Privacy Policy

This Privacy Policy explains how eSIMzio collects, uses, and protects your personal information.

1. Information We Collect

• Account information: name, email address, phone number
• Payment information: processed securely via Stripe (we do not store card details)
• Usage data: eSIM activation logs, data consumption (anonymous)
• Device information: device model, OS version for compatibility purposes

2. How We Use Your Information

• To provide and improve our services
• To process transactions and send order confirmations
• To send important service updates and notifications
• To personalise your experience and recommend suitable plans
• To comply with legal obligations

3. Data Sharing & Sub-processors

We do not sell your personal data. We share limited personal data with the following sub-processors, each only to the extent needed to run the service:

• Supabase — database, authentication and backend hosting (stores your account, orders and eSIM records)
• Stripe — payment processing (card details are handled by Stripe; we never store them)
• Airalo — eSIM provisioning partner, to activate and manage your eSIM
• Resend — sending transactional and service emails (e.g. order confirmations, eSIM-ready notices)
• Expo — delivering push notifications to your device
• PostHog — privacy-conscious product analytics (identified only by a random internal ID, never your name or email)
• Sentry — crash and error reporting (technical diagnostics only; no card data or personal identifiers)

To prevent abuse (spam, fraud, rate-limiting), we process a hashed, non-reversible form of your IP address; we do not store raw IP addresses for this purpose.

4. Data Security

We use industry-standard encryption (TLS 1.3) for all data in transit. Your payment information is tokenised and never stored on our servers.

5. Your Rights

Under GDPR and UK data protection law, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to processing
• Data portability

To exercise any of these rights, contact hello@esimzio.com.

6. Cookies

We use essential cookies to keep you logged in and for security purposes. We do not use tracking or advertising cookies.

7. Data Retention

We retain your personal data for as long as your account is active. When you delete your account, your personal data is removed, except where we are legally required to keep certain records (for example, transaction and tax records may be retained for the period required by law). Diagnostic and analytics data held by our sub-processors is retained according to their respective retention policies.

8. Deleting Your Account & Data

You can permanently delete your account and associated personal data at any time — in the app (Profile → Close account) or by request. See Data & account removal for full details and to submit a request.