Privacy Policy — Ewa GlowUp
Ewa GlowUp is a marketplace that connects clients with beauty and wellness professionals ("Pros") in Benin and the West African region. This Privacy Policy explains, in plain language, what personal data Ewa GlowUp collects, why we collect it, how we use, store, share and protect it, how long we keep it, and how you can access or delete it. It includes a dedicated section on the data we receive when you sign in with Google.
1. Who we are
Ewa GlowUp ("we", "us", "our") is operated by Kemi Stratech, a company registered in the Republic of Benin under registration number 02026190798681, with its registered office at [FULL ADDRESS], Benin. Kemi Stratech is the data controller for the personal data processed through Ewa GlowUp.
Contact for any privacy question: support@ewaglowup.com
We process personal data in accordance with Law No. 2017-20 of 20 April 2018 on the Digital Code of the Republic of Benin (Book V, on the protection of personal data) and, where it applies to users located in the European Union, the General Data Protection Regulation (GDPR).
2. Data we collect
2.1 Data we receive from Google when you sign in with Google
If you choose "Sign in with Google", Google shares the following information with us, only after you approve it on Google's consent screen:
| Data | Google scope | Why we need it |
|---|---|---|
| Email address | email | To create your account, identify you and send you booking confirmations and account notices |
| Full name | profile | To display your name on your account and on your bookings |
| Profile picture | profile | To display your avatar in the app |
| Google account ID | openid | To recognise you securely each time you sign in |
We do not request access to your Gmail, Google Drive, Google Calendar, Google Contacts or any other Google service. We never receive or store your Google password.
2.2 Data you give us directly
- Account data: name, email address, phone number, profile photo.
- Pro data (if you register as a Pro): business name, services offered, prices, portfolio photos, availability, service area, payout information.
- Booking data: services booked, date and time, address for home appointments, notes you add to a booking.
- Content you post: reviews, ratings and messages exchanged on the platform.
- Support requests: messages you send to our support team.
2.3 Payment data
Subscriptions and in-app payments are processed by our payment provider KKiaPay (mobile money and cards). We only keep the transaction amount, date, status and a masked payment reference (last 4 digits). We never store full card numbers or mobile money PINs.
2.4 Location data
With your permission, we use your device location to show Pros near you. Location access is optional and can be turned off at any time in your browser or device settings. We do not store your location history.
2.5 Data collected automatically
- Technical data: IP address, browser type, device type, operating system, language.
- Usage data: pages viewed, features used, date and time of access, error logs.
- Essential cookies used for sign-in and session management (see section 9).
3. How we use your data
| Purpose | Data used |
|---|---|
| Create your account, sign you in (including with Google) and keep your account secure | Email, name, profile picture, Google account ID |
| Show Pros and services, and Pros near you | Location (if allowed), search activity |
| Process bookings, cancellations and loyalty points | Account and booking data |
| Process subscriptions, payments and Pro payouts | Payment and payout data |
| Send booking confirmations, appointment reminders and important account notices | Email, phone number |
| Provide customer support | Account data, support messages |
| Prevent fraud and abuse, and enforce our Terms | Technical and usage data, booking history |
| Fix bugs and improve the service | Aggregated usage data, error logs |
| Comply with legal and accounting obligations | Booking and transaction records |
We do not sell your personal data. We do not use your data for targeted advertising. We do not make automated decisions that produce legal effects on you.
4. Google user data
Access. Ewa GlowUp accesses only the Google account information listed in section 2.1 (email address, name, profile picture and Google account ID), and only after you grant permission on Google's consent screen.
Use. We use this information only to sign you in, create and manage your Ewa GlowUp account, display your name and photo in the app, and contact you about your bookings and account. We do not use it for any other purpose.
Storage. This information is stored encrypted in our database hosted by Supabase and processed by Auth0, our authentication provider.
Sharing. We do not sell, rent or share Google user data with third parties, except with the service providers strictly necessary to operate Ewa GlowUp (Auth0 and Supabase), when required by law, or with your explicit consent. When you book a Pro, the Pro sees your name so they can serve you.
Limited Use. Ewa GlowUp's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, we do not use Google user data for advertising; we do not transfer or sell it to data brokers or information resellers; we do not use it to determine creditworthiness or for lending; we do not allow humans to read it except with your consent, for security purposes, or to comply with the law; and we do not use it to develop, improve or train generalised artificial intelligence or machine learning models.
Revoking access. You can remove Ewa GlowUp's access to your Google account at any time at myaccount.google.com/permissions. To also delete the data we hold, see section 7.
5. Who we share data with
- Pros you book with: your name, phone number, and address for home appointments, so they can provide the service.
- Clients (for Pros): your public profile, services, prices, photos and reviews.
- Service providers acting on our instructions: KKiaPay (payments), Auth0 (authentication, including Google Sign-In), Supabase (database and file storage), Resend (transactional emails).
- Authorities: when required by law, or to protect the rights and safety of our users.
- A buyer or successor: in the event of a merger or sale of Kemi Stratech, after notifying you.
6. International transfers
Some of our service providers (Auth0, Supabase, Resend) may process data outside Benin, including in the European Union and the United States. These transfers are carried out in accordance with the Digital Code of Benin, and we use providers that offer appropriate safeguards, such as standard contractual clauses.
7. How long we keep data, and how to delete it
- Account data, including data received from Google: kept while your account is active.
- After you delete your account: personal data is deleted or anonymised within 30 days.
- Booking and financial transaction records: kept for 7 years to meet legal and accounting obligations.
- Technical logs: kept for a maximum of 12 months.
- Location: not stored.
How to delete your account and data: in the app, go to [Settings → Account → Delete my account], or email support@ewaglowup.com from the email address linked to your account with the subject "Delete my account". We delete your data, including all data received from Google, and confirm within 30 days.
8. Security
We protect your data with TLS (HTTPS) encryption in transit, encrypted storage via Supabase, secure authentication via Auth0, access restricted to authorised staff only, and regular security updates. Authentication tokens are never exposed in the browser. No system is 100% secure, so please keep your login credentials confidential. If a data breach puts your rights at risk, we will inform you and the competent authority as required by law.
9. Cookies
We use only essential cookies, needed for sign-in and session management. We do not use advertising or tracking cookies. You can clear cookies at any time in your browser settings.
10. Your rights
You have the right to access, correct, delete and export your personal data, to object to or restrict its processing, and to withdraw your consent at any time. To exercise these rights, email support@ewaglowup.com. We respond within 30 days.
If you believe your rights have not been respected, you may file a complaint with Benin's data protection authority, the Autorité de Protection des Données à caractère Personnel (APDP), or, if you live in the European Union, with your local data protection authority.
11. Children
Ewa GlowUp is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with data, contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy. The date at the top shows the latest version. We will notify you by email or in the app before any significant change takes effect, especially any change to how we use Google user data.
13. Contact
Kemi Stratech — Ewa GlowUp
Registration number: 02026190798681
Address: [FULL ADDRESS], Benin
Email: support@ewaglowup.com
Website: https://ewaglowup.com