Privacy notice
Last updated October 2026
This explains what WovaPay collects, why, and what we do with it.
What we collect
- Your account: the username, email address and phone number you give us, and your password, which we keep only in scrambled (hashed) form so nobody at WovaPay can read it.
- Your business details: the business name you give us, your plan and your credit.
- Payment texts: the WovaPay app reads text messages that come from MTN or Telecel Mobile Money. It sends us only the “payment received” messages: the sender’s name as printed in the text (and their phone number, when Telecel includes it), the amount, the reference, the transaction ID and your balance after the payment. Messages from other senders are ignored on the phone and are never sent.
- Your phone’s status: a name you choose, battery level, app version and the last time it checked in.
What we do not collect
We do not read your personal messages, contacts, photos or location. We do not collect your Mobile Money PIN, and WovaPay can never move your money.
How we use it
To show your ledger, match payments to your codes, notify the website address you gave us, run your plan, keep the service secure and answer support questions. We do not sell your data or use it for advertising.
Who sees it
Only you and WovaPay staff who need it to run the service. Your payments are never shown to other businesses. We use hosting and database providers to store data securely. If you give us a website address, we send payment details to it, signed so your site can check they came from us.
Keeping and deleting data
We keep your ledger while your account is open so you have your records. You can download it as a spreadsheet at any time. Ask us to delete your account and we will remove your data, except what the law requires us to keep.
Your rights
You may ask to see, correct or delete the personal data we hold about you, under Ghana’s Data Protection Act, 2012 (Act 843). Contact us and we will respond.
Draft text. Have a Ghanaian lawyer review this notice, and register with the Data Protection Commission, before launch.