Privacy Policy
This policy describes how Umeme Plus ("we", "our", "the app") handles your information when you use our electricity token generation and submeter management service.
Umeme Plus is designed to help you generate electricity tokens (for submeters only), track consumption, and register new submeters. The app is free to use for token generation – users pay only a service charge to Umeme Plus (via Google Pay or Apple Pay) to keep the app running, maintain infrastructure, and provide support. Tokens are strictly issued for submeters (not main meters).
We take your privacy seriously. Below we explain what data we collect, why we collect it, and how we protect it.
1. Information we collect
We collect only the minimal information necessary to provide and improve the service. no images, no photos, no files
Account information (required for registration)
- Email address – used for login, password reset, and important service notifications.
- Password – stored securely using hashing; we never see or store plain-text passwords.
- Full name (optional) – you may provide your name to personalise your profile; it is not required.
Meter & submeter information
- Sub Meter Number – the unique identifier of the submeter for which you generate tokens.
- Sub Meter Username – a label or name you assign to a submeter (e.g., "Kitchen", "Workshop") to help you manage multiple devices.
- Main Meter Number – the main electricity meter number associated with your property (collected to ensure regulatory compliance and to link submeters correctly).
- Electricity consumption history – readings you input or that are generated via token usage (to help you track usage per submeter).
- Token transaction records – date, amount (kWh), and service charge paid to Umeme Plus.
Technical & usage data
- Device model, OS version, app version – to optimise performance and fix bugs.
- Crash logs and basic analytics – collected to improve stability (Firebase Crashlytics or similar). No advertising ID or location data.
Payment information (important – we do NOT collect card details)
- All payments (service charges) are processed via Google Pay or Apple Pay. Umeme Plus never receives or stores your credit/debit card numbers or bank details. The payment is handled entirely by the platform's secure payment processor, and we only receive a confirmation of payment along with the transaction ID and amount.
- Transaction history – we retain a record of the service charge amount, date, and the associated token for accounting and support purposes.
We do NOT collect: photos, contacts, location (GPS), microphone, biometric data, nor any card information.
2. How we use your information
- To create and manage your account, and allow secure login.
- To generate valid electricity tokens for your registered submeters (using Sub Meter Number, Sub Meter Username, Main Meter Number).
- To display your consumption history and submeter details.
- To calculate and process service charges (paid via Google Pay/Apple Pay). These charges fund app maintenance, server costs, and customer support. The token itself is free – you only pay the service fee to Umeme Plus.
- To communicate with you about service updates, payment confirmations, or support requests.
- To analyse aggregated, non-identifiable trends to improve the app.
3. Legal basis for processing (EEA users)
If you are in the European Economic Area, our processing of your personal data is based on the following:
- Contract performance: Account creation and token generation are necessary to provide our service.
- Legitimate interests: Analytics and crash reporting help us maintain a secure and functional app.
- Consent: Where required, we will ask for your consent before collecting any sensitive data (though we currently collect none).
4. Data sharing & third parties
We do not sell, rent, or trade your personal information. We only share data with trusted partners who help operate the app, under strict data processing agreements:
- Authentication provider (e.g., Firebase Auth) – to handle account sign-up and login securely.
- Cloud database & hosting (e.g., Firestore, AWS) – stores your account and submeter data encrypted at rest.
- Payment processors (Google Pay / Apple Pay) – when you make a service charge payment, you interact directly with Google/Apple. We only receive a confirmation of success/failure and a transaction ID. We never have access to your card details.
- Analytics / crash reporter (optional, anonymised) – helps us fix issues. You can opt out via device settings.
We may also disclose information if required by law or to protect the rights, property, or safety of our users or the public.
5. Data retention
We retain your personal data for as long as your account is active or as needed to provide the service. You may delete your account at any time from the app settings. Upon account deletion, we remove or anonymise your data within 30 days, except where we must retain certain records for legal or tax reasons (e.g., transaction receipts for service charges are kept for 5 years as required by law).
6. Children's privacy
Umeme Plus is not directed to individuals under the age of 16. We do not knowingly collect personal information from minors. If you become aware that a child has provided us with personal data, please contact us, and we will take steps to delete such information.
7. Security measures
We implement industry-standard security measures, including encryption in transit (TLS 1.3) and at rest, strong password hashing (bcrypt), and regular security reviews. However, no method of transmission over the Internet is 100% secure – we strive to protect your data but cannot guarantee absolute security.
8. Your privacy rights
Depending on your location, you may have the following rights:
- Access, correction, and deletion of your personal data.
- Data portability – receive a copy of your data in a machine-readable format.
- Objection or restriction of processing.
- Withdraw consent at any time (where processing is based on consent).
To exercise your rights, please contact us at privacy@umemeplus.com (or via the in-app support). We will respond within 30 days.
9. Changes to this Privacy Policy
We may update this policy from time to time. If we make material changes, we will notify you through the app or via email (if possible). The "Last updated" date at the top reflects the latest revision. We encourage you to review this page periodically.
10. Contact us
If you have any questions or concerns about this Privacy Policy or our data practices, please reach out:
Web: www.umemeplus.com/contact
Bishop Road, Upper Hill
Nairobi, Kenya