Privacy policy

Last updated 6 October 2026

Cho Dey is a pre-order app for make-to-order sellers in Ghana, operated by Archibold Bernard. This policy explains what we collect, why, who we share it with and how to get it deleted. It covers the Cho Dey seller app and this website, including the order pages at /d/…, /o/… and /s/….

There are two kinds of people here and they are treated differently. Sellers have an account and sign in. Customers have no account at all. They open a link, order, and pay.

Data we get from Google sign-in

Sellers sign in with Google or with Apple. A customer may also, optionally, sign in with Google to keep their own orders together; see customer accounts below. Either way we request only the standard sign-in scopes: openid, email and profile. From them we receive:

your name,
your email address,
the URL of your Google profile picture, and
the Google account identifier that tells us it is the same you next time.

We use that data for one purpose: to create your account and sign you back in, including on a new or reinstalled phone. Your name and email also let us answer you when you contact support.

We do not request access to Gmail, Drive, Contacts, Calendar, Photos or any other Google service, we do not read or write anything in your Google account, and we do not use Google sign-in data for advertising, profiling, or training machine-learning models. We do not sell it, and we do not share it with anyone outside the service providers listed below.

Cho Dey's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can withdraw our access at any time from your Google account permissions page. That stops future sign-ins; to have the account and its data deleted as well, see Deleting your data.

Signing in with Apple works the same way and gives us the same three things: name, email address and an account identifier. If you use Apple's Hide My Email, we only ever see the relay address.

What sellers give us in the app

Your business. Business name, the phone number you want to be reached on, what you sell, a short description, your area, and your public storefront handle.
Where you want to be paid. The mobile money network and number you choose for payouts, and the name the network has on that wallet. We send the network and number to Paystack to set up a payout account in your name, and store what comes back so you can see which wallet your money goes to. We never see your MoMo PIN or any other credential.
Licences. If you record them: the kind of licence (FDA, health certificate, registration), its reference number, its expiry date, and a photo of it.
Verification. Before your drops can go live, a person at Cho Dey checks your business: your business name, phone number, the area you sell from and what you sell, a note you may write, and your FDA food registration: its number, its expiry and the photo you uploaded of it. That is the one time a licence photo is seen by anyone but you. We may ring the number to confirm it. We keep the outcome, and if we turn a request down, the reason we gave you. We do not ask for personal ID.
What you sell and what you spend. Menu items and their photos, ingredients, stock, drops, any weekly repeat you set up for them, and the entries in your books.
Your device, for notifications. A push token and the platform (Android or iOS), so we can tell your phone when an order is paid and when a repeating drop has opened. One row per device; signing out hands it back, and we delete tokens the platform tells us are dead.

Your phone number is published. The number in your profile is shown to customers on your drop pages and your storefront, as a WhatsApp link and a call link, so they can reach you before they pay. That is what it is for. Leave it blank and no contact is shown, though a drop cannot be published without one.

What customers give us when they order

Their name and a phone number to be reached on.
A delivery address, if they chose delivery.
What they ordered, any options and any note, and the amount.
A payment reference from Paystack, so we can confirm the payment.

That information is shared with the seller the order was placed with, who needs it to make the order and hand it over, and with our payment processor. It is not shown to any other seller, and we do not build a profile across sellers for anyone but you. See customer accounts.

We never see card or Mobile Money credentials. Payment is completed on Paystack's own page; we receive only the result and a reference.

If a customer asks for something made to order

Some drops let a customer ask the seller for something made specially for them. Sending one needs an account, because the seller's answer has to reach you by email.

Which of the seller's items you are asking about, and any size or flavour you picked.
What you typed describing it, and a budget if you gave one.
Up to three reference photos, if you added any.
Your name and a phone number, so the seller can reach you about it.
The price the seller sent back, anything they itemised, and any note either of you wrote.

All of it, photos included, is shown to that seller only, who needs it to work out a price and make the thing. Nothing you send with a request is published anywhere. Nothing is charged while you are talking: a request becomes an order, with the payment details above, only when you pay the price they sent. Closing your account deletes your requests; an order you already paid for stays with the seller, because it is their record of a sale.

Customer accounts

You never need an account to order. Opening a link, ordering and paying works exactly as it always has, and that is how we expect most orders to be placed.

After paying, you are offered the option of signing in with Google and saving that order to an account. The only thing it does is let you see every order you have placed, with any vendor, in one place. There is no other feature behind it.

An account can only hold an order you put in it: either one you place while signed in, or one you save from its own order page. We cannot and do not go looking for your past orders to add: an order carries a phone number and Google gives us an email address, and we do not match the two.

Sellers are not told whether you have an account. They see the same order they would have seen anyway: your name, your number, what you ordered, and a delivery address if you gave one.

An account is how we reach you. If you add a vendor to your favourites, we email the address on your Google account when that vendor opens a new drop. Nothing else, and never on behalf of anyone you have not added. Every one of those emails carries a link to stop them, and stopping needs no sign-in.

If a customer asks to be told about new drops

Adding a vendor to your favourites records that you did, against that one vendor. We then write to you when they open a new drop, and for nothing else. It is not shared with any other vendor, used for anything else, or sold.

Where that message goes depends on how the favourite was made. One added while signed in goes to the email address on your Google account. Older ones were made by typing a phone number into a box on a vendor's page, and those are still kept and still go by SMS to that number; the box itself has been replaced by the favourites button.

Every one of those messages, by either route, carries a link to stop them. Stopping is immediate and needs no account. If the vendor deletes their account, the list of people who favourited them goes with it.

How the apps are used

We record a small log of what happens, so we can tell whether any of this is working: a drop link being opened, something going into a basket, checkout being pressed, an order being placed or paid, and a few of the things a seller does in the app. Each entry is the name of what happened, when, and which drop or seller it belonged to.

It is not a profile of anyone. We do not attach it to a customer account even where there is one, and we do not put names, phone numbers, addresses or anything you type into it. A browser and an app install each make up a random identifier for themselves so that two steps can be seen as one visit; it is not a device identifier and we cannot work out who you are from it.

This is held in our own database rather than sent to an advertising or analytics company. Nothing here is used for advertising, and we do not sell it.

What stays in your browser

Ordering needs no account, so to save you typing the same thing every time, your name and phone number are kept in your own browser after you place an order and filled in for you on the next one. This stays on your device. It is not sent to us, it is not attached to anything, and “Not you?” next to the phone field clears it. Clearing your browsing data clears it too, and a different browser or a private window will simply ask you again.

Who we share data with

We use a small number of service providers, and only to run the service:

Convex hosts the database and backend where all of the above is stored.
Paystack takes the customer's payment, pays it out to the seller's own mobile money wallet, and tells us whether it succeeded. The money goes from the customer to the seller; it does not pass through an account of ours.
Expo, and through it Apple and Google, delivers push notifications to a seller's phone.
Google and Apple authenticate sellers at sign-in.
An email provider delivers the “a new drop is open” message to customers who favourited that vendor. It receives the email address and the message, and nothing else.
An SMS provider delivers the same message to the older favourites that were made by typing a phone number. It receives the number and the message, and nothing else.

We do not sell personal data, we do not share it with advertisers or data brokers, and we do not use it to train machine-learning models. We will disclose data if the law requires it, and we would tell you unless we are forbidden to.

Where it is held, and for how long

Data is stored by Convex on servers outside Ghana, which means your information is transferred abroad to be processed. It travels over HTTPS. Keys that could be used to act on your behalf, such as our payment keys and our sign-in secrets, are held on the backend and are never present in the app or on this website.

Seller data is kept for as long as the account exists. Orders are kept while they are live and afterwards as the seller's own record of their sales, which is also what their books are built from. Dead push tokens are deleted as soon as the platform reports them.

Deleting your data

In the app, open Profile and tap Delete account. It asks twice, and then deletes your seller account, your profile, your licences and their photos, your menu and its photos, your stock, your books, your drops, your repeats and the orders on them, and signs you out on every phone. Your shop and order links stop working straight away; the rest is removed within minutes. Signing in again with the same Google or Apple account starts a new, empty account.

You can't delete your account while a drop is taking orders, because customers may be paying into it. Close the drop first.

Deleting your account does not cancel a Pro subscription. The store holds it, so cancel it in Google Play or in your Apple ID settings. Paystack, Google and Apple keep their own records of payments made through them, under their own policies.

If you can't get into the app, email archibold.bernard@halbestunde.com from the address you signed in with and we will delete the account for you within 30 days and confirm when it is done.

A customer account is deleted from your orders page. That removes the account, the Google sign-in attached to it, and the link between it and every order you saved, so the orders stop appearing anywhere for you, and nothing connects them to your email again.

The orders themselves stay with the sellers you bought from. A paid order is that seller's own record of a sale. It is in their books and their takings, and closing your account cannot reach into someone else's accounts and remove a day's trading. To have the order details themselves removed, email archibold.bernard@halbestunde.com with the pickup code from the order.

Your rights

Under Ghana's Data Protection Act, 2012 (Act 843) you may ask us what we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Email archibold.bernard@halbestunde.com and we will answer within 30 days. You can also complain to the Data Protection Commission of Ghana.

Children

Cho Dey is for people running a business and is not directed at children. We do not knowingly collect data from anyone under 18.

Changes

If we change what we collect or what we do with it, we will update this page and the date at the top, and tell sellers in the app before the change takes effect.

Contact

Archibold Bernard, Accra, Ghana. archibold.bernard@halbestunde.com