Privacy Policy

Last updated: March 27, 2026

Information We Collect

We collect the following information when you register and use DoAm:

• Your phone number for authentication and account creation
• Your Ghana Card number for identity verification via Smile ID
• Your GPS location to verify your service area and prevent ghost providers
• Your mobile money account details for payment processing via Paystack
• Photos of completed work uploaded as service evidence
• Your device FCM token for push notification delivery
• Transaction history generated through the DoAm platform

How We Use Your Information

We use your information to:

• Verify your identity before onboarding as a professional or consumer
• Process payments securely via Paystack tokenized escrow
• Deliver Release Token notifications via Firebase Cloud Messaging
• Build your Reliability Credit Score based on transaction history and external data sources including MTN mobile money transaction signals where consent has been provided
• Facilitate dispute resolution through our remediation panel
• Comply with applicable Ghanaian law including the Data Protection Act 2012 (Act 843)

Data Storage and Security

All data is stored on Google Firebase infrastructure in the europe-west2 (London) region. Payment transactions are processed by Paystack and subject to their security standards and PCI-DSS compliance.

We use the following security measures to protect your financial data:

• SHA-256 token hashing for all Release Tokens
• HMAC-SHA512 webhook verification for all Paystack payment callbacks
• Encrypted storage of all service evidence in Firebase Storage
• Role-based access control — only authorised staff can access sensitive data

Data Sharing

We share your data only with the following third parties, and only to the extent necessary to provide our services:

• Paystack — for payment processing and escrow management
• Smile ID — for Ghana Card identity verification
• Google Firebase — for app infrastructure, authentication, and data storage
• MTN Ghana — for Reliability Credit Score income signals, where you have provided explicit consent

We do not sell, rent, or trade your personal data to any third parties for marketing or commercial purposes.

Payment Data

DoAm does not store your full payment card details. All payment transactions are processed directly by Paystack on their secure infrastructure. DoAm holds escrow funds on the Paystack rail — we never hold your money directly in a DoAm account.

Reliability Credit Score

Your Reliability Credit Score (RCS) is built from your DoAm transaction history including completion rate, response time, and dispute history. With your explicit consent, we may also incorporate mobile money transaction signals from MTN Ghana to provide a more complete picture of your financial reliability. You may withdraw this consent at any time by contacting us.

Data Retention

We retain your personal data for as long as your account is active or as required to provide our services. Transaction records are retained for a minimum of 7 years to comply with Ghanaian financial regulations. You may request deletion of your account and associated data at any time, subject to our legal retention obligations.

Your Rights

Under the Ghana Data Protection Act 2012 (Act 843), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Withdraw consent for data processing at any time
• Lodge a complaint with the Data Protection Commission (DPC Ghana)

Children's Privacy

DoAm is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18 years of age. If you believe a minor has provided us with personal data, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the effective date. Your continued use of DoAm after any changes constitutes your acceptance of the updated policy.