Draft. This document is being reviewed by a lawyer and may change before Sika launches publicly.
Privacy Policy
Last updated 2 November 2026
This explains what personal information Sika collects, why, who we share it with, and your rights under Ghana's Data Protection Act, 2012 (Act 843). It goes with our Terms of use.
What we collect
- Your phone number, to create your account and log you in with a code.
- Your name, email (optional) and GhanaPost GPS digital address, from sign-up and your profile.
- Your Ghana Card number and date of birth, to check your identity. We keep only a masked version of the card number (like GHA-7••••••••-3), and we don't keep your date of birth.
- A selfie, to match you to your Ghana Card photo. It is checked and thrown away; we don't store it.
- Your linked mobile money numbers, so payments can be taken from them.
- Your payments: who or what you paid, how much, when, from which account, and the result.
- What you keep in the app: saved bills, favourite recipients and payment requests.
- Support: problem reports you send, replies, and proof-of-address documents you upload to raise your limits.
- Your device: if you turn them on, a passkey for fingerprint or Face ID (the fingerprint or face itself never leaves your phone) and a push notification address.
- Your location, only when you tap “Use my current location”, to find your digital address. It is used once and not stored.
- Usage and errors: anonymous page visits (no cookies) and error reports, to keep Sika working. We don't sell your information or use it for advertising.
Why we use it
- To run your account and make the payments you ask for.
- To verify who you are and keep accounts and payments safe from fraud.
- To meet our legal duties, including anti-money laundering rules.
- To send you receipts, notifications and replies to your reports.
- To fix problems and improve Sika.
Who we share it with
Only what each partner needs to do its job:
- Payment partners (such as Paystack and Hubtel) and your mobile money network, to take and make payments.
- Billers such as ECG and Ghana Water, to apply your payment to your account.
- Identity verification partners, to check your Ghana Card and selfie against National Identification Authority records.
- SMS and email services (such as Arkesel), to send codes, receipts and messages.
- An address lookup service, which receives only the coordinates when you use your current location.
- Our hosting and monitoring providers (such as Vercel, Neon and Sentry), who store and process data on our behalf.
- Authorities, when the law requires it.
Where it is stored
Sika's servers and database are run by cloud providers whose data centres are currently in the United States. Your information is protected in transit and at rest, and these providers may only use it to provide their services to us.
How long we keep it
- Your account information, until you delete your account.
- Payment records, for at least five years after the payment, as Ghana's anti-money laundering law requires, even if you delete your account. They are then deleted.
- Support reports and documents, until your account is deleted, unless we need them for a dispute or the law.
Your rights
- See the information we hold about you.
- Correct it. You can change your email and digital address in Profile.
- Delete your account, in Profile › Sign out › Delete my account. This removes your personal information, except the payment records we must keep.
- Object to how we use it, or complain to us, and if you're not satisfied, to Ghana's Data Protection Commission.
For anything else, use Help and support in the app.
Keeping it safe
PINs are stored only as one-way hashes, login and session codes are never stored in readable form, and payments need your PIN and, if you turn it on, your fingerprint or Face ID. Access to Sika's admin tools is limited and logged.
Changes
If we change this policy in a way that matters, we'll tell you in the app first.