Privacy Policy

We collect the minimum needed to move a gift from you to your person: an email, phone numbers, mobile money numbers, and the question you set. Answers are stored as one-way hashes nobody — including our own staff — can read. Personal details are scrubbed 90 days after a gift resolves. We never sell data.

• Senders: your email address (for sign-in), the refund mobile money number you provide, and your gifts.
• Recipients: the phone number and mobile money number the sender provides, and the optional display name the sender chooses (e.g. "someone special").
• The lock: your question, optional hint, and the answer — stored only as a bcrypt hash of its normalized form. The submitted answer on the single attempt is kept for dispute resolution.
• Hidden messages: stored until revealed or scrubbed (see retention).
• Technical: IP address and browser info on answer attempts, used for rate limiting and fraud prevention; payment references from our payment processor.

• No identity documents.
• No home or business addresses.
• No access to your contacts, camera, or location.
• No card numbers - card and mobile money payments are handled entirely by Paystack and never touch our servers.

Only to operate the service: creating and delivering gifts, collecting payment and paying out via Paystack, sending gift links by SMS via Nalo Solutions (Ghanaian numbers only), preventing brute-force guessing and fraud, and resolving disputes about an attempt or a payout. We do not use your data for advertising and we do not sell it to anyone.

• Paystack — payment collection, payouts, and refunds (they receive mobile money numbers and amounts).
• Nalo Solutions — SMS delivery to Ghanaian phone numbers (they receive the phone number and the message text).
• Supabase and Vercel — our database and hosting infrastructure.
• Authorities, only where the law requires it.

Our infrastructure providers may process data outside your country. We choose providers with strong security practices and share only what each one needs to do its job.

• 90 days after a gift resolves (opened, failed, expired, or refunded), personal fields are scrubbed: phone numbers, mobile money numbers, message bodies, and submitted answers.
• Financial records — amounts, payment references, and our ledger — are kept indefinitely, as required for financial record-keeping and reconciliation.

You can request account deletion at any time. Your gifts are anonymized and personal fields removed on the schedule above. Financial records survive deletion — the law requires us to keep them — but they are no longer linked to anything that identifies you personally.

BestieSafe operates under Ghana's Data Protection Act, 2012 (Act 843). You have the right to ask what data we hold about you, to have inaccurate data corrected, and to request deletion. Email support@bestiesafe.com and we'll respond within 30 days. If you're outside Ghana, we honor the same rights regardless of where you are.

Material changes to this policy will be posted here with a new effective date.