Privacy Policy

Effective Date: July 6, 2026

Last Updated: July 6, 2026

This Privacy Policy ("Policy") governs the data collection, processing, and retention practices of AshAudit ("the Application", "the Platform", "we", "us", or "our"). This Policy provides transparent information regarding how we handle data collected from registered users ("Users", "Enumerators", "Project Managers") as well as third-party field participants ("Field Respondents") during site enumeration activities.

The Application is specifically designed as a specialized site enumeration and field data collection utility to support minigrid design, technical modeling, and financial feasibility assessments. To fulfill compliance criteria established by the Apple App Store and Google Play Store, this document outlines explicit disclosures regarding geospatial tracking, personal information handling, and data minimization workflows.

1. Data Categories Collected and Processed

To facilitate precise energy grid architecture simulation and infrastructure de-risking, the Application collects and handles both Personal Data and Non-Personal Technical Data across the following configurations:

A. User Account Information (Registered Staff and Enumerators)

• Identity and Contact Data: Full name, organizational email address, corporate telephone number, and authentication credentials (passwords or tokens).
• Role Metrics: Organizational affiliation, system authorization permissions (Enumerator, Surveyor, Project Manager, Administrator).

B. Field Enumeration and Respondent Data (Prospective Site Occupants)

When Users employ the Application to survey a physical location, they record metrics relative to prospective grid connections. This data is stored locally on the device and synchronized with a secured central server:

• Socio-Economic Profiles: Household or business owner name, secondary contact telephone number, and customer classification structure (e.g., Residential, Commercial, Agro-Processing, Institutional).
• Financial Viability Metrics: Average monthly historical energy expenditures, Connection Affordability indices, and Willingness-to-Pay (WTP) metrics.
• Appliance and Load Data: Appliance-specific inventories (e.g., power ratings in Watts, standard operational time allocations, specialized inductive machinery descriptions) used to construct daily load variations.

C. Geospatial and Location Data

• Precise Location Data: The Application captures highly accurate geographic coordinates (latitude, longitude, and altitude) via the device’s Global Positioning System (GPS) or wireless triangulation.
• Context of Capture: Location collection occurs specifically when mapping point assets, household distribution locations, and community boundaries. Background location access is restricted to operational field sequencing mapping and is executed only with express explicit user consent.

2. Purpose and Legal Basis for Data Processing

We process your data strictly to execute core application functionalities and fulfill legal or performance obligations under the following mandates:

3. True Offline Functionality and Synchronization

Recognizing that site assessment tasks regularly take place inside localized settings missing cellular capabilities, AshAudit functions via a localized environment model.

Local Device Storage Notice: All captured Field Respondent records, appliance configurations, and spatial coordinates are encrypted and retained within the device's sandbox environment. These items do not transmit across networks until a stable internet link allows automated sync tasks to connect to our central web dashboard infrastructure.

4. Data Disclosure and Third-Party Sharing

We do not sell, lease, or monetize any collected Data. Data distribution is constrained explicitly to the entities highlighted below:

• Hosting and Infrastructure Services: Secure database nodes and cloud application execution points (e.g., AWS, Google Cloud Platform) maintaining cloud storage.
• Corporate Customer Access: Registered managers associated with the billing organization retain structural rights to modify, filter, view, and export all gathered data packets under their tenancy.
• Legal Mandates: Disclosures forced by statutory regulatory directives, court subpoenas, or systemic law enforcement investigations where validation criteria are fully satisfied.

5. Data Retention, Archival, and Protection Limits

Data sets are retained only for the duration required to achieve their technical optimization mandates or to fulfill the licensing terms of the tracking company.

• Security Standard: We apply Advanced Encryption Standard (AES-256) architectures for records saved inside local devices and protect all data transfers using Transport Layer Security (TLS 1.3).
• Anonymization: When field data tracking operations close or organizations drop their active tenancy subscriptions, technical records may be scrubbed of identity attributes to allow long-term engineering reference usage.

6. User Controls, Deletion Rights, and App Store Compliance

In accordance with Apple App Store Review Guidelines (Section 5.1.1) and Google Play Developer Policies, all users hold explicit self-service autonomy pathways over their data footprint:

• Account Deletion: Registered users can permanently delete their accounts and related credentials directly from the Account Settings panel inside the mobile application. This process triggers automated database cleanups within 30 days.
• Access and Exportation: Users retain complete mechanisms to export their datasets in CSV, Excel, or GeoJSON structures at any operational interval prior to deletion.
• Revocation of Location Access: System location discovery may be completely turned off using native operating system settings panels without breaking basic offline technical spreadsheet edits.

7. Amendments and Regulatory Contacts

We maintain absolute authority to update this legal layout to match platform developments or moving jurisdictional mandates. Users will see a notice within the application framework if material modifications occur.

For inquiries concerning data security, localized structural controls, or to exercise regulatory data rights, forward detailed briefs directly to our compliance desk:

Legal & Privacy Compliance Team

Email: legal@ashipaelectric.com

Address: 10, Oremeji Street, Ilupeju. Lagos, Nigeria