Privacy Policy

1. Introduction

Duaba Forge ("Duaba Forge", "we", "us", or "our") is a full-service app development agency and part of the DuabaLabs ecosystem. We respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, disclose, and safeguard your information when you use our website, engage us for development services, or interact with applications we build on behalf of our clients.

This Policy applies to all services provided by Duaba Forge, including but not limited to:

• Custom app development services
• Fintech application development
• EdTech platform development
• SaaS architecture and development
• Mobile application development
• API & backend system development
• Project management and consultation
• Client-deployed applications built by Duaba Forge

By using our services or visiting our website, you agree to the practices described in this Policy.

2. Who We Are

Duaba Forge is an app development agency headquartered in Ghana, providing:

• Full-stack web and mobile application development
• Fintech-enabled application engineering
• Educational technology platform creation
• SaaS product architecture and build
• API design, backend engineering, and cloud infrastructure
• Ongoing maintenance and support services

Depending on the engagement, Duaba Forge may act as a Data Controller (e.g., for our own website visitors) or as a Data Processor on behalf of our clients whose applications we develop and maintain.

3. Information We Collect

3.1 Information You Provide Directly

Contact & Inquiry Information

• Full name, email address, phone number
• Company or organisation name
• Project requirements and descriptions

Client Engagement Information

• Business registration details, billing addresses
• Payment and invoicing information
• Project documentation and communication records

3.2 Information Collected Automatically

• IP address, device type, operating system, browser type
• Session logs and access timestamps
• Clickstream data and page interaction analytics

3.3 Information From Third Parties

• Payment processors and accounting platforms
• Analytics providers (e.g., Google Analytics)
• Referral and partnership sources

4. How We Use Your Information

5. Legal Basis for Processing

We process personal data under: consent, contractual necessity (to deliver our development services), legal obligation, and legitimate interest. For EU/UK data subjects, processing complies with GDPR legal bases.

6. Data Sharing & Disclosure

We do not sell your personal data. We may share it with:

• Service providers: hosting, analytics, payment processors
• DuabaLabs ecosystem: shared infrastructure within the DuabaLabs group
• Legal requirements: when required by law, regulation, or legal process
• Business transfers: in connection with a merger, acquisition, or asset sale

7. Client-Built Applications

When Duaba Forge builds applications for clients, the client typically acts as the Data Controller and Duaba Forge acts as a Data Processor. In these cases:

• Data processing is governed by the client's own privacy policy
• A Data Processing Agreement (DPA) may be executed between Duaba Forge and the client
• End-user data in client applications is processed according to the client's instructions
• Duaba Forge implements appropriate technical and organisational security measures

8. Cookies & Tracking Technologies

We use essential cookies and analytics cookies on our website. You may disable cookies in your browser settings, though this may affect your experience.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Client project data is retained according to the terms of each engagement.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Request data portability
• Withdraw consent at any time

To exercise any of these rights, contact us at info@duabaforge.com.

11. Security

We implement industry-standard technical and organisational measures to protect personal data, including encryption in transit and at rest, access controls, secure development practices, and regular security reviews. No method of transmission or storage is 100% secure, but we strive to protect your information.

12. International Data Transfers

As a globally operating agency, your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where applicable.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated Policy.

14. Contact Us

For questions about this Privacy Policy or our data practices, contact us at: