Privacy Policy

To open an account: your email address, a password, and a display name.

To verify you: your phone number, full name, date of birth, gender, residential address, your Ghana Card number, and photographs of your ID document and your face. Verification is required before you can receive payouts.

To move money: your Mobile Money number or bank account details, and the name the network holds against that account.

From your trades: the terms you agree, amounts, messages you exchange with the other party, delivery evidence you upload, and a timestamped record of each event on the trade.

Automatically: device and session information used to keep your account secure, and records of sign-ins.

To operate the escrow service you asked us to operate. To verify identity, which is both a legal obligation and the thing that makes trading with a stranger workable. To detect fraud and money laundering. To resolve disputes using a record rather than an argument. To meet reporting duties we owe regulators.

Our licensed payment partners, who collect and disburse funds and who necessarily receive the payment details for your trade. Our identity verification partner, who checks your Ghana Card against the National Identification Authority. The other party to a trade sees your display name, your verification status, your completed-trade count, and anything you send them in chat — not your address, ID number, phone number or payout details.

We share with law enforcement or a regulator where we are legally required to. We do not sell your data and we do not use it for advertising.

Passwords and transaction PINs are stored as Argon2 hashes and are not recoverable, by us or anyone else. Session tokens are stored hashed. Your ID documents are held in encrypted object storage that is not publicly reachable; staff access is through short-lived links and is logged.

We keep a one-way hash of your Ghana Card number so the same card cannot be used to verify two different accounts. We also retain the card number itself, because our verification partner and our regulatory obligations require it.

Records connected to a financial transaction, including identity records, are retained for the period required by Ghanaian anti-money-laundering law. That obligation outlives your account, so closing your account does not delete your trade history.

Under Ghana's Data Protection Act, 2012 (Act 843), you can ask what we hold about you, ask us to correct it, and ask us to delete it. Email support@thetruevault.com and we will respond within 30 days.

Being straight with you about deletion: we cannot delete everything. Identity and transaction records that AML law requires us to keep will be retained even after you ask, and even after your account closes. What we can do is remove your data from active use and stop processing it for anything other than those legal obligations.

If we change this notice in a way that affects you, we will tell you in the app or by email rather than quietly updating the date at the top.