Privacy Policy

1. Introduction

MED Umeme ("we", "our", or "us") operates the MED Umeme mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our electricity token vending service in Tanzania.

By using our Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our Service.

2. Information We Collect

2.1 Account Information

• Full name
• Email address
• Phone number (mobile number used for USSD payments)
• Password (stored in encrypted form, never in plain text)

2.2 Meter Information

• Electricity meter numbers (main meter and submeters)
• Meter type and registration details
• Customer names associated with meters

2.3 Transaction Information

• Purchase amounts and transaction history
• Electricity tokens purchased
• Payment method and payment reference numbers
• Transaction status and timestamps

2.4 Technical Information

• Device type and operating system
• IP address
• App version
• Push notification tokens (for transaction alerts)

3. How We Use Your Information

• To process electricity purchases — your meter number, amount, and phone number are required to complete a purchase through TANESCO/LUKU
• To process payments — your phone number is passed to our payment processor (ZenoPay) to trigger a USSD push payment
• To deliver tokens — purchased electricity tokens are displayed in-app and associated with your account
• To maintain your account — your profile and transaction history
• To send notifications — transaction status updates and alerts
• To comply with legal obligations — financial transaction records required under Tanzanian law
• To improve our service — aggregated, anonymised analytics

4. Sharing Your Information

We do not sell your personal information. We share data only with:

• ZenoPay — our payment processor, who receives your phone number, name, email, and payment amount to process mobile money payments. ZenoPay operates under Bank of Tanzania regulation.
• TANESCO / LUKU — your meter number and purchase amount are sent to TANESCO's electricity vending system to generate your token.
• Vending System Provider — submeter registration and token generation for submeters is handled by our authorised vending system.
• Legal authorities — when required by Tanzanian law, court order, or regulatory request.

5. Data Security

We implement reasonable security measures to protect your data:

• All data is transmitted over HTTPS (TLS encryption)
• Passwords are hashed and never stored in plain text
• API access is protected by authentication tokens
• Sensitive credentials are encrypted at rest

No method of electronic storage or transmission is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain transaction records for a minimum of 5 years as required by Tanzanian financial regulations. Account information is retained while your account is active. You may request deletion of your account and associated data (subject to our legal retention obligations) by contacting us.

7. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account (subject to legal retention requirements)
• Withdraw consent for marketing communications at any time

To exercise these rights, contact us at the email below.

8. Children's Privacy

Our Service is not directed to anyone under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page and, where appropriate, through in-app notification. Your continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us: