Privacy Policy

1. Introduction

IhsanPower (“we”, “us”, “our”) operates a smart electricity recharge and energy management platform for Nigerian prepaid meters and related energy profiles. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the choices available to you.

We process personal data in line with the Nigeria Data Protection Regulation (NDPR) and applicable Nigerian laws. By creating an account or using our services, you acknowledge this policy.

2. Data we collect

Depending on how you use IhsanPower, we may collect:

• Account information: name, email address, phone number, password (stored in hashed form), and account role.
• Meter and energy data: meter numbers, disco/provider, meter type, validation results, consumption estimates, solar/generator/hybrid profile details, and community or shared-meter information you provide.
• Transaction data: wallet balance, funding history, token purchases, receipts, payment references, and provider transaction IDs.
• Communications: notification preferences and messages we send by email or SMS (for example token receipts, wallet alerts, and password reset links).
• Technical data: IP address, browser type, device information, session identifiers, audit logs, and error/diagnostic records needed to secure and operate the platform.

3. How we use your data

We use personal data to:

• Provide core services such as meter validation, token purchase, wallet funding, and account management.
• Send service-related notifications you have enabled (email, SMS, and in-app alerts).
• Improve security, detect fraud, troubleshoot errors, and maintain audit trails.
• Comply with legal obligations and respond to lawful requests from authorities.
• Develop analytics and energy insights based on your usage patterns within the platform.

We do not sell your personal data.

4. Legal bases for processing

• Contract: processing needed to deliver the services you request.
• Consent: for optional communications and non-essential cookies where applicable.
• Legitimate interests: securing the platform, preventing abuse, and improving reliability.
• Legal obligation: record-keeping, tax, or regulatory requirements where applicable.

5. Third-party service providers

We share limited data with trusted processors only as needed to operate IhsanPower, including:

• Electricity vending partners (for example VendPower) — meter numbers, amounts, and phone numbers for validation and token delivery.
• Payment gateways (for example Flutterwave or Paystack) — payment amounts and references for wallet funding.
• Email and SMS providers (for example SendGrid and Termii) — contact details and message content for notifications you enable.
• Infrastructure providers — hosting, database, logging, and monitoring services that store or process data on our behalf.

These providers are required to protect your data and use it only for the services they provide to us.

6. Cookies and similar technologies

We use cookies and local storage for essential functions such as keeping you signed in, protecting forms, and remembering your cookie preferences. Our Progressive Web App (PWA) may cache static assets in your browser for faster loading and limited offline access.

For details on each cookie and how to manage your choices, see our Cookie Policy.

7. Data retention

We retain personal data for as long as your account is active or as needed to provide services, resolve disputes, enforce agreements, and meet legal requirements. Transaction and audit records may be kept longer where required for accounting, fraud prevention, or compliance.

8. Security

We apply technical and organisational measures including HTTPS encryption in transit, AES-256 field-level encryption for selected sensitive data at rest (such as meter numbers, addresses, and payment references), secure session handling, access controls, password hashing, and audit logging. No method of transmission or storage is completely secure; please use a strong, unique password and keep your login details confidential.

9. Your rights

Under the NDPR, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to legal and contractual limits.
• Object to or restrict certain processing activities.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

You can update profile details in the app under Profile & Settings. For other requests, contact us using the details below.

10. Children

IhsanPower is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us so we can take appropriate action.

11. International transfers

Some of our service providers may process data outside Nigeria. Where this occurs, we take steps to ensure appropriate safeguards are in place consistent with applicable data protection requirements.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change when we do. Continued use of IhsanPower after changes take effect constitutes acceptance of the revised policy.

13. Contact us

For privacy questions or to exercise your rights, contact:

IhsanPower Data Protection
Email: privacy@ihsanpower.com