Privacy Policy
Last updated: 5 September 2026
1. Who we are
SwipeTrash is an on-demand waste pickup platform operated from Accra, Ghana. In this notice, “SwipeTrash,” “we,” “us,” and “our” mean the operator of the SwipeTrash website, mobile application, and related services (the “Service”).
For Ghana Data Protection Act, 2012 (Act 843), that operator is the data controller. We have not yet published a registered company name in this notice. Until we do, treat the controller as the operator of SwipeTrash, principal place of business Accra, Ghana. For the current legal name, email [email protected] or call +233248865840.
Privacy requests: [email protected]. Complaints about how we handle personal data may also be lodged with the Data Protection Commission of Ghana.
2. What this notice covers
This notice applies to visitors of swipetrash.com, users of the SwipeTrash app at app.swipetrash.com (including the PWA and native iOS/Android apps), customers who book pickups, and collectors who perform pickups.
Providing account, address, and payment details is required to book a pickup. Providing precise location is required to match and complete a pickup. Analytics cookies, optional photos, and marketing messages are discretionary. If you refuse required data, we cannot provide the Service.
This notice does not cover third-party sites or apps we link to (for example Paystack checkout). Those services have their own notices.
3. Information we collect
Website visitors
- Technical data: browser type, device type, pages viewed, and approximate region derived from IP, if you accept analytics.
- Contact details you send via email, phone, or the contact page.
Customers
- Account: name, email, phone number, hashed password (we do not store your password in recoverable form), country, and profile preferences.
- Service: pickup addresses, map coordinates, bin types and quantities, schedules, pickup history, in-app messages, and support tickets.
- Payments: amount, currency, method (Paystack, mobile money, or cash), transaction reference, and status. Card and wallet secrets are collected by Paystack, not stored on our servers.
- Device: app version, operating system, and push-notification tokens so we can send service alerts.
- Social login: if you sign in with Google (or another provider we enable), that provider shares the profile fields you authorise, typically name, email, and a provider user ID. Facebook login is not currently offered in the app.
Collectors
- Account and identity information needed to onboard and pay you, including phone, email, and payout details.
- Live and recent GPS location while you are on a job, which we show to the assigned customer so they can follow the pickup.
- Platform-fee and payout records processed through Paystack.
Created in the Service
- Photos you capture or upload (for example bin or pickup evidence) when a flow asks for them.
- Diagnostic logs and crash reports (Sentry) when the app or site fails.
4. How we use information
Under Act 843 we process personal data only where we have a lawful basis:
- Contract. Create and secure your account, schedule and dispatch pickups, show live collector location during a job, process Paystack or cash payments, send service notifications, and provide support.
- Consent. Google Analytics on this website and in the app; optional marketing messages; camera or photo library access when you choose to take or attach a photo.
- Legal obligation. Tax, accounting, and lawful requests from Ghanaian authorities.
- Legitimate interests. Prevent fraud and abuse, keep the Service secure, and improve reliability, balanced against your privacy.
We do not sell your personal information, and we do not share it with third parties for their own marketing.
6. International transfers
Some processors (including Google, Mapbox, Sentry, Paystack’s infrastructure, and object storage) may process data outside Ghana. Act 843 restricts such transfers unless the destination offers adequate protection or you consent.
By creating an account or completing a pickup you consent to those transfers where they are necessary to provide the Service. Analytics transfers happen only if you accept analytics. You may object to non-essential transfers by declining analytics and by limiting optional photos.
8. Location, camera, and notifications
The app requests operating-system permission before using precise location, the camera, the photo library, or push notifications. You can withdraw those permissions in device settings; some pickup features will then be unavailable.
- Customer location is used to set a pickup point and to show you nearby service.
- Collector location is used to assign jobs and is shared with the customer for the duration of that pickup.
- Camera and photos are used only when you capture or attach an image in a Service flow.
- Push tokens are used for confirmations, status, and other notices you can tune in Account → Notifications.
9. Retention
- Account. While your account is active. After a verified deletion request we delete or anonymise account data within 48 hours, except as below.
- Pickups, messages, and location history needed for a job. As long as needed to complete the job, handle complaints, and meet accounting needs; live sharing ends when the pickup ends.
- Payments. Transaction records are kept as required for Ghana tax and accounting law.
- Analytics. Google Analytics event retention follows the GA4 property setting (up to 14 months).
- Backups and logs. For a limited rotation period, then overwritten.
You can delete your account in the app (Account) or by asking support through Help. Deletion is permanent. We may retain information we must keep for law, disputes, or fraud prevention, in anonymised or restricted form where possible.
If you used Facebook login while it was available, Meta may send a deletion request to https://api.swipetrash.com/facebook/data-deletion. We also honour in-app and email deletion requests for Google (and any other) connected accounts.
10. Your rights
Under Act 843 you may request access to your personal data, correction of inaccurate data, and deletion where we are not required to keep it. You may also object to or restrict certain processing. We will respond promptly and in any event within 40 days of a valid request.
Email [email protected] with enough information for us to verify it is you. You can update profile and notification settings in the app without filing a formal request.
If you are not satisfied, contact the Data Protection Commission (dataprotection.org.gh).
11. Security and breaches
We use technical and organisational measures appropriate to the risk, including encrypted transport, hashed credentials, and access controls. No system is completely secure.
If we have reasonable grounds to believe personal data has been accessed or acquired without authorisation, we will notify the Data Protection Commission and affected individuals as soon as reasonably practicable, as Act 843 requires, unless a competent authority directs us to delay notice.
12. Children
The Service is for people aged 18 or older. We do not knowingly collect personal data from anyone under 18. If you believe we have, contact us and we will delete it.
13. Changes and contact
We may update this notice. The “Last updated” date will change. For material changes we will notify registered users in the app or by email. Continued use after a material change that requires consent (for example a new analytics vendor) will not be treated as consent — we will ask again.
Questions or rights requests: [email protected], +233248865840, or Contact. Also see our Terms and Conditions.