Draft — not yet in force
This notice is being prepared alongside our registration with Ghana’s Data Protection Commission. It has not yet been reviewed by counsel and does not yet bind Kwanoma. It is published here in draft because we would rather show our working than say nothing.
Privacy notice
Draft — last updated 11 August 2026
Who we are
Kwanoma builds digital infrastructure for healthcare in Ghana. This notice covers this website. The Kwanoma application, where care is delivered and health records are held, is a separate system with its own consent flows described at the point of use.
What this website collects
This website is a set of static pages. It has no accounts, no login, and sets no tracking or advertising cookies. If you email us using a link on this site, we receive what you choose to send — typically your name, organisation and message — and use it only to respond.
How the application handles health data
Two commitments govern the application, and they are architectural rather than procedural:
- Identifying details are stored separately. Names, phone numbers and identity documents are held in a physically separate database from clinical and operational records, which are keyed on opaque identifiers. A breach of one does not reveal the other.
- Consent is recorded, not assumed. Every consultation carries a consent timestamp. It is a required field, not an optional one.
- Personal data is kept out of logs. Application logs and error reports are written so that they do not carry identifying details.
Your rights
Ghana’s Data Protection Act, 2012 (Act 843) gives you rights over personal data we hold about you, including access, correction and erasure. To exercise them, write to hello@kwanoma.com.
Being straight about a gap: we do not yet have a published retention schedule or an automated deletion mechanism. Both are being built, and this notice will state the specifics once they exist rather than implying they already do.
Where data is stored
Data is held with a cloud provider outside Ghana. Physical location alone does not determine which governments can compel access, which is why the separation of identifying details from clinical records described above is the control we rely on rather than geography.
Contact
Questions about this notice, or about how we handle personal data, go to hello@kwanoma.com.