Privacy Policy

This Privacy Policy explains what information we collect when you use Kuwa, why we collect it, how we store and protect it, and the rights you have over your data. Kuwa is operated by Apex Dap Group Ltd, a company registered in Ghana (Company No. CS110740526, TIN C0067366600).

Who is responsible for your data

Apex Dap Group Ltd is the data controller for account holders (the business owners and admins who sign up to Kuwa). For staff records that a business uploads to Kuwa, the business is the data controller and Kuwa is the data processor acting on their instructions.

Information we collect

Account details such as your name, business name, email, phone number and role. Staff records you add: names, contact details, photos, job role, branch, pay rate and shift schedules. Attendance data created when staff clock in and out, including time, branch, GPS location where enabled, and selfie verification where enabled. Payment information processed by our payment partners. Basic device, browser and usage data needed to run the service.

How we use your information

To run Kuwa for you: recording attendance, generating rosters, producing payroll reports, sending notifications, and supporting your account. To keep the platform secure: detecting fraud, blocking abuse, and protecting accounts. To improve the product: understanding which features are used and where to invest. To meet our legal and tax obligations in Ghana.

What we do not do

We do not sell your data. We do not share your business or staff data with third parties for marketing. We do not use your attendance data to train external AI models.

Sharing with service providers

We use a small number of trusted service providers to host the platform, send emails and SMS, process payments and provide error monitoring. They only receive what they need to perform their service, and they are bound by confidentiality and data protection terms.

Where your data is stored

Your data is stored on secure cloud infrastructure. Some providers operate from outside Ghana. Where data is transferred internationally, we rely on appropriate contractual safeguards to protect it.

How long we keep it

We keep your account and operational data for as long as your account is active. After you close your account, we keep data for a short recovery period and then delete it, except where we need to keep records to meet legal or tax obligations.

How we protect it

We use role-based access controls, secure authentication, encrypted communications, audit logging, activity monitoring and secure password management. We review and improve these controls as the platform evolves.

Staff data and consent

If you are a business using Kuwa, you must tell your staff what is being collected and why, especially around GPS location and selfie verification, and follow applicable employment and privacy regulations in Ghana.

Your rights

You can access the personal data we hold about you, ask for a copy, correct it, or ask us to delete it. Staff who want to exercise these rights should usually contact their employer first, since the employer is the data controller for staff records. You can write to us any time at hello@kuwa.boafo.digital.

Cookies

We use cookies and similar technologies to keep you signed in, protect against fraud, remember preferences and understand how the platform is used. See our Cookie Policy for full details.

Children

Kuwa is built for businesses and is not intended for children under 16. We do not knowingly collect personal data from children.

Changes to this policy

We may update this Privacy Policy from time to time. If a change is material we will tell you by email or in-product notice before it takes effect.

Contact

Questions about privacy, data access requests or complaints: hello@kuwa.boafo.digital. Apex Dap Group Ltd, registered in Ghana, Company No. CS110740526.