Who we are
Backmi is run by ModularPath Systems, Accra, Ghana. We decide how your personal data is used for Backmi and are responsible for it. Contact us at info@modularpath.dev.
The short version
- Your profile is closed. Nobody sees it unless you give them a PIN, show your QR code, or say yes to a company.
- We never store a picture of your Ghana Card or your selfie: only the result of the match.
- Hirers you share with see what your referees confirmed, never your referees' names or phone numbers.
- We don't sell personal data, and Backmi has no public search.
What we collect
If you are a worker: your phone number and name; your trade, area and a short description you write; the result of your Ghana Card check (whether it matched, the type of check and the match score); the past employers you add (their name, phone number, the employer and the dates); what they answer; documents you upload, such as a police report or certificate; ratings from jobs on Backmi; and a record of every change to your profile and who caused it.
If you are a referee: the name and phone number the worker gave us, your answers, and when you answered.
If you use Backmi for a company: your phone number or email, your company's details, the candidates you ask to check (name, phone number, job) and the reports you receive.
To stop fake references: the phone model and system version of the worker's app and of the referee's browser, and a scrambled code made from the network address (not the address itself). We keep these for 90 days.
When someone opens a shared profile: that it was opened, and whether a PIN was right or wrong, so we can block guessing. A small cookie remembers that your browser has already opened a PIN, so reloading doesn't use it up.
When you write to us: the name, email or phone number and message you give in the contact form or “Message us”, and our answers. If you join the newsletter, your email and which list you chose. “Message us” can remember your conversation link in your browser so you can find it again.
Why we use it
- To run Backmi: build and score profiles, send reference requests and sign-in codes, and show profiles to the people you choose. This is the service you ask us for.
- To share your profile with a company or household, only after your yes or with your PIN: your consent, which you can give one request at a time.
- To keep Backmi honest: spotting fake references and guessed PINs protects workers, referees and hirers.
- To meet our legal duties.
Who sees it
- Hirers you choose: a household with your PIN or QR code, or a company you said yes to. They see your checks and who confirmed them, the employers and dates, what referees said, police clearance and certificate status, job ratings and your score. A company keeps the report as it was when you said yes.
- Our service providers, who process data for us under contract: Supabase (database and sign-in), Cloudflare (website hosting), Dojah (Ghana Card checks with the National Identification Authority), Arkesel (text messages), and Paystack (payments, when available). Some of them store data outside Ghana.
- Authorities, only where the law requires it.
How long we keep it
- Your profile and its history, until you ask us to delete your account.
- Fraud-check device records: 90 days.
- Reports a company received: deleted from the company's account after a set period, 90 days today. The record that a check happened stays.
- Messages you send us through the contact form or “Message us”: kept with the conversation so we can answer and look back on it. Ask and we delete it.
- A record of each text we send you (when, what kind, whether it went, with your number partly hidden; never the words): 90 days.
- Companies that asked about Backmi and never signed up: deleted 12 months after we last spoke.
- The newsletter: your email until you leave, which every email lets you do in one tap.
- “Did this help?” answers and searches in the help centre: kept without your name or number.
Your rights
Under Act 843 you can ask us to show you the data we hold about you, correct it, delete it, or stop using it, and you can withdraw consent you gave. Email info@modularpath.dev with the phone number on your account. If you're not happy with our answer, you can complain to the Data Protection Commission of Ghana.
Keeping it safe
Data travels encrypted. Access is limited by rules in the database itself, so each person can only reach what they are allowed to. PINs and reference links are stored scrambled and stop working after use or after a day (PINs) or 14 days (reference links).
Age
Backmi is for people aged 18 and over.
Changes
When we change how we use personal data, we update this notice and the date at the top, and tell you in the app when the change matters to you.