Legal

Privacy

What we collect, why we collect it, and what you can do about it.

Last updated date of publication. Operated by registered company name and number, of registered address.

The short version

We collect what the product needs to work, and not the things only an advertiser would want. We set no cookies. We run no third-party analytics, advertising or tracking scripts, so nothing here follows you to other sites. We do not sell personal data.

What we collect

Your account. Your email address, the display name you choose, and optionally your country, city and a profile picture. Your password itself is never stored — only an Argon2id hash of it, which cannot be reversed.

What you tell us you like. The interests you pick when you join, and the artists, events, destinations and experiences you follow or save.

What you do here. Views, follows, saves, shares, searches, and clicks on ticket or partner links. Each is recorded as an event with a timestamp and the thing it refers to. These carry no IP address and no browser fingerprint.

Your sign-in sessions. For each active session we keep the browser and device description your browser sends, and a one-way hash of your IP address — not the address itself. This exists so that a stolen session can be detected and ended. It cannot be turned back into a location.

Anything you publish. If you create an artist profile, an organizer, an event, an experience or an advertiser account, what you enter there is public by design.

Storage in your browser

We use no cookies at all. Three values are kept in your browser local storage, and they stay on your device except when your browser sends them back to us:

tourafrika.access_token and tourafrika.refresh_token — what keeps you signed in. Both are removed when you sign out.
tourafrika.theme — whether you chose light or dark.

Why we are allowed to hold it

To provide what you asked for — your account, your saved things, your session.
Our legitimate interest in a working product: ranking discovery, measuring which listings people actually find, and keeping the platform secure and free of abuse.
Your consent, where you have given it, for personalized discovery and interest-based promotion. Both can be withdrawn at any time in your account, and withdrawing them does not reduce what you can see.

Who else sees it

Our infrastructure providers, who host the application, the database and uploaded images on our instructions and may not use any of it for purposes of their own: list each provider and the country it operates in.

Ticketing and travel partners. When you follow a ticket or offer link we record that the referral happened, then send you to the partner. What happens on their site is governed by their privacy policy, not this one. We do not pass them your name, your email or your account.

Advertisers see counts — how many people saw and clicked a campaign. They never see who you are.

We disclose personal data to anyone else only where the law requires it of us.

How long we keep it

Your account and everything attached to it stays until you delete it. Behavioural events are kept for retention period, after which they are reduced to aggregates. Sign-in session records expire on their own within refresh token lifetime — currently 30 days.

Your rights

See what we hold. Ask, and we will send it to you.
Correct it. Most of it you can edit yourself in your account.
Delete it. There is a delete button in your account. It removes your profile, follows, saves, interests, notifications and uploaded images outright, and detaches your identity from the behavioural record so what remains cannot be traced back to you. It takes effect immediately and cannot be undone.
Object, or withdraw consent. The two privacy switches in your account, at any time.
Complain. To us first — we would rather fix it — and to the supervisory authority: Ghana Data Protection Commission, plus any other applicable regulator.

Children

TourAfrikA is not intended for anyone under minimum age, e.g. 16. We do not knowingly collect data from children. If you believe a child has an account here, tell us and we will remove it.

Changes

When this policy changes materially we will say so on this page and, where the change affects how your data is used, in the product itself before it takes effect.

Contact

Questions, requests and complaints: contact us, or write to privacy contact email. Name a Data Protection Officer here if one is appointed.

What we collect

What you tell us you like. The interests you pick when you join, and the artists, events, destinations and experiences you follow or save.

Anything you publish. If you create an artist profile, an organizer, an event, an experience or an advertiser account, what you enter there is public by design.

Storage in your browser

We use no cookies at all. Three values are kept in your browser local storage, and they stay on your device except when your browser sends them back to us:

tourafrika.access_token and tourafrika.refresh_token — what keeps you signed in. Both are removed when you sign out.

tourafrika.theme — whether you chose light or dark.

Why we are allowed to hold it

To provide what you asked for — your account, your saved things, your session.

Our legitimate interest in a working product: ranking discovery, measuring which listings people actually find, and keeping the platform secure and free of abuse.

Your consent, where you have given it, for personalized discovery and interest-based promotion. Both can be withdrawn at any time in your account, and withdrawing them does not reduce what you can see.

Who else sees it

Advertisers see counts — how many people saw and clicked a campaign. They never see who you are.

We disclose personal data to anyone else only where the law requires it of us.

Your rights

See what we hold. Ask, and we will send it to you.

Correct it. Most of it you can edit yourself in your account.

Delete it. There is a delete button in your account. It removes your profile, follows, saves, interests, notifications and uploaded images outright, and detaches your identity from the behavioural record so what remains cannot be traced back to you. It takes effect immediately and cannot be undone.

Object, or withdraw consent. The two privacy switches in your account, at any time.

Complain. To us first — we would rather fix it — and to the supervisory authority: Ghana Data Protection Commission, plus any other applicable regulator.