Privacy Policy.

Tuquan Ltd ("Tuquan", "we", "us", or "our") is incorporated in Ghana and operates the Tuquan mobile application and website (collectively, the "Platform"). We are committed to protecting the personal data of our users in accordance with applicable data protection law, including Ghana's Data Protection Act, 2012 (Act 843) and, where applicable to users in the European Economic Area, the General Data Protection Regulation (EU) 2016/679 ("GDPR").

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it. Please read it carefully.

Tuquan Ltd is the data controller responsible for your personal data. Our designated data protection contact can be reached at support@tuquan.com.

3.1 Data You Provide Directly

• Account registration data: name, email address, and password.
• Travel profile data: passport nationality, preferred language, preferred currency, travel interests, trip goals, and pace preferences.
• User-generated content: saved itineraries, trip customisations, and calendar export preferences.

3.2 Data Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type, and app version.
• Usage data: pages viewed, features used, actions taken within the Platform, and session duration.
• Location data: approximate location inferred from IP address for currency detection and destination suggestions. We do not access precise GPS location without explicit consent.

3.3 Data from Third Parties

Where you use third-party calendar integrations (e.g. Google Calendar, Apple Calendar), we receive only the data necessary to perform the export function. We do not retain your calendar credentials.

We process your personal data for the following purposes and on the legal bases described below.

4.1 To provide and operate the Platform

Legal basis (Ghana DPA): Necessity for performance of our service. Legal basis (GDPR): Article 6(1)(b) — performance of a contract.

This includes creating and managing your account, generating personalised itineraries, displaying visa and budget information, and enabling calendar export.

4.2 To improve and develop the Platform

Legal basis (Ghana DPA): Legitimate interest. Legal basis (GDPR): Article 6(1)(f) — legitimate interests.

We use aggregated and anonymised usage data to understand how users interact with Tuquan, identify issues, and improve features.

4.3 To communicate with you

Legal basis (Ghana DPA): Consent or performance of service. Legal basis (GDPR): Article 6(1)(a) or (b).

We may send you service-related notifications (e.g. account confirmations, security alerts) and, with your consent, promotional communications about new features.

4.4 To comply with legal obligations

Legal basis (Ghana DPA & GDPR): Compliance with law. We may process your data where required by applicable law or court order.

We do not sell your personal data. We may share data with the following categories of third parties, strictly for the purposes described in this Policy:

• Service providers: cloud hosting, analytics, and email delivery partners who process data on our behalf under data processing agreements.
• Visa and travel data providers: to retrieve up-to-date visa and destination information. We share only the minimum data necessary.
• Currency API providers: to retrieve live exchange rate data. No personal data is shared for this purpose.
• Calendar platforms: solely to fulfil export requests you initiate.
• Legal authorities: where required by law, court order, or to protect the rights and safety of Tuquan or its users.

Your data may be transferred to and processed in countries outside Ghana, including countries in the European Economic Area and the United States. Where such transfers occur, we ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant data protection authorities or equivalent measures.

We retain your personal data for as long as your account is active or as necessary to provide the Platform. If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by applicable law or for legitimate legal defence purposes.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. All data transmitted between your device and our servers is encrypted in transit using TLS. However, no system is completely secure and we cannot guarantee absolute security.

Depending on your location and applicable law, you may have the following rights in relation to your personal data:

• Right of access: to receive a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your personal data in certain circumstances.
• Right to restriction: to request that we limit how we use your data.
• Right to data portability: to receive your data in a structured, machine-readable format (GDPR users).
• Right to object: to object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at support@tuquan.com. We will respond within 30 days. EEA users also have the right to lodge a complaint with their local data protection supervisory authority. Ghana-based users may contact the Data Protection Commission of Ghana.

Our Platform uses essential cookies and similar technologies to enable core functionality such as maintaining login sessions. We may also use analytics cookies to understand usage patterns. You can control cookie preferences through your browser or device settings. Disabling essential cookies may affect Platform functionality.

Tuquan is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at support@tuquan.com and we will take steps to delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Platform. The effective date at the top of this document will reflect the most recent revision. Continued use of the Platform after the effective date constitutes acceptance of the updated Policy.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact:

Tuquan Ltd
Email: support@tuquan.com
Jurisdiction: Ghana