Privacy Policy - IhsanPower

1. Introduction

Ihsan Power (“we”, “us”, “our”) is a smart electricity recharge and energy management platform. Ihsan Power is operated by Ihsan Soft Solutions Ltd.

This Privacy Policy explains what personal information we collect, why we process it, the lawful bases we rely on, how we share it with service providers, how long we retain it, and the rights available to you under the Nigeria Data Protection Act / NDPR framework and other applicable laws.

Privacy Policy Version: 1.0
Effective Date: 24 August 2026

We do not sell your personal data.

2. Personal information we collect

Account information: name, email address, phone number, password (stored in hashed form), and account role.
Meter and energy data: meter numbers, disco/provider, meter type, validation results, consumption estimates, solar/generator/hybrid profile details, and community or shared-meter information you provide.
Transaction data: wallet balance, funding history, token purchases, receipts, payment references, and provider transaction IDs.
Communications: notification preferences and messages we send by email or SMS (for example token receipts, wallet alerts, and password reset links).
Technical data: IP address, browser type, device information, session identifiers, audit logs, and error/diagnostic records needed to secure and operate the platform.
Optional photos: receipt images you choose to upload so we can extract a prepaid token. We do not access your photo library in the background.

3. Why we process personal information

Account creation and authentication — to create and secure your account.
Meter validation — to confirm meter details with vending partners before purchases.
Electricity token purchases — to vend prepaid tokens to your meter.
Payment processing — to fund wallets and complete checkout.
Transaction history — to show receipts and resolve disputes.
Customer support — to respond to tickets and complaints.
Security and fraud prevention — to detect abuse and protect accounts.
Electricity consumption analysis — to provide dashboards and alerts you use.
AI-based consumption estimation — to generate optional estimates and advice.
Legal / regulatory obligations — including accounting and lawful requests.
Service improvement — to maintain reliability and improve features (without selling personal data).

4. Lawful bases

Performance of a contract — delivering recharge, wallet, meter and account services you request.
Consent — optional cookies/preferences and optional marketing communications (separate from service acceptance).
Legitimate interests — securing the platform, preventing fraud, diagnosing faults, and improving reliability where balanced against your rights.
Compliance with legal obligations — financial/audit retention and responding to lawful authorities.

5. Data sharing and service providers

We share limited personal information with processors only as needed to operate Ihsan Power:

Payment / vending providers (for example Nomba, Flutterwave, Paystack, VendPower) — amounts, references, meter numbers and contact details required to complete a transaction.
Electricity providers / DisCos — where required for validation or vending through our partners.
Cloud / hosting providers — infrastructure that hosts the application, databases, logs and backups.
Communications providers (for example email/SMS gateways) — to send service messages you enable.
AI service providers — where AI estimation features are enabled, limited meter/consumption context may be processed to generate estimates.
Legal / regulatory disclosures — where required by law, court order, or to protect rights, safety and fraud prevention.

Providers are instructed to use personal information only to perform services for us.

6. International / cross-border processing

Some providers may process data outside Nigeria. Where this occurs, we take steps intended to apply appropriate safeguards consistent with applicable data-protection requirements.

7. Data security

We apply technical and organisational measures including HTTPS in transit, password hashing, field-level encryption for selected sensitive fields, access controls, session security and audit logging. No method of transmission or storage is completely secure.

8. Data retention

Different categories of data have different retention periods. Defaults are configurable by authorised administrators and are described in more detail in our operational Data Retention framework. Approximate defaults include:

Account/profile and meters — while the account is active.
After an account deletion request — unnecessary personal information is deleted or anonymized according to the configured grace period (typically about 30 days).
Electricity vending and payment/accounting records — may be retained for up to about 7 years for financial, audit, fraud-prevention or regulatory purposes; retained records should contain only the personal information necessary for that purpose.
Authentication/security logs — about 12 months; application/audit logs — about 24 months.
Support tickets — about 2 years; AI estimates — while needed for the service, then removed/anonymized after account deletion.
Backups — rolling retention of about 90 days.

Account deletion does not mean every record disappears immediately. You can request deletion from Profile & Settings or Account → Privacy, or email privacy@ihsanpower.com.

See also our Cookie Policy for cookie retention.

9. Your rights

Subject to applicable law, you may have the right to access, correct, delete, restrict or object to certain processing, withdraw consent where processing is consent-based, and lodge a complaint with the Nigeria Data Protection Commission (NDPC).

Contact privacy@ihsanpower.com to exercise rights. We may need to verify your identity.

10. Account deletion

You may request account deletion in the app. After confirmation we set the account to pending deletion, revoke sessions, and schedule permanent deletion/anonymization after the configured period. You may cancel during the grace period by signing in again where the product allows it. Financial/vending records that must be kept are retained with unnecessary identifiers removed where possible.

You can update profile details in the app or website under Profile & Settings. To delete your account and associated personal data, use Delete Account in the IhsanPower app or website, or follow the steps on our account deletion page. For other requests, contact us using the details below.

11. Consent withdrawal

You may withdraw optional cookie and marketing preferences at any time via Cookie Settings, Account → Privacy, or by contacting us. Withdrawing optional consent does not prevent use of essential Ihsan Power services.

12. Children / minimum age

Ihsan Power is not directed at children under 18. We do not knowingly collect personal data from children.

13. Cookies and similar technologies

We use essential cookies for authentication, sessions, CSRF protection and consent storage. Optional functional/analytics/marketing technologies only run after consent where applicable. Details: Cookie Policy.

14. Changes to this Privacy Policy

We may update this policy from time to time. The version and effective date above will change when we do. Material changes that affect consent may trigger a renewed cookie consent prompt; insignificant wording changes do not automatically require renewed consent.

15. Complaints

Please contact us first at privacy@ihsanpower.com. You may also lodge a complaint with the Nigeria Data Protection Commission (NDPC).

16. Contact information

Ihsan Soft Solutions Ltd (operator of Ihsan Power)
Privacy: privacy@ihsanpower.com