Privacy Policy

Last updated 3 August 2026. This explains what PerkOS collects, why we hold it, who can see it, and how you get it back or have it deleted. It is written to be read, not to be survived.

Who we are

PerkOS is a business management system operated from Ghana. We handle personal data in line with the Data Protection Act, 2012 (Act 843), which is Ghana's data protection law, and we answer to the Data Protection Commission.

For anything in this policy, write to francisannor966@gmail.com.

Two different kinds of data

This distinction matters, so it comes first. PerkOS holds two kinds of information and our responsibilities differ for each.

1. Your data, as a business using PerkOS

Your name, email, phone number and business details. We decide how this is used, so we are the data controller and this policy governs it.

2. Your customers' data, which you put into PerkOS

When you record a sale, add a customer, or track who owes you money, you are entering information about other people. That data belongs to your business. We only store and process it so the software works for you, so we are the data processor and you are the controller.

In plain terms: we never sell it, mine it, market to your customers, or use it to build anything of our own. Your customer list is yours. Your sales figures are yours. We do not look at them to work out how your business is doing, and our own admin console deliberately does not track what you sell.

You are responsible for having a lawful reason to hold your customers' details, for telling them you do, and for answering them if they ask. If one of your customers contacts us about data you entered, we will pass them to you, because you are the one who decides what happens to it.

What we collect

When you sign up

Your email address and password (stored only as a secure hash, never in readable form)
Your name and, if you give it, your phone number
Your business name, type, country and currency

What you enter while using PerkOS

Products, prices, stock levels and suppliers
Sales, refunds, expenses and till sessions
Customers you add, including names, phone numbers and what they owe
Staff names and their PINs, again stored only as a secure hash
Anything you upload, such as product photos or your logo

Collected automatically

That you used PerkOS on a given day. A count, so we know the system is being used and can spot a business that has gone quiet. We record the fact of a visit, not what you did in it.
Errors. When something breaks, we record what broke, which business it happened to, and the email of the person it happened to, so we can fix it before you have to report it.
Standard server logs kept by our hosting providers.

We do not use advertising trackers, third-party analytics, or cookies beyond the one that keeps you signed in.

Payments

Subscription payments are handled by Paystack. PerkOS never sees or stores your card or mobile money details. We keep only the payment reference, the amount, the method used, and whether it succeeded, so we can show you a receipt and know your plan is paid.

Why we hold it

To run the service you signed up for.
To take payment and keep your subscription current.
To support you, including looking at your settings when you report a problem. Every time we open your account this way it is recorded.
To keep the system working, by catching errors.
To meet legal obligations, such as tax records.

We do not sell your data to anyone, ever. We do not share it with advertisers.

Who we share it with

Only the companies that make the service run:

Supabase stores the database and files.
Vercel runs and serves the application.
Paystack processes payments.
Resend delivers our emails.

Each holds data only to do that job. We may also disclose information if the law requires it.

Where your data lives

Our database and files are hosted outside Ghana on infrastructure in the European Union. This means your information is transferred internationally. We chose providers that offer strong contractual and technical protections, and access is restricted to what is needed to run the service.

How long we keep it

While your account is open, we keep your records so the software works.
If you close your account, everything is permanently erased 30 days later. The delay is deliberate: it is your window to change your mind, and it protects you if somebody else gets into your account.
The activity log is kept for a period that depends on your plan, then deleted automatically.
Payment records are kept longer where tax law requires.

Your rights

Under Act 843 you may:

See what we hold. Most of it is already on your screen, and you can download your sales, customers and products as a spreadsheet from Settings at any time, without asking us.
Correct anything wrong. Most of it you can edit yourself.
Have it deleted. Settings, then close your account.
Take it elsewhere. The exports are ordinary CSV files that open in Excel or Google Sheets.
Object to how we use it, or complain to the Data Protection Commission.

Write to francisannor966@gmail.com and we will respond within 30 days.

How we protect it

Every business's data is isolated at the database level, not merely hidden in the interface. One business cannot read another's records even if it tried.
Passwords and PINs are stored as one-way hashes. We cannot read them and neither can anyone who obtained the database.
Everything travels over an encrypted connection.
Administrative actions on your account are recorded.
Repeated wrong PIN attempts lock the device out.

No system is perfect and no one can promise otherwise. We cannot guarantee that the service will never be compromised, and we are not responsible for a breach at a third party we rely on, or one caused by your own password, PIN or device being shared, guessed or stolen. If a breach affects your data we will tell you and the Data Protection Commission without undue delay, and tell you what we know and what we are doing about it.

Your part matters too: use a password you use nowhere else, keep your owner PIN private, and use Sign out everywhere in Settings the moment a device goes missing.

Children

PerkOS is for businesses. It is not intended for anyone under 18 and we do not knowingly collect their data.

Changes

If we change this policy in a way that affects you, we will tell you by email or in the app before it takes effect. The date at the top always shows the current version.