Privacy Policy
Effective date: 5 October 2026
This policy explains what personal data Qwenturo collects, why, who it is shared with, how long it is kept, and the rights you have. It is written to meet Ghana's Data Protection Act, 2012 (Act 843).
1. Who we are
Qwenturo is operated by Gilbert Turkson, trading as Qwenturo, Accra, Ghana ("Qwenturo", "we", "us"). Contact for anything in this policy: hello@qwenturo.com.
Qwenturo is a web app that small businesses use to record sales, stock, expenses, customers, credit, deliveries and funds, and to produce analytics and reports.
2. Two kinds of data, two roles
- Your account. When you sign up, we decide how your account data is used. For this data, we are the data controller.
- Records your business keeps in Qwenturo, including details of your customers and suppliers. Your business decides what to record and why; your business is the data controller and Qwenturo is your data processor. We process these records only to provide the service to you, as set out in our Terms, section 6.
3. What we collect
| Data | Where it comes from | Why we need it | Required? |
|---|---|---|---|
| Email address, name, and (if you use Google) your Google account ID | You, or Google when you choose "Continue with Google" | To create your account and sign you in | Required. Without it you cannot use Qwenturo. |
| The business records you or your team enter: items, prices, stock, sales, expenses, funds, deliveries, and contacts (which may include your customers' and suppliers' names, phone numbers, email addresses, notes and delivery addresses) | You and your team | To run your business records, analytics and reports | Up to you. Only what you choose to enter. |
| Who did what (which team member recorded a sale or change) | Created automatically | So owners can see who recorded each action | Created automatically while you use the service |
| A sign-in cookie, and a record of signed-in browsers | Created automatically | To keep you signed in securely | Required to stay signed in |
| Technical logs (such as time, page requested, IP address and error details) | Our hosting provider, automatically | To keep the service secure and fix problems | Created automatically |
We do not collect payment card details. We do not knowingly collect "special personal data" as defined in the Act (for example health, religion, ethnic origin or criminal records), and you should not use Qwenturo to record it.
4. How we use your data
We use personal data only to provide and secure Qwenturo: signing you in, storing and showing your records, producing your analytics and reports, answering your support requests, and keeping the service secure.
We do not:
- sell personal data (selling personal data is an offence under the Act, and we never do it);
- show advertising, or use your data for advertising;
- send marketing messages without your prior written consent. We will only email you about your account and the service.
Our legal basis is the contract between you and us (providing the service you signed up for) and our legitimate interest in keeping the service secure.
5. Who receives your data (our service providers)
We use a small number of providers to run Qwenturo. Each receives only what it needs:
| Provider | What they do | Where |
|---|---|---|
| Cloudflare | Hosts the website and app, delivers them securely, and sends sign-in code emails (when email sign-in is turned on) | A global network; requests are handled at data centres near users and near our database |
| Neon | Hosts our database, where your account and business records are stored | Amazon Web Services, Frankfurt, Germany |
| Signs you in, if you choose "Continue with Google" | Google's global infrastructure | |
| DeepSeek | Writes answers when you ask an Analytics question, and the optional commentary in reports | May be processed outside Ghana, including in China |
What DeepSeek receives: only anonymised figures (totals, dates, categories and product names). It never receives the names, phone numbers or email addresses of you, your team, your customers, your suppliers or your funders, and never the name of your business. Customers appear to it only as "Customer 1", "Customer 2" and so on. DeepSeek is used only when you ask a question or request report commentary.
Because some providers are outside Ghana, your data is transferred to and stored in other countries, including Germany. We choose providers that protect data with strong security measures, and we will update this list before adding a new provider.
We may also disclose data where the law requires it, for example under a court order.
6. How long we keep data
- While your store is active, we keep its records so you can use them.
- If a store is closed, it enters a 30-day grace period in which it can be restored. After that, its records are permanently deleted in a way that prevents them being reconstructed.
- Backups are kept for up to 30 days, so deleted data disappears from backups within a further 30 days.
- Technical logs are kept only for a short period by our hosting provider.
- If you ask us to delete your account, we delete it unless we must keep something by law.
7. How we protect your data
- All connections are encrypted (HTTPS).
- Each business's records are kept separate by the database itself: one store's records cannot be read by another store, and this is checked by automated tests every time the software changes.
- We never store passwords. You sign in with Google or a one-time email code, and sign-in cookies and codes are stored only as one-way fingerprints.
- The app connects to the database with a restricted login that cannot bypass these protections.
- Inside your business, roles limit what each team member can see; for example, cashiers do not see cost prices, profit, expenses or funds.
- Only the operator of Qwenturo can access stored data, and only to provide support, fix problems, or where the law requires it.
If a security breach affects your data, we will notify you and Ghana's Data Protection Commission as soon as reasonably practicable, with enough information for you to protect yourself.
8. Your rights
Under the Act you can:
- access the personal data we hold about you, and learn its purpose, its source and who receives it;
- correct data that is inaccurate, out of date, incomplete or misleading;
- delete data we are no longer allowed to keep;
- object to processing, or ask us to stop processing that causes you unwarranted damage or distress;
- refuse direct marketing (we do not send it without your consent);
- ask that decisions that significantly affect you are not made solely by automated means (Qwenturo does not make such decisions about you; AI answers are information for the business owner, not decisions about individuals);
- complain to Ghana's Data Protection Commission.
Business owners can also ask us for a copy of all their store's records, or to close their store, by emailing hello@qwenturo.com. (Self-service download and closing buttons in the app are coming soon; this policy will be updated when they arrive.)
To use any right, email hello@qwenturo.com. We may ask you to confirm your identity. We will respond to access requests within 40 days and to objections within 21 days, as the Act requires, and usually much sooner.
If you are a customer of a business that uses Qwenturo, that business decides what it records about you. Please contact that business first; if you cannot reach them, contact us and we will help.
9. Cookies and storage on your device
- qwenturo.com (this website) sets no cookies.
- app.qwenturo.com uses one essential cookie to keep you signed in, and a short-lived cookie for about 10 minutes during "Continue with Google". Both are required for the app to work.
- The app also remembers your theme colours, layout preferences (such as the sidebar) and last-opened store on your device, so it opens quickly. These contain no passwords or sign-in tokens.
- We use no tracking, analytics or advertising cookies.
10. Children
Qwenturo is for businesses. It is not intended for anyone under 18, and under-18s should not create accounts.
11. Changes to this policy
If we change this policy, we will update the effective date above. For significant changes, we will tell account holders by email or in the app before they take effect.
12. Contact
Gilbert Turkson, trading as Qwenturo, Accra, Ghana · hello@qwenturo.com