Last updated: 14 November 2026 (draft)
Who we are
Ofra is an app that crèches and nursery schools use to run their day and keep parents informed. Ofra is provided by Thompson Projects Ltd, a company registered in Ghana under number CS089500421, with its registered office at c/o MEST, 19 Banana Street, East Legon, Accra, Ghana (GPS GA-448-0773) ("Ofra", "we", "us").
We are registered with the Data Protection Commission of Ghana under the Data Protection Act, 2012 (Act 843). Our registration number is [to confirm].
Schools and Ofra
Most of the information in Ofra is about children at a particular school. That school decides what it records and why, so the school is the data controller for it. Ofra stores and processes it on the school’s instructions, as a data processor.
Ofra is the data controller for a smaller set of information: the accounts people use to sign in, how the app is used, and our own dealings with schools, such as contracts and billing.
If you are a parent and have a question about what your child’s school records, the school is usually the best first contact. You can also contact us and we will help or pass your request on.
What we collect
| About | Information | Where it comes from |
|---|---|---|
| Children | Name, date of birth, photo, room, attendance and pickup times, daily diary entries (feeds, sleep, nappies, meals, activities), milestones, photos and videos taken at school, allergies, medical notes, medicines and emergency contacts. | The school and the child’s parents or guardians. |
| Parents, guardians and approved pickup adults | Name, phone number, email address, relationship to the child, messages with the school, fee and payment records. | The school, and you when you set up or update your account. |
| School staff | Name, role, room, phone number or email address, and the entries they make in the app. | The school, and staff themselves. |
| Everyone who uses the app | Device type, app version, sign-in times, error reports and approximate usage, collected so we can keep Ofra working and secure. | Your device, automatically. |
We do not ask for or collect a child’s location, and the app does not track where parents or staff are.
How we use it
- To provide Ofra to schools and families: attendance, safe pickup, diaries, photos, messages, notices and fees.
- To send the notifications and text messages a school or user has asked for, such as invitations, sign-in codes and fee reminders.
- To keep accounts and records secure, prevent misuse and investigate problems.
- To support schools and families who contact us.
- To improve Ofra, using usage information that does not identify children.
- To meet our legal obligations, such as keeping financial records.
We rely on the school’s instructions and our contract with the school to provide the service; on the consent of parents where the law requires it; on our legitimate interests in keeping Ofra secure and working well; and on our legal obligations. [Lawyer to confirm the lawful bases under Act 843, sections 18 to 20, for each use.]
Children’s information
Ofra is used by adults: school staff and parents. Children do not have accounts. Because so much of what Ofra holds is about very young children, we apply extra care:
- A child’s diary, photos and records are visible only to that child’s school and to the parents and guardians the school has linked to the child.
- Photos that include other children are shared only as the school’s settings allow.
- We never use children’s information for advertising, and we never sell it.
- We do not use children’s photos or records to train artificial intelligence models.
Act 843 treats information about a child’s health as special personal data. Schools record allergies and medical notes so that staff can keep children safe, and we process them only for that purpose. [Lawyer to confirm the consent wording schools collect from parents.]
Who we share it with
We share information only as needed to run Ofra:
- Within a school: staff see the children in their school, according to the permissions the school sets.
- With a child’s family: parents and guardians linked to a child see that child’s records.
- With service providers who host our systems, send text messages and emails, and process payments. They may use the information only to provide their service to us. Our website is hosted by Render. Our app hosting, text message and payment providers are [to confirm].
- Where the law requires it, for example to respond to a valid court order, or to protect a child from serious harm.
If Ofra is sold or merged, information would pass to the new owner only under the same protections, and we would tell schools first.
Where it is stored
Our website is hosted by Render. Where the app’s data is stored, and with which provider, is [to confirm]. Where information is stored or processed outside Ghana, we use providers and contract terms that protect it to the standard Act 843 requires.
How long we keep it
A school decides how long to keep its children’s records while it uses Ofra. When a child leaves, the school can archive or delete their records. When a school stops using Ofra, we give it a copy of its data on request and then delete it within 90 days [to confirm], except where we must keep financial records for longer by law.
When a parent deletes their account, we remove their sign-in details and personal profile. Records the school must keep about a child stay with the school.
Keeping it safe
- Information is encrypted while it travels between the app and our servers, and while it is stored.
- Each school’s records are kept separate, and staff access is limited by role.
- Sign-in uses one-time codes sent to a verified phone number or email address.
- We keep access logs and review who at Ofra can see production data.
If a breach affects your information, we will tell the school, the Data Protection Commission and, where required, the people affected, as Act 843 requires.
Your rights
Under Act 843 you can ask:
- whether we hold information about you or your child, and for a copy of it;
- for information that is wrong or out of date to be corrected;
- for information to be deleted where there is no longer a reason to keep it;
- us to stop using your information for a particular purpose, including any direct marketing.
Parents and guardians can make these requests on behalf of their child. Write to us at the address below. We will reply within 21 days [to confirm]. If the information is held for a school, we will work with the school to answer you.
Contact and complaints
Email privacy@ofra.app or write to Thompson Projects Ltd, c/o MEST, 19 Banana Street, East Legon, Accra, Ghana. Our data protection supervisor is [to confirm].
If you are not satisfied with our answer, you can complain to the Data Protection Commission of Ghana at dpc.gov.gh.
Changes to this notice
If we make a significant change, we will tell schools and show a notice in the app before it takes effect. The date at the top shows when this notice last changed.