Your Privacy & Data Protection Rights
KyerɛMe Ghana is engineered from its foundational database schema up to guarantee statutory privacy, parental consent for minors, and zero cross-tenant access under the Data Protection Act, 2012 (Act 843).
Ghana Data Protection Commission (DPC) Registration
KyerɛMe Ghana is architected to meet the Data Controller and Data Processor obligations of Sections 27 and 28 of Act 843. Formal DPC registration and Data Protection Supervisor appointment are in progress and not yet complete — this page will be updated with the registration number and named DPS once filed, rather than stated here before it is true.
Jurisdiction: Republic of Ghana
ADR 004: Ephemeral Image Retention
The single most sensitive artifact in secondary school admissions is the child's terminal report card. Our architectural invariant I1 dictates that raw scans are strictly ephemeral:
5-Second Purge
The instant you review and confirm your child's extracted marks, the raw photograph is permanently deleted from our Cloudflare R2 storage within 5 seconds.
24-Hour Ceiling
If an upload is started but never confirmed by the parent, an automated object lifecycle rule permanently deletes the unconfirmed image at exactly 24 hours.
Browser-Only Cache
Long-term visual reference stays solely on your phone via browser IndexedDB (Dexie.js). Raw images are never saved to PostgreSQL and never seen by platform staff.
The Seven Statutory Pillars of Act 843
1. Accountability (Section 17)
Every data mutation, consent grant, and administrative action is cryptographically signed and recorded in an immutable, append-only WORM audit log.
2. Lawfulness & Parental Consent (Section 18 & 30)
No ward record, marks, or predictions exist without verifiable parental consent from an authenticated adult guardian holding legal custody.
3. Purpose Specification (Section 19)
Assessment data and subject marks are collected exclusively for statistical admissions guidance, cut-off modeling, and choice-sheet validation.
4. Compatibility of Further Processing (Section 20)
Marks are never sold to advertisers, lead generators, or third-party schools. Predictive research uses anonymised, synthetic aggregates.
5. Information Quality & Accuracy (Section 21)
Parents and students have real-time visibility into extracted scores and retain the absolute right to correct any OCR transcription error before confirmation.
6. Openness & Transparency (Section 22)
Every statistical prediction is labeled with its confidence tier (Provisional, Crowdsourced, or Authoritative) and displays the statutory Section 39 disclaimer.
7. Security Safeguards (Section 23)
PostgreSQL Row-Level Security (RLS) isolates every family. Phone numbers are stored as peppered HMAC-SHA256 hashes, and PII fields are encrypted at rest with pgcrypto.
Your Statutory Rights: Portability & Erasure
Under Sections 35 and 36 of Act 843, you hold unconditional rights regarding your personal and family data. You can exercise these directly within your account without submitting written paperwork:
Download a structured, machine-readable JSON archive of your family profile, wards, historical marks, and consent records.
Export Data from Mission ControlPermanently purge your account, ward records, and assessment history. OTP confirmation prevents accidental deletion.
Request Account Erasure