Legal
Privacy Policy
Last updated 23 September 2026 · Prepared with reference to Ghana's Data Protection Act, 2012 (Act 843)
Draft. This Privacy Policy is a working draft prepared for review by a Ghanaian lawyer before launch. It is not yet legal advice or a final agreement.
1. Who is responsible
Wedding in Ghana is the data controller for personal data processed through weddinginghana.com and our mobile application. We intend to register with the Data Protection Commission of Ghana before launch. Contact: privacy@weddinginghana.com.
2. What we collect
- Account: name, email, password (hashed by our authentication provider), optional city, sign-in method.
- Planning: your names as a couple, the dates of your engagement and white wedding, budget and the amounts you record against it (estimates, agreed prices and deposits paid), guest count, checklist, engagement list, saved vendors and posts, likes and comments.
- Vendor alerts: the kind of vendor and the town you ask us to tell you about.
- Digital invitations: what you choose to publish — your names, ceremony dates, times and venues, map links, dress code, the WhatsApp number guests should reply to, a livestream link and a gift note. A published invitation is visible to anyone with its link. Guests’ RSVPs go directly to that WhatsApp number; we never receive them.
- Vendor applications: business name, category, city, description, business phone number, social profile links, optional website and starting price.
- Portfolio media: photos and videos vendors upload, and their captions.
- Messages: the content of conversations between couples and vendors.
- AI assistant: the questions you ask, the last few messages of the conversation, and the planning details the assistant uses to tailor its answer (city, budget, guest count and dates). These are sent to Google’s Gemini service on Google Cloud to generate an answer, and are not stored by us.
- Reports: what you report and why.
- Technical: device and app information, approximate location from IP, and security signals used to protect the Service.
On your device before you sign in: the planning tools work without an account. Until you sign in, your plan is kept only in your browser’s local storage on that device — it is not sent to us. When you sign in with a verified email, it is moved to your account. If a save fails, a copy is kept on the device until it succeeds. You can clear it by clearing your browser’s site data; deleting your account also clears it from the device you use.
What we deliberately do not collect in the app: Ghana Card, voter ID, passport or driver's licence images or numbers, selfies or biometrics. Identity verification for vendors is performed by a provider approved by the National Identification Authority, and we receive only a minimal verification outcome — not your documents.
3. Why we use it
- To provide the Service: accounts, discovery, planning, messaging, the feed and the assistant (performance of a contract).
- To verify vendors and keep the marketplace safe: business checks, moderation, report handling and fraud prevention (legitimate interests and legal obligations).
- To communicate with you about your account and the Service, including telling you when a vendor you asked to hear about joins.
- To understand, in aggregate, which kinds of vendors couples are waiting for in which towns, so we know which vendors to invite. We use counts, not names.
- To improve the Service using aggregated, pseudonymised usage data.
4. Who we share it with
- Vendors and couples see what you choose to share with them (your display name, messages, comments, public profile content).
- Service providers: Google Cloud / Firebase (hosting, database, authentication, storage), Google’s Gemini service on Google Cloud for the assistant, and, for vendors, an NIA-approved identity verification provider. Providers process data on our instructions.
- Authorities where required by law or to protect people from harm.
We do not sell personal data.
5. Where data is stored
Our infrastructure runs on Google Cloud in the European Union (europe-west1) with encryption in transit and at rest. Questions to the AI assistant are processed by Google’s Gemini service through its global endpoint, which may process them outside the European Union. Transfers outside Ghana are made with appropriate safeguards.
6. How long we keep it
- Account, planning data and vendor alerts: until you delete them or your account. You can turn any alert off at any time.
- AI assistant questions: not stored by us; only a daily usage count is kept (see below).
- Messages: until the conversation is deleted or your account is removed; the other participant keeps their own messages.
- Unfinished uploads: deleted after one hour. Rejected uploads: deleted on decision.
- AI usage counters: 3 days. Security audit events (pseudonymised, no content): 90 days.
- Reports and enforcement records: up to 2 years, so that banned accounts cannot simply re-register.
7. Your rights
Under Act 843 you can access, correct, export and delete your personal data, and object to certain processing. Use Account & privacy to export or delete your data, or email privacy@weddinginghana.com. Deletion hides your public content immediately; remaining data is removed by a daily job. You may also complain to the Data Protection Commission.
8. Children
The Service is for people aged 18 and over.
9. Security
All application writes go through server-side functions with validation and rate limits; clients cannot write directly to our database. Access to review tools requires server-issued roles. No system is perfectly secure; tell us at security@weddinginghana.com if you find a problem.
10. Changes
We will announce material changes on the Service.