Introduction & Scope
Welcome to Golyfty, operated by Golyfty Technologies ("Golyfty", "we", "us", or "our"). Golyfty is an intercity mobility platform connecting vehicle drivers heading between cities in Ghana (such as Accra, Kumasi, Cape Coast, Takoradi, Tamale, Sunyani, Ho, and Koforidua) with passengers seeking reliable, comfortable, and affordable shared travel.
This Privacy Policy applies to all users of our services, including drivers, passengers, account holders, and casual website visitors across our website (golyfty.com), mobile applications (Android & iOS), and associated APIs.
By accessing, registering, or using Golyfty, you acknowledge that you have read, understood, and consented to the collection, use, and disclosure of your personal data in accordance with this Privacy Policy and the Data Protection Act, 2012 (Act 843) of the Republic of Ghana.
Data Controller Information
For the purposes of the Ghana Data Protection Act 2012 (Act 843), the Data Controller responsible for your personal data is:
Entity Name: Golyfty Technologies
Jurisdiction: Republic of Ghana
Official Email:privacy@golyfty.com / support@golyfty.com
Website:https://golyfty.com
Information We Collect
We collect personal data to enable secure ride booking, verify driver credentials, calculate routes, prevent fraud, and ensure community safety:
👤 A. Account & Registration Information
- Contact Details: Full name, verified mobile phone number, email address, and account password (stored securely as a cryptographic hash).
- Profile Photo: Avatar or headshot used for driver and passenger identification at pickup points.
🪪 B. Identity Verification & Driver KYC Data
To guarantee commuter safety and prevent fraud, drivers must complete mandatory verification prior to posting rides:
- National Identification: Ghana Card (National Identification Authority card) number and photo copy.
- Driving Credentials: Valid Ghanaian Driver's License details and class.
- Vehicle Documentation: Vehicle make, model, color, license plate number, insurance certificate, and roadworthiness inspection documentation.
📍 C. Geolocation & Trip Data
- Precise GPS Data: Fine and coarse latitude/longitude coordinates collected when you search for rides, post a ride, or navigate during an active trip.
- Journey Details: Departure city, destination city, pickup point description, drop-off location, departure time, seat availability, and fare contribution.
💳 D. Payment & Transaction Records
- Mobile Money References: Transaction identifiers, payment timestamps, amount paid, and MoMo network (MTN Mobile Money, Telecel Cash, AT Money).
- Note: Golyfty does not store credit/debit card numbers or your Mobile Money PIN. All electronic payments are processed securely through licensed Ghanaian payment gateways.
💬 E. In-App Communications & Telemetry
- Coordination Messages: In-app chat messages exchanged between confirmed drivers and riders to coordinate pickup logistics.
- Device Telemetry: IP address, device model, operating system version, browser user agent, app crash logs, and push notification tokens.
Lawful Bases for Processing (Act 843)
Under Section 18 of the Ghana Data Protection Act 2012 (Act 843), we process your personal data under the following lawful grounds:
1. Contractual Necessity
To create your account, match rides, calculate distances, and deliver core carpooling services.
2. Legal Obligation
To comply with Ghanaian laws regarding tax reporting, accounting records, and identity validation.
3. Legitimate Interests
To maintain platform security, prevent fraudulent driver listings, and ensure passenger safety on intercity roads.
4. Explicit Consent
When you opt-in to device permissions such as precise background location or push notifications.
How We Use Your Information
We process your personal information exclusively for the following purposes:
- ✓Ride Facilitation & Route Search: Matching passengers with drivers travelling along identical highway corridors and displaying real-time departure schedules.
- ✓Safety & Trust Verification: Authenticating Ghana Cards and driver licenses to ensure authorized, vetted vehicle operators.
- ✓Trip Navigation & ETA Updates: Calculating highway distances, geohash spatial indexing, and estimating arrival times.
- ✓Financial Settlement: Processing MoMo payments, shared fuel reimbursements, and issuing digital ride receipts.
- ✓Critical Communication: Sending One-Time Password (OTP) verification codes, booking confirmations, cancellation alerts, and essential safety notices.
- ✓Customer Support & Dispute Resolution: Investigating reported issues, lost items, or platform code-of-conduct violations.
Location & Sensitive Device Permissions
📍 ACCESS_FINE_LOCATION & ACCESS_COARSE_LOCATION
Used to determine your origin city, calculate distance between pickup and drop-off points, and update drivers on your live arrival at the meeting spot. You can revoke location access in your device settings at any time, though manual entry of origin/destination addresses will then be required.
📷 CAMERA & READ_MEDIA_IMAGES
Used exclusively to capture or upload your profile picture, Ghana Card ID photo, driver's license, and vehicle inspection documents during driver onboarding. We never access your camera or photo gallery without your active initiation.
Information Sharing & Third Parties
We strictly limit who has access to your personal data. We DO NOT sell your personal data to marketing agencies or third parties. We share data only in the following controlled circumstances:
Between Matched Drivers and Passengers
When a ride is booked, the passenger receives the driver's first name, profile photo, vehicle make/model/color, license plate, and rating. The driver receives the passenger's first name, profile photo, and designated pickup point.
Authorized Service Providers
Trusted technical vendors that assist with cloud hosting, SMS OTP delivery, geolocation and map APIs, and Mobile Money payment processing. All service providers are bound by strict data processing and confidentiality agreements.
Legal Authorities & Emergency Situations
We may disclose personal data if required by Ghanaian law, valid court order, subpoena, or in urgent situations involving personal safety or emergency response.
Data Security & Storage Standards
Golyfty implements robust technical, organizational, and physical security measures designed to safeguard your personal data from unauthorized access, loss, alteration, or disclosure:
- Encryption in Transit: All data transmissions are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
- Encryption at Rest: Database assets, authentication credentials, and uploaded identity documents are stored in hardened, encrypted storage vaults.
- Role-Based Access Control: Strict least-privilege administrative access policies restrict internal personnel from viewing sensitive user records.
- Security Audits: Periodic vulnerability testing and monitoring for unauthorized intrusion attempts.
Data Retention & Account Deletion
We retain your personal data for as long as your Golyfty account remains active and as needed to provide our services.
Permanent Data Erasure
When you request account deletion, your name, email, phone number, password, profile photo, KYC documents, and chat messages are permanently expunged from our operational databases.
Statutory Retention
Financial transaction logs and Mobile Money receipts are retained for up to 7 years strictly to comply with Ghanaian tax, revenue, and statutory financial regulations.
You can initiate an instant account and data deletion request at any time through our automated web portal:
Go to Account Deletion Request Portal ➔Your Rights under Ghana Act 843
As a data subject under the Data Protection Act, 2012 (Act 843), you have substantial rights regarding your personal information:
To exercise any of these rights, please email our Data Protection Officer at privacy@golyfty.com. If you believe your data has been handled unlawfully, you have the right to lodge a complaint with the Data Protection Commission (DPC) of Ghana (www.dataprotection.org.gh).
Children's Privacy
Golyfty is strictly designed and intended for individuals aged 18 years and older. We do not knowingly solicit, collect, or process personal information from children under 18. If we become aware that personal data of a minor has been collected without verifiable parental or guardian consent, we will promptly delete that data.
Changes to This Privacy Policy
We may periodically update this Privacy Policy to reflect modifications in our services, technological advancements, or statutory legal obligations. When changes are made, we will update the "Effective Date" at the top of this document. We encourage you to review this policy periodically to stay informed about our data protection practices.
Contact Us & Data Privacy Inquiries
If you have questions, feedback, or concerns regarding this Privacy Policy or Golyfty's data privacy practices, please contact our team: