Ghana Grid Company Limited (GRIDCo) is committed to protecting the privacy of everyone who uses the Lighting Ghana app — members of the public reporting streetlighting faults, and Ministry, committee, and contractor staff managing the streetlighting and solar-lighting programme.

This policy explains what information the app collects, why, and how it is protected.

The data controller responsible for your personal information is:

Ghana Grid Company LTD. (GRIDCo)

P.O. Box CS7979, Tema, Ghana

Website: https://gridcogh.com

Data Protection Contact: gridco@gridcogh.com

Lighting Ghana serves two groups, and each shares different information with us:

• Members of the public can report a streetlighting fault or track a complaint they’ve already raised — no account or sign-in required.
• Programme staff (Ministry, committee, contractors, solar contractors, and project engineers) sign in to manage contracts, track installation progress, and respond to reports, according to their role.

If you report a fault or track a complaint (no account needed):

• Your name and phone number, only if you choose to provide them — both are optional
• A description of the fault and, if you’re reporting a known location, which street or solar region it’s at (or a free-text description of the location if it isn’t in our records)
• Photos you choose to attach, taken with your camera or selected from your photo library
• The date and time you submitted the report
• A reference code we generate so you can track your report’s status later

We do not collect your device’s location automatically — the app has no access to GPS or location services. Any location information comes only from what you type or select yourself.

If you sign in as programme staff:

• Your username and the password you use to sign in (used only to authenticate you — GRIDCo does not access your password in plain text)
• A session identifier that keeps you signed in between visits, stored on your device
• Your role (e.g. Ministry, committee, contractor, solar contractor, project engineer), which determines what you can see and do in the app
• Records you create or update in the course of your work — progress updates, issue responses, weekly reports, contract records, and similar programme data

• Camera — to let you photograph a streetlighting fault directly from the app
• Photo library — to let you attach an existing photo instead of taking a new one
• Internet / network state — to send your report to and retrieve information from GRIDCo’s servers

The app does not request access to your contacts, microphone, precise location, or any other device data, and it contains no advertising or third-party analytics software.

• To investigate and resolve reported streetlighting and solar-lighting faults
• To let you check the status of a complaint you’ve submitted
• To contact you about your report, if you chose to share your name or phone number
• To manage the streetlighting and solar-lighting contract programme — tracking installation progress, contractor performance, and payment certificates
• To conduct internal audits and programme reporting

Under Ghana’s Data Protection Act, 2012 (Act 843), we process this data based on:

• Consent — given when you submit a fault report or complaint, or when a staff account is created for you
• Legitimate interest — in maintaining public streetlighting infrastructure and responding to reported faults
• Performance of a public function — for data processed as part of the Ministry’s streetlighting programme

Access is limited to authorised GRIDCo and programme personnel, scoped to their role:

• Ministry and committee roles can see reports and programme data across all contract lots
• Contractors and solar contractors can only see reports and data tied to their own contracted lot
• Project engineers can see data for the lots assigned to them

GRIDCo does not sell, rent, trade, or share your personal data with any third party outside the organisation, except where required by Ghanaian law or a valid legal order.

Fault reports and photos are retained for as long as necessary to resolve the report, and for a subsequent period of 7 years to support programme audits and record-keeping, after which they are securely deleted. Staff account data is retained for the duration of the staff member’s role plus a reasonable period afterward for audit purposes.

• All communication between the app and GRIDCo’s servers is encrypted (HTTPS)
• Access controls restrict programme data to authorised staff, scoped by role
• Staff sessions use secure, revocable session tokens rather than storing credentials on the device
• Regular reviews of who has access to what
• Breach notification procedures in line with Ghanaian law

Under Ghana’s Data Protection Act, 2012 (Act 843), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Object to processing of your data
• Request erasure of your data where retention is no longer necessary

Lighting Ghana is not directed at children, and we do not knowingly collect personal data from children through the app.

We may update this policy from time to time. Material changes will be reflected by an updated effective date at the top of this page.

For questions about this policy or to exercise your data rights:

Ghana Grid Company Limited (GRIDCo)

P.O. Box CS7979,

Tema, Ghana

Email: gridco@gridcogh.com

You may also lodge a complaint with Ghana’s Data Protection Commission.