This policy explains how WIT Link and WIT Ltd handle information when you browse or use the service.
Last updated: 26 October 2026. For privacy questions, email info@witconsultancy.org.
Information we handle
Depending on how you use WIT Link, we handle your email address and verification status, Google account identifier and basic profile claims when you choose Google sign-in, your display name and language, and the preferences you choose. If you create a provider profile, we also handle the services and skills you list, experience, the Region, City/Town and Neighbourhood you select, availability, profile photo, and any contact details you choose to provide. The optional phone number is not included in public provider search results.
Identity and provider verification
Providers may upload identity images and supporting profile evidence for review. These files are stored privately in Cloudflare R2 and are not shown in public search. Only authorized WIT Link reviewers can access them for verification, and access is recorded. Approved public profiles show only the public profile fields described above, not identity documents.
Directory, connections and safety records
We process searches and profile views to return directory results; recorded client-provider connections and outcomes; ratings linked to eligible connections; and reports and moderation decisions. This information supports the directory, verified-feedback labels, safety review and abuse prevention. We do not publish private reports or identity evidence.
Authentication and security data
Email sign-in uses a one-time verification code. The code is sent to your email and the Worker stores a salted hash, not the code itself. Session tokens are stored as hashes on the server and the mobile app keeps its session in secure device storage. To limit abuse, we also use short-lived, one-way hashes of email or network identifiers for rate limits. Google verifies Google sign-in; WIT Link does not receive your Google password.
Notifications and device data
If you allow push notifications, WIT Link stores the Expo push token and platform for the signed-in device so it can deliver account and activity notices. Expo Push Service routes Android notifications through Firebase Cloud Messaging/Google. You can turn off device notifications in Android settings or sign out to unregister the current device.
Optional product analytics
Optional product analytics are off unless you opt in. When enabled, WIT Link records only daily aggregate counts for a small set of events, such as viewing search results or a provider profile. Raw search text, selected location, provider IDs and event properties are not included in those analytics counts. You can change this preference in My activity. Limited diagnostic events use allowlisted screen/action and error categories and are also consent-gated.
How information is used and shared
WIT Link uses information to provide sign-in, search, profiles, verification, connections, ratings, reports, account controls, notifications, security and support. Cloudflare provides the Workers, D1 database, R2 storage and email delivery that run the Cloudflare version of the service. Google provides Google sign-in and Android push delivery; Expo routes push notifications. Approved provider profile fields are public by design. We do not sell personal information or use it for third-party advertising. These service providers process data to provide their services and may process it in countries outside Cameroon.
Retention and account deletion
You can request account and data deletion from My activity in the app or on the web. After confirmation, WIT Link disables sign-in and removes a provider listing from public search immediately. The deletion processor then removes account identity, profile, uploaded media and verification files, connections, ratings, notifications and device tokens; limited audit records are anonymized to preserve security and moderation history. If an object-storage deletion temporarily fails, the request remains queued for retry. Daily aggregate analytics are not linked back to an account. To start a request on the web, use the Delete account page and sign in.
Security, children and policy changes
WIT Link uses HTTPS, access controls, hashed authentication secrets and restricted access to private evidence. No online service can guarantee absolute security. WIT Link is a general local-services directory and is not designed to knowingly collect personal information from children. We may update this policy when the service or its data practices change; the current version is available in the app and on the WIT Link website.
Request account deletion
Sign in with the email address or Google account linked to your WIT Link account. Open My activity and choose Request account and data deletion. WIT Link disables sign-in and removes provider listings from public search immediately, then deletes or anonymizes associated account data. If you have questions, email info@witconsultancy.org.
Sign in to request deletion