Privacy Policy for Hypa

Last Updated: 16 May, 2025

Hypa (“we,” “us,” or “our”) respects your privacy and is committed to protecting the personal data of all users, including gym owners, staff, and members.
This Privacy Policy explains how we collect, use, disclose, and protect your information in accordance with the Data Protection Act, 2012 (Act 843) of the Republic of Ghana.
By using our service, you consent to the terms of this Privacy Policy.

1. Information We Collect

We collect the following categories of personal data:

  • Gym Owners and Staff
    • Full name
    • Email address
    • Business details (e.g., gym name, address)
    • Payment details (via third-party processors like Paystack)
  • Members (Gym Clients)
    • Full name
    • Contact Information
    • Membership plan details
    • Attendance and class bookings
    • Payment history
  • Automatically Collected Data
    • Device information
    • Browser type
    • IP address
    • Cookies and usage data for analytics

2. Legal Basis for Processing

We collect and process data in compliance with Section 20 of Ghana's Data Protection Act under the following lawful bases:

  • Performance of a contract
  • Consent (especially for marketing or analytics)
  • Legal obligation
  • Legitimate interest (e.g., fraud prevention)

3. How We Use Your Data

Your personal data may be used to:

  • Provide and improve our services
  • Manage subscriptions and class bookings
  • Process payments via secure third-party platforms
  • Communicate with users for support or updates
  • Send notifications or alerts related to gym activities
  • Comply with applicable laws and regulations

4. Data Sharing and Disclosure

We may share your data:

  • With third-party service providers (e.g., Paystack for payments) under strict data protection agreements
  • If legally required by courts or regulatory authorities
  • In the event of a business acquisition or merger (with prior notice)

We do not sell or rent personal data to third parties.

5. Cross-Border Data Transfers

If your data is transferred outside Ghana (e.g., to servers hosted in the EU or USA), we ensure appropriate safeguards, such as standard contractual clauses or equivalent protections, in compliance with Sections 42-44 of the Act.

6. Your Rights Under Ghanaian Law

You have the following rights:

  • Right to access your personal data
  • Right to request correction or deletion
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to complain to the Data Protection Commission of Ghana

To exercise these rights, please contact us at support@hypagh.com

7. Data Retention

We retain personal data only as long as necessary for the purposes stated above or as required by law.
Inactive data may be anonymized or securely deleted after a reasonable retention period.

8. Security

We implement appropriate technical and organizational measures to safeguard personal data against unauthorized access, loss, or misuse.
These include encryption, secure storage, and access controls.

9. Children's Privacy

Our services are not intended for children under the age of 16. We do not knowingly collect personal data from minors without verified parental or guardian consent.

10. Updates to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “last updated” date and notify users as required.

11. Contact Us

If you have questions or concerns about this policy or your data, please contact:

Hypa Data Protection Officer
Email: kwabena@hypagh.com

Want early access and priority onboarding?

You'll be first to know when Hypa launches — and you'll help shape it.