Privacy Policy
Last updated: April 2026. Operated by JennsForge Limited.
Introduction
Xend A Smile is operated by JennsForge Limited ("we", "us", "our"). This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and how we keep it safe.
By using the Xend A Smile platform, you agree to the collection and use of information described in this policy. If you do not agree, please do not use the platform.
This policy applies to all users of xendasmile.com, including campaign creators, donors, and visitors.
What information we collect
When you create an account
- Full name
- Email address
- Phone number (optional at signup, required for withdrawals)
- Password (stored as a bcrypt hash, never in plain text)
When you donate
- Name as entered (or Anonymous if selected)
- Phone number (for Mobile Money payments)
- Payment method used
- Amount donated
When you submit KYC
- Government-issued ID photo (Ghana Card, Passport, Voter ID, or Driver's Licence)
- A selfie photograph
- Full legal name
- Date of birth
Automatically collected
- IP address (for rate limiting and fraud prevention)
- Browser and device type
- Pages visited and time spent (for platform improvement)
- Session cookie
How we use your information
- To create and manage your account
- To process donations and withdrawals through our secure payment provider
- To verify your identity (KYC) before allowing withdrawals
- To send you notifications about your campaigns or donations via email and SMS
- To detect and prevent fraud and unauthorised access
- To improve the platform based on how it is used
- To comply with applicable Ghanaian law and financial regulations
We never sell your personal data to third parties. We never use your data for advertising.
Public information and the Transparency Ledger
Each campaign page displays certain information publicly: the campaign title, story, cover image, and the Transparency Ledger.
The Transparency Ledger records every donation received and every withdrawal made. Donor names appear as entered at the time of donation. If you selected Anonymous, your name shows as Anonymous on the ledger.
Phone numbers are never displayed publicly on any campaign page or ledger entry.
Transparency Ledger entries are permanent by design. They cannot be edited or deleted by anyone, including us. This is the core of how Xend A Smile builds donor trust.
KYC documents and identity verification
Documents submitted for KYC verification are stored in an encrypted, private storage bucket. They are not accessible to the public or to campaign creators.
Only authorised Xend A Smile administrators can access KYC documents, and only for the purpose of reviewing your verification submission.
Documents are retained for as long as your account is active and for a period after deletion as required by applicable Ghanaian financial regulations.
KYC documents are never shared with third parties except where required by law.
Third-party services
We use the following third-party services to operate the platform. Each has its own privacy policy:
| Provider | Purpose |
|---|---|
| Secure Payment Provider | Payment processing for Mobile Money, card, and bank transfers |
| Supabase | Database, authentication, and file storage |
| Resend | Transactional email delivery |
| Africa's Talking | SMS notifications and OTP delivery |
| Vercel | Platform hosting and deployment |
| Cloudflare | Content delivery and DDoS protection |
Security
We take the security of your data seriously. Here is how we protect it:
- All data in transit is encrypted using HTTPS/TLS
- Passwords are hashed using bcrypt with a minimum cost factor of 12
- Database access is controlled by Row Level Security (RLS), meaning users can only read and write their own data
- KYC documents are stored encrypted at rest in private storage
- Payout details are stored encrypted in the database
- Login attempts are rate-limited; repeated failures trigger a temporary account lock
- We never store card numbers. All card processing is handled by our payment provider on PCI-compliant infrastructure
Your rights
You have the following rights regarding your personal data:
- Access: you can request a copy of the personal data we hold about you
- Correction: you can update your name, email, and phone number from your dashboard settings
- Deletion: you can request deletion of your account and personal data by emailing privacy@xendasmile.com
- Opt out of notifications: you can manage email and SMS preferences from your dashboard
Transparency Ledger entries cannot be deleted. This is by design to preserve the integrity of the public donation record. Deleting your account will anonymise your name on ledger entries.
How long we keep your data
Account information is kept for as long as your account is active.
If you delete your account, we remove your personal details within 30 days. Anonymised transaction records may be retained for financial record-keeping as required by law.
KYC documents are retained for up to 5 years after account closure as required by Ghanaian anti-money laundering regulations.
Contact us
If you have any questions about this Privacy Policy, or if you want to exercise any of your rights, please contact us:
Email: privacy@xendasmile.com
JennsForge Limited, Accra, Ghana
By using Xend A Smile, you agree to this Privacy Policy.