Privacy policy
What Smart Meter collects about you, why, who handles it, how long it is kept and what you can ask us to do.
Last updated: 5 November 2026
Who is responsible
Smart Meter is run by Lockwood Technology Limited (registration 168524811), Plot 24, Block 8, House 521, Simba Street, Sinza B, Ubungo, Dar es Salaam, P.O. Box 77805, Dar es Salaam, Tanzania. We are responsible for your personal data under the Personal Data Protection Act, 2022 of Tanzania.
Data Protection Officer: Arden Mogere Ratumo Mariemi, arden@lockwood.co.tz.
What we collect, and why
| What | Why |
|---|---|
| Name, phone number and language | Your building manager or our team adds them when you move in. Your number is how you sign in, by SMS code. |
| Last four digits of a national ID (optional) | Only if your manager or our team adds them, to confirm who lives in a unit. |
| Building, unit, meter number and move dates | To show you your own meter and no one else’s, and to keep a record of moves. |
| Meter credit, usage readings and status | To show your credit and usage, warn you when credit is low, and let your manager and our team look after the building. |
| Purchases: amount, payment method, paying phone number and payment reference | To take your payment, deliver your token, give you a receipt and reconcile the money. We never see your mobile money PIN. |
| Tokens | To deliver electricity to your meter and show you your history. Tokens may also reach you by SMS. |
| People you share a meter with: name, phone number and relationship | So they can sign in, see the meter and top it up. Tell them before you add them. |
| Fault reports: the category and your note | To create a work order for your building manager. |
| Settings: alert and language choices | To send you the alerts you asked for, in your language. |
| Device push token and type of phone | To send notifications to your phone. Removed from your account when you sign out. |
| Sign-in records: session times, sign-in events and the network address (IP) of sign-in attempts | To keep your account safe, limit repeated attempts and investigate misuse. |
App lock
The PIN you choose to lock the app is checked on our servers, where it is stored only in scrambled form, so nobody can read it. Face ID and fingerprint checks are done by your phone, and we never receive your face or fingerprint data.
What we do not do
- We do not sell your data.
- We do not show ads, and the app has no advertising or analytics tracking.
- The app does not ask for your location, contacts, camera or photos.
Who sees it, and who handles it for us
- Your building manager sees the tenants, meters and activity of their own buildings. Our team and SF Smart Energy, who help run the meters, see what they need to support the service.
- The meter owner sees the people they share a meter with, and those people see that meter.
- Malipopay processes mobile money payments and sends our SMS messages.
- Goldcard, the meter maker, runs the meter network and generates tokens. It receives meter numbers, amounts and tokens, and we do not send it your name or phone number.
- Google (Firebase) delivers notifications to Android phones and Apple to iPhones.
- Our cloud hosting and database providers store the data for us.
These providers work only on our instructions. Some of them keep data outside Tanzania, and we rely on their security and contract terms to protect it there. We also share data when the law requires us to.
How long we keep it
| Data | Kept for |
|---|---|
| Sign-in codes | Five minutes |
| Sign-in sessions | Until you sign out, or 30 days without use |
| Technical logs of calls between our systems | 30 days |
| Latest meter reading | Replaced by each new reading |
| Usage readings | Two years |
| Profile, app lock PIN, shared people, settings and device tokens | While you use the service, then removed when you ask us to delete your account |
| Purchases, tokens and the audit record of who did what | For as long as the service runs, because they are the record of money and of electricity delivered |
Your rights
You can ask us for a copy of your data, ask us to correct it or delete it, and object to how we use it. Write to the Data Protection Officer above, and we will answer within 30 days. Some records have to stay, and we will tell you which and why.
To close your account, see Delete your account. If you are not satisfied with our answer, you can complain to the Personal Data Protection Commission of Tanzania.
Security
The app talks to our servers over encrypted connections. Sign-in codes, PINs and session secrets are stored only in scrambled form, and access to tenant data depends on role and building.
Children
Smart Meter is for adults. It is not meant for anyone under 18, and we do not knowingly collect data about children.
Changes to this policy
When this policy changes, we update the date at the top of this page. If a change affects you significantly, we will also tell you in the app or by SMS.