Privacy Policy Effective Date: 4 September 2026
Pow-drTechnologies Ltd, (“Pow-dr”, “our”, “us”, or “we”) is a smart energy platformthat helps users control connected devices, monitor electricity usage, andimprove energy efficiency through the Pow-dr App, and also operates the pow-dr.io website (the “Website”).
Pow-drTechnologies Ltd, has developed the Pow-dr App, which enables users to configure and operate smart plugs and switches connected to the internet through a home Wi-Fi connection. The Pow-dr App allows users to remotely switch connected electrical devices off, measure their power consumption, and override remote switch-off events.
We at Pow-dr recognise the importance of handling Personal Data responsibly and with due care. Our approach is backed by experience in research environments with strong data protection expectations. This Privacy Policy explains how we collect, use, disclose, store and otherwise process your Personal Data in connection with the Pow-dr App, the Website, and related services.
This Privacy Policy describes our practices in connection with information privacy on Personal Data we process through your individual use of our services,products, and related mobile applications (collectively, the “Products”), including the Pow-dr App.
Weare dedicated to complying with global data privacy standards, including:
This Privacy Policy is applicable to anyone whose data we process, including but not limited to:
Inorder to provide our services to you, we will ask you to provide the necessary data that is required to provide those services. If you do not provide this data, we may not be able to provide you with our Products or services.
With your consent and to best provide our services, we collect Personal Data that you voluntarily provide to us when you register for and use our Products,services, connect Smart Devices, contact support, participate in a program, or otherwise interact with us. This may include:
2.5.1. Device data: Device identifiers such as device id, online status, activation time,upgrade information and device connection information.
2.5.2. Energy Usage Data: electricity consumption data and related usage information generatedthrough connected Smart Devices.
When you use the Pow-dr App, connect Smart Devices, or interact with our services, we may automatically collect certain technical and usage-related information. This may include:
2.5.3. App usage analytics: information about how you interact with the Pow-dr App, including appinteractions, feature usage, push notification tokens.
We receive certain information from electricity distribution companies (“DISCOMs”), such as your Consumer Account Number (“CA number”). We use this information to identify and verify your electricity connection and provide the relevant services.
We process your Personal Data to provide, operate, manage, and improve our services in a manner that respects your privacy and complies with applicable data protection laws. The purposes for which we process your Personal Data depend on the way you interact with us, the Products you use, and the permissions you provide. These purposes include:
3.1. Service Delivery and Account Management: To provide access to the Pow-dr App and maintain its services, create and manage user accounts, authenticate users,enable device pairing and connectivity, and support the operation of connected Smart Devices.
3.2. Customer Support and Communication: To respond to your inquiries, feedback,support requests, address technical issues and device failures. Also, to send push notifications about updates, events, or rewards.
3.3. Service Improvement and User Experience: To understand how our services are used,improve App functionality performance, and support the overall user experience.
3.4. Energy monitoring: To measure and monitor energy usage through connected Smart Devices,provide related insights within the Pow-dr App, and, where applicable,administer energy-saving, rewards, research, or utility-led programmes.
3.5. Analytics and Performance Monitoring: To analyse interactions with the Pow-drApp, feature usage, and service performance, and to support troubleshooting,diagnostics, and service optimisation.
3.6. Security and Fraud Prevention: To monitor, detect, investigate, and help prevent security incidents,unauthorised access, fraudulent activity, misuse of the Pow-dr App or services,and violations of our terms or policies.
3.7. Legal and Regulatory compliance: To comply with Applicable laws and regulations, respond to requests from courts, public and government authorities, enforce our terms and conditions, and to protect our rights,privacy, safety, property, and business operations.
3.8. Research and Insight Generation: To share anonymised data with utilities or researchers to conduct research and statistical analysis, which shall be done in accordance with Applicable law and anonymisation safeguards.
If we intend to use your Personal Data for any new or materially different purpose not described in this Privacy Policy, we will inform you in advance and, where required by law, obtain your consent before doing so.
4.1. We process Personal Data in accordance with applicable data protection laws, including the EU General Data Protection Regulation , the UK General Data Protection Regulation , and the Digital Personal Data Protection Act, 2023 and the applicable rules thereunder.
4.2. If you are located in the European Union or the United Kingdom, please see Addendum A for further information about the legal bases on which we process Personal Data.
4.3. If you are located in India, please see Addendum B for further information about the grounds on which we process Personal Data.
We use the Personal Data we collect to enable, operate, support, and improve the services we provide through the Pow-dr Platform, the Pow-dr App, and connected Smart Devices. Our use of Personal Data is guided by the principles of transparency, necessity, and proportionality, and is carried out in accordance with Applicable data protection laws, including the EU GDPR, UK GDPR, and India’s DPDPA, where applicable. The specific ways in which we use Personal Data depends on the nature of your interaction with us, the Products you use,and the permissions you provide. The main purposes for which we process Personal Data are set out below:
5.1. Service Delivery and Account Management
We use Personal Data to create, verify, and manage user accounts, authenticate users, enable device pairing and connectivity, deliver access to the Products,and maintain records of your interactions with us. This includes using your data to support the operation of connected Smart Devices, display energy usage information, and enable controls and user settings within the Pow-dr App.
5.2. Communication and Customer Support
We use Personal Data to communicate with you about the Products and to provide customer support. This includes responding to your questions, feedback, and support requests, addressing technical issues or device failures, sending service-related notifications, and informing you about updates to the services,terms, or policies.
5.3. Product Development and Improvement
We process Personal Data to understand how the Products are used, identify opportunities for improvement,investigate and resolve technical issues, develop and test new features, and enhance the performance, reliability, and overall quality of the Products and services. For these purposes, we may analyse feedback, technical data, and usage patterns.
5.4. Programme Administration
Where applicable, we use Personal Data to administer energy-related, reward-based,utility-led, or research programmes made available through our Products. This may include managing participation, measuring relevant usage data, and supporting the implementation and operation of such programmes.
5.5. Security, Integrity, and Abuse Prevention
We process Personal Data to safeguard the security, integrity, availability, and resilience of our systems and services. This includes detecting, monitoring,investigating, and helping to prevent fraud, unauthorised access, misuse of the services, security incidents, and breaches of our terms, conditions, or policies.
5.6. Legal and Regulatory Compliance
We process Personal Data where necessary to comply with applicable legal and regulatory obligations, to respond to lawful requests from courts, regulators, law enforcement authorities, or other public bodies, to satisfy record-keeping requirements, and to support compliance with applicable data protection and related legal obligations.
5.7. Protection of Rights and Legitimate Interests
We may process Personal Data where necessary to protect the rights, property,safety, and legitimate interests of Pow-dr Technologies Ltd, our users, our partners, or other persons. This includes enforcing contractual terms,investigating complaints, claims, or disputes, establishing, exercising, or defending legal rights, and pursuing remedies available to us under Applicable law.
However, in the course of providing and supporting Products and services, we may share your Personal Data with carefully selected Third parties where this is necessary, proportionate, and consistent with applicable data protection laws,including the EU GDPR, the UK GDPR, and India’s DPDPA, where applicable. We take reasonable steps to ensure that recipients of Personal Data are subject to appropriate contractual, technical, and organisational safeguards designed to protect privacy, confidentiality, and security.
6.1. Third-Party Service Providers
We may share Personal Data with trusted third-party service providers that perform services on our behalf and require access to such data in order to do so. These may include providers of cloud hosting, storage, messaging, analytics, push notifications, deep linking, and Smart Device connectivity. For example, we may use third-party platforms in connection with infrastructure hosting, service communications, analytics, and device pairing or control. In each case, such providers are authorised to process Personal Data only for specified purposes and are required to implement appropriate security and confidentiality measures.
6.2. Programme Partners
6.2.1. We do not send marketing or promotionalcommunications directly to end users. Where you participate in anenergy-related, reward-based, utility-led, or research programme, the relevantprogramme partner (such as DISCOMs) may send you communications regarding theprogramme events, rewards, promotions, or related opportunities through its owncommunication channels, including WhatsApp, social media, email or textmessages.
These communications are independently sent and managed by the relevant programme partner and are governed by that partner’s privacy notice, marketing practices,and communication preferences. We do not control the content, frequency, or delivery of such communications. Any questions, complaints, opt-out requests,or requests to manage your communication preferences should therefore be directed to the relevant programme partner. [3]
6.2.2. Where you participate in a programme offered through our Products, we may share relevant information with the relevant programme partner where necessary for programme administration,reporting, or operational purposes. Where stated in this Privacy Policy, data shared for research, analysis, or insight generation may be shared in anonymised form.
6.3. Business Transfers
If Pow-dr Technologies Ltd is involved in a merger, acquisition, asset sale,financing, corporate reorganisation, or other transaction involving a change in ownership or control, Personal Data may be disclosed to or transferred to the relevant third party as part of that transaction. In such circumstances, we will take reasonable steps to ensure that any Personal Data transferred remains protected in a manner consistent with this Privacy Policy and Applicable law.
6.4. Legal Requirements and Regulatory Disclosures
We may disclose your Personal Data when required to do so by Applicable law,regulation, legal process, or court order, or in response to lawful requests by public authorities. We may also disclose information when we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of our employees, clients, partners, or the public. Where permissible,we will make reasonable efforts to notify individuals before responding to such requests.
6.5. Professional Advisors and Auditors
In the course of our legitimate business operations, we may share Personal Data with external advisors such as legal counsel, accountants, auditors, or consultants. This may occur in connection with internal governance reviews,regulatory compliance audits, risk assessments, or dispute resolution proceedings. All such parties are required to handle data in accordance with strict confidentiality obligations and applicable legal standards.
We do not sell your Personal Data. We do not disclose personal data to Third parties for their own independent marketing or advertising purposes. Any sharing of personal data with service providers or partners is carried out only for the purposes described in this Privacy Policy and subject to appropriate safeguards.
8.1. In the course of providing,operating, supporting, and improving our services, Personal Data may be transferred to, accessed from, or stored in countries outside the country in which you are located. This may occur where our service providers, infrastructure, technical systems, or business operations involve processing across multiple jurisdictions.
8.2. Where Personal Data is transferred internationally, we take appropriate steps to ensure that such transfers are carried out in accordance with Applicable data protection laws, including the EU GDPR, the UK GDPR, and India’s DPDPA, where applicable. Where necessary, we implement specific legal, technical, and organisational safeguards to ensure that your Personal Data remains protected regardless of where it is processed.
8.3. When we transfer your Personal Data internationally, we take steps to ensure that appropriate safeguards are in place to protect your privacy rights and the integrity of your Personal Data.These safeguards may include
8.3.1. Standard Contractual Clauses(SCCs)
We may implement contracts approved by regulators that require recipients to protect Personal Data in accordance with Applicable laws.
8.3.2. Adequacy Decisions
Where applicable, we may transfer Personal Data to countries or territories that have been recognised by the relevant authority as providing an adequate level of protection for Personal Data.
8.3.3. UK Transfer Mechanisms
For transfers subject to the UK GDPR, we may rely on the International DataTransfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, as appropriate. Where required, we will also assess the circumstances of the transfer and implement such supplementary technical and organisational measures as may be necessary to ensure that the transferred Personal Data continues to receive a level of protection that is materially equivalent to that required under UK Data Protection law.
8.3.4. Other Lawful Safeguards or Exceptions
Where permitted by Applicable law, we may rely on other lawful safeguards,exceptions, or transfer mechanisms recognised under the relevant legal framework.
8.4. Regardless of where Personal Data is processed, we apply appropriate safeguards designed to ensure that Personal Data remains protected in a manner consistent with this Privacy Policy and Applicable law. If you would like more information about international transfers of your Personal Data, or the safeguards we apply in connection with such transfers, you may contact us.
9.1. We retain your Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including to provide the services, maintain your account, and comply with legal,operational, and regulatory obligations.
9.2. Unless a more specific retention period or deletion timeline (section 9.3 & 9.5) is stated in this Privacy Policy, we determine the appropriate retention period by taking into account a range of relevant factors, including:
9.3. Account Deletion and Data Erasure
Upon a valid request to delete your account, we will initiate a process to permanently remove your Personal Data from our active production systems within 30 days. This includes your name, contact details,precise location data, and any account credentials.
9.4. How to Request Account Deletion
You may initiate a request to delete your account and all associated Personal Data at any time by navigating to [Home Menu > Delete Account] within the Pow-dr App.
9.5. Retention of Anonymised Research Data
As part of our commitment to energy research, we may retain certain technical data captured from IoT devices (such as power consumption patterns and appliance usage metadata). To protect your privacy, this data willbe strictly anonymised before retention, so that it can no longer reasonably be linked to an identifiable individual. This means:
9.6. Once data has been irreversibly anonymised, it is no longer Personal Data and may not be capable of being retrieved, modified, or deleted on an individual basis.
9.7. Where Personal Data is no longer required for the purposes for which it was collected, and we are not required or permitted to retain it for a longer period, we will securely delete, erase,or anonymise it in accordance with Applicable law and our internal retention and deletion procedures.
We store Personal Data in secure digital environments,including cloud-based infrastructure, and apply reasonable technical and organisational measures designed to protect its confidentiality, integrity, and availability. These measures may include role-based and infrastructure-level access controls, secure token-based authentication, encryption in transit using TLS and encryption at rest where applicable, secure backup and recovery processes, and monitoring and review measures designed to detect and respond to potential security threats. Where third-party service providers process Personal Data on our behalf, we take reasonable steps to ensure that they are subject to appropriate safeguards. Where Personal Data is stored or processed outside your jurisdiction, we take appropriate steps to ensure that such processing is carried out in accordance with applicable data protection laws and subject to appropriate safeguards
11.1. Depending on your jurisdiction,you may have certain rights in relation to your Personal Data. These rights may vary depending on your jurisdiction, the nature of the processing, and the legal basis on which your Personal Data is processed.
11.2. In general, subject to Applicable law, users have the right to:
11.3. Based on the jurisdiction in which you reside, you may also be entitled to additional rights or to more specific rights in relation to your Personal Data. Further details of the rights available to you under applicable local laws are set out in the relevant jurisdiction-specific Addendum to this Privacy Policy.
11.4. You may exercise your rights by contacting us at support@pow-dr.io. We will respond to your rights request within one month from the date of receipt of the request.
11.5. For your protection, we may take reasonable steps to verify your identity before acting on your request.
12.1. Our App, platform and related services are not directed at, nor intended for use by, children. For the purposes of this Privacy Policy, a child includes a person under the age of 18under India’s DPDPA and, under the age of 13 for purposes of the UK GDPR, and under the age of 13 to 16 for purposes of the EU GDPR, depending on the relevant Member State.
12.2. We do not knowingly collect or process Personal Data from children without verifiable parental or guardian consent. If we become aware that Personal Data has been collected from a child without such consent, we will take immediate steps to delete that data.
12.3. Where parental or guardian involvement is required under Applicable law, we will take reasonable steps to obtain the necessary authorisation and apply appropriate safeguards, including limiting the Personal Data collected to what is necessary, restricting access to such data, and providing clear information about the relevant processing activities.
12.4. If you believe that we may have collected Personal Data from a child in a manner that is not compliant with this Privacy Policy or Applicable law, or if you are a parent or legal guardian seeking to access, review, or request deletion of a child’s Personal Data,please contact us at support@pow-dr.io
13.1. We do not use marketing,advertising, targeting, analytics, performance or social media cookies across the Pow-dr App, the Pow-dr Platform or the Pow-dr Website.
13.2. The Pow-dr Platform and Website use only essential cookies required for its operation.
13.3. The Pow-dr App uses Firebase Crashlytics .
13.4. Listof cookies and similar technologies:
S.no
Technology
Platform
Name
Provider
Purpose
Duration
Category
1
Cookie
Website
_cfuvid
Cloudfare
Session
Essential
2
SDK
Pow-dr App
Firebase Crashlytics
Google LLC
To track app errors and crashes
3
Cookie
Pow-dr Platform (Admin UI)
Essential
14.1. We are committed to protecting the confidentiality, integrity, and availability of Personal Data. We maintain appropriate technical and organisational measures designed to prevent unauthorised access, loss, misuse, alteration, or disclosure of Personal Data,and to support the ongoing security and resilience of our systems and services.
14.2. Our security measures may include,where appropriate:
14.3. Access to Personal Data is limited to employees, contractors, and service providers who require such access for legitimate business purposes and who are subject to appropriate confidentiality and security obligations.
15.1. We may use limited forms of automated processing, including algorithmic development and to understand power consumption patterns, improve our Products/services, support analytics, and generate energy-related insights.
15.2. We do not use solely automated decision-making, including profiling, to make decisions that produce legal or similarly significant effects on individuals.Any such processing is used only for service improvement, operational analytics, and related insights, and is not used to determine eligibility for, or access to, the services without appropriate human involvement.
16.1. Pow-dr may use Artificial Intelligence (“AI”) tools in limited contexts, such as the development and improvement of event scheduling algorithms, to support efficiency, planning,optimisation, and related decision-support functions.
16.2. Where AI involves the processing of Personal Data, we seek to ensure that such processing is carried out transparently and in compliance with our obligations under applicable laws.
17.1. We may update this Privacy Policy from time to time to reflect changes in our practices, services, or internal policies. All updates will be published on this page, along with a revised"Last Updated" date at the top of the Policy.
17.2. If the changes are significant such as introducing new purposes for processing Personal Data or updating the categories of data we collect, we will notify you through the Pow-dr App or via email, according to the preferences you set.
17.3. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your Personal Data. Continued use of the Pow-dr App or services after the changes have been made shall constitute as your acceptance of the updated policy.
18.1. If you have any questions,concerns or requests regarding this Privacy Policy or the way we process your Personal Data, please reach out to us. We are committed to addressing your queries promptly and transparently. You can reach out to us at support@pow-dr.io.
18.2. Depending on your location, you may also have the right to lodge a complaint with your local data protection authority. We encourage you to contact us first so we can address your concern directly.
18.3. For all privacy-related inquiries,including data access, correction, withdrawal of consent, or the exercise of your legal rights, please clearly specify the nature of your request in your communication. We may ask you to verify your identity before we process your request in order to protect your data.