Back to home

Privacy Policy

Last updated: June 16, 2026

1. Introduction

Kekeli+ ("we", "our", "us") is a creative portfolio platform built for African creatives worldwide. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and related services.

We are committed to protecting your privacy and handling your data in a transparent manner. Kekeli+ is based in Ghana and operates in compliance with Ghana's Data Protection Act (Act 843 of 2012), as well as applicable data protection laws across Africa and other jurisdictions where our users reside.

2. Information We Collect

2.1 Information You Provide

  • Account information: Full name, username, email address, password (hashed), and creative role when you sign up.
  • Profile information: Avatar image, bio, location, skills, interests, and any other details you add to your profile.
  • Content: Posts, projects, images, videos, comments, messages, and other content you upload or create on the platform.
  • Communications: Information you provide when you contact us or submit reports.

2.2 Information Collected Automatically

  • Usage data: Pages visited, features used, interactions with content (likes, saves, shares), and time spent on the platform.
  • Technical data: IP address, browser type, device information, and operating system.
  • Cookies: We use essential cookies for authentication and session management. We do not use tracking cookies or third-party analytics cookies.

3. How We Use Your Information

  • To create and maintain your account and profile.
  • To enable you to post content, connect with other creatives, and use platform features.
  • To compute quality scores (Kekeli Index) and display badges — scores are never exposed; only badges are shown.
  • To send transactional emails (password resets, report notifications).
  • To improve the platform, fix bugs, and ensure security.
  • To comply with legal obligations.

We do not sell your personal information. We do not use your data for advertising or targeting.

4. Legal Basis for Processing

We process your data based on one or more of the following grounds under Ghana's Data Protection Act and applicable African data protection laws:

  • Consent: Where you have given clear consent (e.g., profile visibility, sharing content).
  • Contractual necessity: Processing necessary to provide our services under our Terms of Service.
  • Legitimate interests: Improving the platform, ensuring security, and preventing abuse.
  • Legal obligation: Where we are required by law to process your data.

5. Data Sharing and Third Parties

We share your data only with essential service providers:

  • Supabase: Authentication, database (PostgreSQL), and file storage (images, videos). Supabase is SOC 2 compliant and GDPR compliant. Privacy Policy
  • Resend: Transactional email delivery (password resets, report alerts). Privacy Policy
  • Vercel: Web hosting and deployment. Privacy Policy

We do not share your data with any other third parties for their own purposes.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, all your data (profile, posts, projects, messages, comments, likes) is permanently deleted within 30 days. Backups may persist for up to 90 days.

7. Your Rights

Depending on your jurisdiction, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Correct inaccurate or incomplete data (via your profile settings).
  • Erasure: Delete your account and all associated data (via Danger Zone in settings).
  • Data portability: Request your data in a machine-readable format.
  • Withdraw consent: Withdraw any consent you have given at any time.
  • Lodge a complaint: File a complaint with your local data protection authority.

To exercise these rights, contact us at the email below. We will respond within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS), encrypted storage at rest (Supabase), and strict access controls. Passwords are hashed using bcrypt. However, no method of transmission over the Internet is 100% secure.

9. International Transfers

Your data is stored on servers located in the United States (via Supabase and Vercel). Where required by applicable law, we ensure appropriate safeguards are in place for international data transfers.

10. Children's Privacy

Our platform is not intended for individuals under the age of 13. We do not knowingly collect data from children. If you believe a child has provided us with data, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the platform or email. Your continued use after changes take effect constitutes acceptance of the updated policy.

12. Contact

For privacy-related inquiries, data requests, or complaints, contact us at:

Email: mrmcquanin@gmail.com

Back to Kekeli+