Privacy Policy
How Nsawabode collects, uses, shares and protects personal data across our website, web app, and mobile app, including contributor data handled on behalf of families.
Last updated 1 September 20261. Who we are
Nsawabode ("Nsawabode", "we", "us", "our") provides funeral contribution management in Ghana: contribution recording and reports, with package-specific contributor SMS, receipt links, physical receipt printing, Mobile Money, kiosk access, and on-site teams. This Privacy Policy explains what personal data we process, why, and the choices and rights you have. We process personal data in line with the Data Protection Act, 2012 (Act 843) of Ghana.
You can reach us about privacy at info@nsawabode.com or +233 548 157 455.
2. Our role: controller and processor
Nsawabode processes personal data in two distinct capacities:
As a processor, for the contribution and contributor data that a family or organizer records for a funeral, the family or organizer is the data controller. We process that data only on their instructions, to record contributions, issue receipts, and produce reports.
As a controller, for the account data of the people who sign in (organizers, agents, administrators) and for visitors to our website, we determine how that data is used and are the controller.
3. Information we collect
Account and profile data
Your name and phone number, and optionally an email address.
Your role and workspace membership, and the sign-in sessions and devices linked to your account.
Client users sign in with a verified phone number and password. One-time SMS codes are used during registration and password recovery. Privileged internal users sign in with an email address or username and password, with time-based one-time codes where enabled.
Contribution and event data (recorded by families or organizers)
Contributor details: the contributor's name, phone number, and the amount of each contribution recorded at the funeral.
The source of the contribution (for example cash recorded at the venue) and the time it was recorded.
Event details: the name of the deceased, dates, venue, and any information the organizer chooses to publish on a memorial page.
Public tributes: messages a contributor chooses to leave, which the organizer may approve for display on the memorial page.
Receipts and reports generated from the recorded contributions.
Technical and security data
IP address, device and browser (user-agent) information, and timestamps.
Security and audit events (for example sign-ins, contribution records, and receipt sends), used to keep the platform safe and accountable.
We do not collect payment-card data, and we do not knowingly collect data beyond what is needed to deliver the service.
4. How we use information
We use personal data to:
Record contributions accurately and, when the selected event package includes it, deliver contributor SMS and secure receipt links.
Show organizers and families live totals during the event and a transparent final report afterwards.
Authenticate users, secure accounts, and prevent fraud and abuse.
Provide support, fix problems, and improve the reliability of the service.
Meet legal, regulatory, and accountability obligations.
We do not sell personal data. Contributor phone numbers are used to deliver receipts and, where the family chooses, thank-you messages for that specific funeral. They are never used for third-party marketing or profiling.
5. Messages to contributors
For managed packages that include contributor SMS, receipt messages are sent through our messaging provider (mNotify). A receipt SMS may contain the contributor's name, amount, event, and an opaque link to view the receipt. Message and data rates from the contributor's network operator may apply. A contributor can ask to stop receiving non-transactional event messages by contacting us or the family.
6. Public memorial pages
An organizer may choose to publish a memorial page for a funeral. Only information the organizer chooses to make public is shown there, such as event details and tributes the organizer has approved. Contribution amounts and contributor phone numbers are private to the family and are never published. If you are a contributor and want a tribute you left removed, contact the organizer or us.
7. Who we share data with
We share personal data only as needed to run the service, and with organisations that process it on our behalf under contract (sub-processors). These include:
Our SMS provider (mNotify), to deliver receipts and event messages to contributors.
Our Mobile Money payment provider (Paystack), when a contributor uses Mobile Money for an eligible event.
Our cloud hosting and infrastructure providers, to run the platform and store data securely.
We may also disclose data where required by law, to protect rights and safety, or to the family or organizer that controls the data. We never sell personal data to third parties.
8. How we protect data
All traffic is encrypted in transit over HTTPS.
Each workspace's data is isolated, so one family can never read another family's contribution records.
Receipt links use opaque references that carry no sensitive data and can be revoked.
Access is role-based and least-privilege, and sensitive actions are recorded in an audit log.
Production refuses to start with weak or default secrets, and we monitor for vulnerabilities.
9. How long we keep data
Account data is kept while your account is active and for a reasonable period afterwards, then deleted or anonymised.
Contribution records and receipts are kept so families can refer back to them and contributors can verify their receipts, then retained per the family's instruction and any legal requirement.
We retain some records longer where the law requires, and we cycle backups out on a regular schedule.
10. Your rights
Subject to Act 843, you may ask to access, correct, delete, or restrict the personal data we hold about you, object to certain processing, and withdraw consent. For contribution and contributor data, the family or organizer is the controller, so we direct those requests to them and assist them in responding. You also have the right to complain to Ghana's Data Protection Commission.
To exercise a right, email info@nsawabode.com. See also our Account & Data Deletion page for how to delete your account and personal data.
11. International transfers
Some of our sub-processors operate outside Ghana. Where personal data is processed abroad, we rely on appropriate safeguards and contractual protections to keep it secure and to maintain a level of protection consistent with Act 843.
12. Cookies and analytics
Our website uses only the storage it needs to function and privacy-friendly analytics where enabled. We set no advertising cookies. The app stores only what it needs to work, such as your sign-in token.
13. Changes to this policy
We may update this Privacy Policy from time to time. The effective date above shows when it last changed, and we will give notice of material changes through the app or website.
14. Contact us
Questions about privacy or this policy? Contact Nsawabode at info@nsawabode.com or +233 548 157 455.