Privacy Policy

Ngoma ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our streaming service at ngoma.tv and related applications.

This policy is prepared in accordance with the Ghana Data Protection Act, 2012 (Act 843) and administered by the Data Protection Commission of Ghana.

Ngoma is the data controller responsible for your personal data. For questions about data protection, contact our Data Protection Officer at [email protected].

We collect the following categories of personal data:

Account Data

• Mobile phone number (used for authentication via OTP)
• Display name (optional, set by you)

Viewing Data

• Content viewed, playback position, and duration
• Video quality and streaming bandwidth
• Watchlist and download history

Payment Data

• Mobile money phone number (for payment processing)
• Subscription plan and payment history
• We do not store your mobile money PIN or wallet balance

Device & Technical Data

• Device type and browser version
• Network type (2G/3G/4G/WiFi)
• Approximate location (derived from network, not GPS)

We process your data for the following purposes:

• Service delivery: authenticate your account, process payments, deliver content
• Personalization: recommend content based on viewing history and preferences
• Analytics: understand how the Service is used to improve quality and performance (only with your consent)
• Communication: send OTP codes, subscription reminders, and service updates via SMS
• Legal compliance: comply with Ghanaian law, including content regulation and tax requirements

We use analytics to monitor service performance and improve your experience. Analytics data includes playback events, session quality metrics, and feature usage patterns.

Analytics are only active if you provide consent. When you first visit Ngoma, we will ask for your permission before collecting analytics data. You can change your preference at any time in Settings.

The Service uses localStorage and IndexedDB for essential functions (authentication, offline content, preferences). These are required for the Service to function and are not used for tracking.

We share your data with the following categories of third parties:

• Payment providers: MTN Mobile Money (MoMo), Vodafone Cash, and Telecel Cash process your subscription payments. They receive your mobile money phone number and payment amount.
• Infrastructure providers: Cloudflare provides hosting and content delivery. They process technical data (IP address, request metadata) as a data processor.
• Legal authorities: We may disclose data when required by Ghanaian law or court order.

We do not sell your personal data to third parties.

We retain your data for the following periods:

• Account data: until you delete your account, plus 30 days for recovery
• Viewing history: 12 months from date of activity
• Payment records: 7 years (required by Ghana Revenue Authority)
• Analytics data: 6 months, then aggregated and anonymized

We implement appropriate technical and organizational measures to protect your data, including encrypted transport (HTTPS/TLS), secure token-based authentication, and access controls. Authentication tokens are stored in session storage and are cleared when you close your browser or log out.

On logout, we clear all locally stored data including authentication tokens, cached content, and IndexedDB records.

Under the Ghana Data Protection Act, 2012 (Act 843), you have the following rights:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your account and associated data
• Objection: object to processing of your data for analytics purposes
• Withdrawal of consent: withdraw analytics consent at any time via Settings or the consent banner

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

The Service is not intended for children under 13. We do not knowingly collect data from children under 13. If you are a parent and believe your child has provided us with personal data, contact us at [email protected].

Parental controls (PIN protection and content rating restrictions) are available in Settings for users aged 13-17.

Your data may be processed on servers outside Ghana (via Cloudflare's global network). We ensure appropriate safeguards are in place for any international transfers in compliance with Act 843.

We may update this Privacy Policy from time to time. We will notify you of material changes via the Service or SMS. The "Last updated" date at the top of this page indicates when the policy was last revised.

For privacy questions or to exercise your rights:
Email: [email protected]
Location: Accra, Ghana

If you are not satisfied with our response, you may lodge a complaint with the Data Protection Commission of Ghana at dataprotection.org.gh.