Legal
Privacy Policy
Last updated: 28th June 2026
This Privacy Policy mirrors the one shown inside the GrabAm app. It has not yet received formal legal review under Ghana's Data Protection Act, 2012 (Act 843), and should not be treated as final until reviewed by a qualified lawyer and, if required, registered with the Data Protection Commission.
1. Information We Collect
- Account info: name, username, phone, email, campus, profile photo.
- Verification data from email/phone OTP confirmation.
- Listing content: photos, descriptions, prices.
- Transaction & negotiation data: offers, messages, order details.
- Payment info: MoMo number used to send/receive payments (processed via Moolre. GrabAm never sees your MoMo PIN).
- Dispute evidence: photos and descriptions you submit, hosted via Cloudinary.
- Reviews & ratings you submit about other users.
- Device/usage data, presence (last-seen) status, and approximate location where you grant permission.
2. How We Use It
- Operate core features: listings, negotiation, messaging, orders, delivery scheduling.
- Process payments and payouts through Moolre, including escrow holding.
- Calculate fees based on your account tier.
- Run the dispute resolution process.
- Show ratings, reviews, and presence indicators to other users.
- Detect and prevent fraud or multiple-account abuse.
- Send OTPs, order updates, and delivery reminders.
- Improve the App and comply with Ghanaian law.
3. Who We Share It With
- Other users: your username, profile photo, rating history, and listing details are visible as part of normal marketplace use.
- Moolre: mobile money details needed to process payments and payouts.
- Cloudinary: photos you upload for listings or dispute evidence.
- Supabase: your account, listing, order, and message data, protected by row-level security.
- Vercel: hosts our backend functions.
- Legal & safety: disclosed where required by law or to protect rights and safety.
GrabAm does not sell your personal data, and does not share it with advertisers for ad-targeting.
4. Storage & Security
Your data lives in Supabase's managed database, protected by row-level security policies. OTP verification happens server-side. No system is 100% secure, so data is shared at your own risk.
5. Data Retention
We keep your data while your account is active and as needed for legal, dispute, and fraud-prevention purposes. Deleting your account may still leave certain records retained where required by law.
6. Your Rights
- Access the data we hold about you.
- Request correction of inaccurate data.
- Request deletion, subject to legal/legitimate retention needs.
- Object to or restrict certain processing.
- Withdraw consent where processing relies on it (e.g. location).
7. Children's Privacy
GrabAm isn't intended for anyone under 18. If we learn a minor has created an account, we'll take steps to delete it.
8. Changes & Contact
We'll notify you of material changes in-app or by email. Questions about your data: support@grabam.com.