Last updated: 21 September 2026
This notice explains what we collect when you use Bookepa, why we hold it, and what you can ask us to do with it. We have written it in plain language on purpose.
Bookepa is operated by [REGISTERED BUSINESS NAME], registered in Ghana with company number [NUMBER] at [ADDRESS]. We are registered with Ghana's Data Protection Commission as a data controller under the Data Protection Act, 2012 (Act 843), registration number [DPC NUMBER].
| What | Why we hold it |
|---|---|
| Your name, business name, phone number and email | To set up your account, reply to you, and remind you when your subscription is ending |
| Your Google account email | It is how we know it is you when you sign in. We never see your Google password |
| Your business records: sales, costs, stock, and who owes you | This is the service. We store it so you can see it on any phone |
| Names and phone numbers of people who owe you | You enter these so the app can show you who to chase. They belong to your records |
| A log of when you signed in, and of every fix or delete made to your records | So we can tell whether somebody who should not have access has been trying, and so you can see who changed what |
| Your payments to Bookepa (amount, date, MoMo reference) | To show how long your subscription runs, and for our own accounts |
When you write a customer's name and phone number into Bookepa, you are holding information about another person. Under Act 843 you are responsible for that, not us. Tell your customers you keep a record of what they owe, only write down what you need, and do not use their numbers for anything they have not agreed to. We hold that information on your behalf and do nothing else with it.
Your records are stored in a database on servers we rent from Hostinger, in their data centre in [COUNTRY]. Every request is checked against your own account, so other Bookepa customers cannot see your records, and you cannot see theirs. Connections to Bookepa are encrypted.
To work without signal, the Bookepa app also keeps a copy of your recent figures, and any entries not yet sent, on your own phone. Signing out does not remove entries that have not been sent yet, so they are not lost. Anyone who can open your phone can see what the app shows, so keep your phone locked.
When you sign in with Google, Google tells us your name and email address and nothing else. Google sets a small cookie during sign-in to protect it from misuse. Bookepa itself does not use advertising or tracking cookies.
We keep your records for as long as you are a customer, and for 12 months after you stop, so that you can come back or ask for a copy. After that we delete them. Sign-in logs are kept for 12 months. If you ask us to delete everything sooner, we will, and we will send you a copy first if you want one.
Act 843 gives you the right to:
Write to [EMAIL] or WhatsApp 0544780675 and we will reply within 30 days. There is no charge for asking.
If your information is exposed or lost, we will tell you and the Data Protection Commission as soon as we can, what happened, what was affected, and what we are doing about it.
If we change how we handle your information we will update this page and tell you on WhatsApp before the change takes effect.
[NAME], [ROLE], [EMAIL], [PHONE], [ADDRESS].
Data Protection Commission of Ghana: dataprotection.org.gh