LEGAL
Privacy policy
DRAFT Not yet reviewed by a lawyer. Don't rely on this wording until it has been. Items marked PLACEHOLDER need real details.
Last updated PLACEHOLDER: date. What we collect, why, and who we share it with.
Who's responsible
PLACEHOLDER: company legal name and address is the controller of your personal data. Contact: PLACEHOLDER: privacy email.
What we collect
- Account: your email address, and your name if Apple or Google shares it when you sign in. If you sign in with Apple or Google we also store that provider's account ID for you. If you choose Apple's “Hide My Email”, we only get the relay address.
- Orders: what you bought, when, the price, and the payment status. Card details go straight to Stripe; we never see the full number.
- eSIM data: the eSIM's identifiers (ICCID and activation code), its status, and the data used and remaining, which our supplier reports to us.
- Sign-in and security: one-time sign-in codes and session records (stored only as hashes), and basic server logs.
We don't track your location or browsing, and we don't see what you do online over the eSIM.
Why we use it
- To issue, deliver and support your eSIM, and to take payment (performing our contract with you).
- To let you sign in and see your eSIMs.
- To prevent fraud and keep the service secure (legitimate interests).
- To meet legal, tax and accounting duties.
We send service emails only (your eSIM, sign-in codes, top-up and refund receipts). No marketing without your consent.
Who we share it with
- eSIM Access (our eSIM supplier): order and eSIM identifiers needed to issue and run the eSIM. We don't send them your email.
- Stripe (payments): your payment and the email you enter at checkout.
- Apple / Google, only if you choose to sign in with them.
- Email provider: PLACEHOLDER: provider, e.g. Resend, to send service emails.
- Hosting: DigitalOcean (servers in Singapore). PLACEHOLDER: confirm region and transfer safeguards
Cookies
We use only essential cookies: one to keep you signed in, one that lets the browser you paid in see your install screen, and a short-lived one during Apple or Google sign-in. No advertising or analytics cookies.
How long we keep it
Account and order records for as long as your account is open and then PLACEHOLDER: retention period, e.g. 6 years for tax records. Sign-in codes expire within 20 minutes (72 hours for the link in your eSIM email).
Your rights
You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it, by emailing PLACEHOLDER: privacy email. You can also complain to your local data protection authority.