Privacy Policy

• Identity and contact details of your organisation's representative(s): full name, phone number, email, gender, date of birth.
• Organisation details: organisation name, type, youth classification, thematic areas, approximate membership size, and related information provided in your membership application.
• Membership records: application status, membership status, National Youth Authority (NYA) compliance status and supporting evidence, event and programme participation.
• Communications you send us: support tickets, forum posts, letter requests, survey responses.
• Technical data collected automatically for security purposes: login timestamps, device and IP address on check-in/check-out actions (staff and visitor records only).

We process your data to administer your GYF membership: reviewing and verifying your organisation's application, verifying NYA compliance, organizing events and programmes, communicating updates, operating the B2B Directory (for organisations who opt in), and maintaining statutory records.

We rely on your consent (given at registration and renewable at any time) and on contractual necessity — processing that is required to administer the membership relationship your organisation has with GYF.

We use the following third parties strictly to deliver the services below, and only share the minimum data each needs to function:

• mNotify — delivers SMS communications you have not opted out of.
• Resend — delivers email communications you have not opted out of.

Membership on the Ghana Youth App does not currently involve any payment or dues collection, so no payment processor handles your data today. If GYF introduces membership dues in the future, this policy will be updated to name the payment processor used before any payment data is collected.

We do not sell or rent your personal data to any third party.

We retain membership records for as long as your account remains active, and for a reasonable period afterward to satisfy statutory and dispute-resolution requirements. You may request erasure at any time (see Section 7) — some records may need to be retained longer where required by law.

Under Ghana's Data Protection Act, 2012 (Act 843), you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Withdraw consent and object to direct marketing (SMS/Email) at any time from your profile settings.
• Request erasure of your data, subject to statutory retention requirements.

Members can submit a request directly from their dashboard (Profile → "Request My Data" or "Request Account Deletion"), which creates a tracked request routed to our administrators. You may also contact the GYF Data Protection Supervisor.

We use industry-standard security measures including encrypted password storage, two-factor authentication for administrative accounts, account lockout after repeated failed login attempts, and a full audit trail of administrative actions on member data.

We may update this policy from time to time. Material changes will be communicated to members.