How MeKiosk uses your data.

We collect what we need to run stores, take payments and keep sellers and buyers safe. We don't sell anyone's data, we don't show adverts, and our stores and website use no tracking cookies.

1. Who we are and who this covers

MeKiosk is run by Novelite Imperia Consult, Madina, Accra, Greater Accra Region (GhanaPost GPS GM-021-6800). We decide how the personal data described here is used, and we're responsible for it under Ghana's Data Protection Act, 2012 (Act 843).

This policy covers:

Sellers who use the MeKiosk app and run a store at a mekiosk.shop link;
Buyers who visit a store, place an order or pay;
People who report a store to us;
Visitors to mekiosk.store, including people on our waitlist.

Questions about your data go to privacy@mekiosk.store.

2. What we collect and why

We collect only what each part of MeKiosk needs. The table lists all of it.

Data	Whose	Where it comes from	Why we need it
Phone number	Sellers	You, at sign-in	Signing you in by text, and telling you about orders and payouts
Ghana Card number, kept encrypted	Sellers	You, at the Ghana Card step	Checking you are who you say, and allowing one store per card
Name on your Ghana Card, and the check's result	Sellers	Smile ID, from the National Identification Authority	Confirming your identity, and matching it to your MoMo wallet
MoMo wallet number, network and registered name	Sellers	You, and Paystack's name lookup	Paying you, and checking the wallet is in your name
Store name, link, logo, WhatsApp number, about line, delivery note and hours	Sellers	You	Showing your store to buyers
Products, photos and prices	Sellers	You	Showing and selling your products
Phone model name and notification token	Sellers	Your phone	Sending notifications, and showing which phone is signed in
Name, phone number and delivery address	Buyers	The buyer, at checkout	Placing the order, delivering it, and texting the buyer about it
MoMo number and the name on it	Buyers	The buyer, and Paystack	Taking the payment, and refunds
Report reason, details and an optional phone number	People who report a store	The reporter	Looking into the report, and replying if a number was given
Messages to support	Anyone	You, on WhatsApp or email	Helping you
IP address and browser details	Anyone	Your device	Limiting abuse, such as too many sign-in codes, and keeping MeKiosk secure
WhatsApp number, business name, email, country	Waitlist members	You, on mekiosk.store	Telling you when you can open your store

We never collect your MoMo PIN, and we never ask for it. We don't build advertising profiles, and we don't buy data about you from anyone.

3. Ghana Card and selfie checks

Your selfie goes from the app straight to Smile ID and never reaches MeKiosk. We keep only the result of the check, the name on your card, and an encrypted copy of your card number.

How the check works

You type your Ghana Card number and the name on it, and Smile ID's consent screen asks your permission.
Smile ID's part of the app takes your selfie and sends it, with your card number, to Smile ID.
Smile ID compares them with the National Identification Authority's records, and tells us the result.

When you unlock your store or move it to a new number, you take another selfie, which Smile ID compares with the first one.

What MeKiosk keeps, and what it never keeps

We keep	We never keep
Whether the check passed, and why not if it didn't	Your selfie or any photo of your face
The name on your card, as NIA has it	Your date of birth or address
Your card number, encrypted, and shown only as its last digits	Links to NIA's photos or records
A coded fingerprint of the card number, to allow one store per card

Smile ID keeps your selfie so it can check you again when you unlock your store. It keeps it for as long as its data retention policy allows.

Why we check

To protect buyers and sellers from fraud, to make sure each store belongs to a real person who owns its MoMo wallet, and because Paystack and the law require us to know who receives payments.

We share data only with the companies that help us run MeKiosk, each for its own job, and with authorities when the law requires it. We never sell data.

Who	What they get	Why	Where they process it
Smile ID	Seller's card number, name, selfie and phone number	Ghana Card checks	Outside Ghana, under Smile ID's privacy policy
Paystack	Buyer's MoMo number and payer name; seller's wallet number, name and store name	Taking payments, paying sellers and refunds	Ghana and abroad, under Paystack's privacy policy
Arkesel and mNotify	Phone numbers and the text of each message	Sending texts	Ghana
Expo, Apple and Google	Notification token and the notification's words, such as a buyer's name and amount	Delivering notifications to sellers' phones	United States
Cloudflare	Product photos, logos, the website, the waitlist, and private files for data requests	Storing files and running our websites	Worldwide
Hetzner	Everything in our database, encrypted where section 6 says	Hosting our servers	Germany
WhatsApp (Meta) and Zoho Mail	What you send to support, and waitlist members' numbers when we message them	Answering you, and telling the waitlist when MeKiosk opens	WhatsApp worldwide; Zoho in the United States

Between buyers and sellers

Sellers see their buyers' names, phone numbers and delivery details on each order.
Buyers see the store's name, link, logo, products, WhatsApp number (if the seller gave one), business hours and delivery note. Buyers never see a seller's Ghana Card or MoMo wallet.

Authorities and others

The law: we share data with the police, courts or regulators only when the law requires it, and we keep a record of each request.
If MeKiosk changes hands, for example in a merger, your data moves to the new owner under this policy, and we'll tell you first.

5. How long we keep it

We keep data while your account is open, then only as long as the law or a dispute needs it. Some data is deleted within minutes or days by design.

Data	How long
Sign-in codes	10 minutes, and only in a coded form, never the code itself
Your copy of your data, when you ask for one	24 hours, then deleted
Photos and logos you uploaded but didn't use	24 hours
Server logs, with phone numbers masked	30 days
A phone's sign-in	Ends after 30 days without use; deleted after 60
Notification tokens	Until you sign out, or sign in on another phone
Paystack's payment messages	90 days
A reporter's phone number	30 days after we close the report
Store reports	2 years
Messages to support	12 months after the last message
Buyers' names, numbers and addresses on orders	12 months after the order, then removed from it
A closed store's products, photos and details	30 days after the account closes
Ghana Card check results, the name on the card and the encrypted card number	5 years after the account closes
Orders, payments, payouts and disputes, with the seller's name and number	6 years after the payment, as Ghana's tax law requires
The waitlist	90 days after MeKiosk opens to everyone, or sooner if you ask

When a period ends, we delete the data or anonymise it so it can no longer identify anyone. A record of what our own team did with personal data, such as viewing a phone number, is kept for 6 years and can't be edited or deleted.

6. How we protect it

We protect data by keeping as little as possible, encrypting what's most sensitive, and recording every time our team looks at it.

Encryption: Ghana Card numbers are encrypted in our database, and everything travels over encrypted connections.
Masking: our team and our logs see phone numbers masked, such as +233 24 *** **67. We never log card numbers, sign-in codes or MoMo PINs.
On your phone: your sign-in is kept in the phone's secure storage and protected by your PIN, fingerprint or face. Your PIN never leaves the phone.
Our team: only named team members can open our admin tools, through a passkey. To see a full phone number they must give a reason, and every view is recorded in a log nobody can edit or delete.
Breaches: if a breach puts your data at risk, we'll tell you and the Data Protection Commission as the law requires.

7. If you're a buyer

You don't need an account to buy. We ask only for what the seller needs to deliver your order and what Paystack needs to take your payment.

Your cart stays in your browser, on that store's site, until you place the order.
At checkout you give your name, phone number and, if you want delivery, an address. The seller sees them on the order and may WhatsApp you about delivery.
Your order link opens with a random code, so anyone you share it with can see the order. Keep it to yourself.
Paying: Paystack processes your Mobile Money payment and may store your details outside Ghana. Paystack needs an email address, so we make one from your phone number; no email is ever sent to it.
Texts: we text you about your order only when something changes that you need to know, such as a refund or a cancellation.
Sellers' use of your details: our terms of use allow sellers to use them only for your order. Tell us if a seller misuses them.

Reporting a store

You can report a store or an order without giving your name. If you add a phone number so we can reply, we never show it to the seller or to anyone outside MeKiosk.

If you report an order that never arrived, we share the report with the seller so they can answer it, and we may show you the proof they send us.

8. Your rights

Under Act 843 you can ask what data we hold about you, and have it corrected or deleted. It's free.

See it: we'll tell you what we hold. Sellers can also get a copy of their data as one file: account, Ghana Card check results, store, products, orders and payouts.
Correct it: fix your store details in the app, or ask us to correct anything else.
Delete it: we'll delete what we no longer need. We keep what the law or an open dispute still requires, and tell you what and why.
Object or withdraw consent: you can ask us to stop using your data for a purpose, or withdraw a consent you gave. Some things, like taking payments, can't work without it.
Checks decided by a computer: Smile ID's checks are automatic. If a check fails, you can try again, or message support and a person at MeKiosk will look at it.

How to ask

Email privacy@mekiosk.store or message support. We'll check it's really you first, for example by texting a code to the number on your account. We'll answer within 21 days.

If you're unhappy with how we handled your data, you can complain to the Data Protection Commission.

9. Cookies and tracking

MeKiosk's stores, website and app use no advertising, no analytics trackers and no tracking cookies.

Stores (mekiosk.shop): no cookies at all. Your cart is kept in your own browser. We count visits to a store as daily totals, without cookies, IP addresses or browser details, so sellers can see how many people came.
Paystack's page: if you pay on Paystack's own page, Paystack may use its own cookies there, under its own policy.
Our website (mekiosk.store): no cookies or trackers. Joining the waitlist stores the details in section 2.
The app: no advertising or analytics tools. It counts the status images you share, so we can show you which ones bring buyers.
Our admin tools use a sign-in cookie for our own team only.

10. Children, changes and contact

Children: sellers must be 18 or older. If you think a child has given us their details, tell us and we'll delete them.
Changes: this policy is subject to change, and it applies to every version of MeKiosk, from test versions to the full public release. When we change it, we update the date at the bottom of this page. If a change affects how we use your data, we'll tell sellers by text or in the app at least 30 days before it applies.

Contact

For	Contact
Your personal data	privacy@mekiosk.store
Anything else	The support button in the app, or support@mekiosk.store
Letters	Novelite Imperia Consult, Madina, Accra, Greater Accra Region, Ghana (GhanaPost GPS GM-021-6800)

Last updated 23 October 2026.