches, tax settings and verification documents you upload.
• Business records you create: products, stock, sales, receipts, customers, staff and payment records.
• Device and usage data: device identifiers, IP address, browser or app version, sign-in times and security events.
• Payment data: payment references, amounts and status. Card and mobile money details are entered with Paystack and are never stored by us.
• Messages: the content and delivery status of emails and text messages we send for you.

Sign in with Google

Shikaly offers "Sign in with Google". We request only the basic profile scopes (openid, email and profile). From your Google Account we receive your name, email address, profile picture and Google account identifier.

We use this information only to create your Shikaly account, sign you in, show your name in the app and email you about your account. We do not request or access your Gmail, contacts, calendar, Drive or any other Google data, we do not sell it, we do not use it for advertising, and we do not let people read it unless you ask for support, we must investigate abuse, or the law requires it.

Shikaly's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can stop Shikaly accessing your Google data at any time at myaccount.google.com/permissions. To also have your Shikaly account and the Google-sourced data deleted, follow the steps under "Deleting your data" below.

How we use personal data

• To provide, secure and support Shikaly, including sign-in, verification codes and syncing between devices.
• To process subscription payments and customer payments through our payment partner.
• To send service messages: receipts, invoices, security alerts, stock and sales notifications and password resets.
• To check businesses and prevent fraud and abuse, and to meet legal and tax obligations.
• To improve reliability and performance. We do not sell personal data.

Who we share it with

We share data only with providers that help us run Shikaly, under agreements that limit how they use it:

• Paystack, to process payments and verify businesses.
• Our email and text message providers, to deliver messages you or the service send.
• Hosting and infrastructure providers that store and process data for us.
• Google, if you sign in with Google.
• Authorities, where the law requires it or to protect people and our service.

Where data is stored

Data may be processed on servers outside Ghana. When it is, we use providers that protect it to a standard consistent with Ghanaian law and our own commitments here.

How long we keep it

We keep account and business data while your account is open. After you close it we delete or anonymise personal data within a reasonable period, except records we must keep for tax, accounting, fraud prevention or legal reasons. Backups are overwritten on their normal cycle.

Deleting your data

You can delete your account and personal data at any time. Email compliance@shikaly.app from the address on your account with the subject "Delete my Shikaly account", or ask the owner of your business to remove you. We confirm your identity, delete or anonymise your personal data (including anything received from Google) within 30 days, and confirm when it is done, apart from records we must keep by law.

Security

We protect data with encryption in transit, hashed passwords, role-based access, optional multi-factor sign-in and passkeys, and an audit trail of sensitive actions. No system is perfectly secure, so please use a strong password and keep your devices locked. Report concerns to security@shikaly.app.

Your rights

Under Ghanaian law you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct data that is wrong or out of date;
• delete your data, or restrict how we use it, where the law allows;
• stop using your data for a purpose you did not agree to.

Your customers' data

If you store your own customers' details in Shikaly, you decide what to collect and why, and you are responsible for telling them and for having a lawful basis. We process that data only on your instructions to run the service.

Cookies and local storage

We use essential cookies and local storage to keep you signed in, remember preferences and let the app work offline. We do not use advertising cookies.

Children

Shikaly is for businesses and is not directed at children under 18. We do not knowingly collect their personal data.

Changes and contact

We may update this policy and will tell you about material changes by email or in the app. To use your rights or ask a question, email compliance@shikaly.app. You can also complain to Ghana's Data Protection Commission.