Privacy Policy
This policy explains what personal data MyeSIm collects, why, and what you can do about it. MyeSIm is operated by [Company legal name], [registered address] (“we”). We are the controller of your personal data under the EU General Data Protection Regulation (GDPR).
What we collect
| Data | Why | Legal basis |
|---|---|---|
| Email address (from Apple Pay, Sign in with Apple or what you type) | Your account, receipts, restoring plans on a new phone | Contract |
| Orders: plan, country, price, date, payment status | Delivering your eSIM, refunds, tax and accounting | Contract, legal obligation |
| eSIM details: ICCID, install status, data used | Showing your remaining data, sending low-data alerts | Contract |
| Device model and whether it supports eSIM | Checking your iPhone can use a plan before you pay | Contract |
| Support messages | Helping you | Contract, legitimate interest |
| App usage events (screens viewed, taps), without advertising IDs | Understanding what works and fixing problems | Consent [or legitimate interest — confirm] |
We do not see or store your card number. Payments are handled by Stripe and Apple Pay. We do not track your location or which websites you visit through your eSIM. We do not sell your data or use it for advertising.
Who we share it with
Only with companies that help us run MyeSIm, under contracts that require them to protect your data:
- Stripe — payments, fraud prevention and tax calculation
- eSIM Access — our network partner, which issues your eSIM profile
- [Crisp / Help Scout] — support chat and email
- PostHog (EU hosting) — app analytics
- [AWS / Google Cloud], Frankfurt — hosting our servers
Some of these companies may process data outside the EU. Where they do, we rely on the EU Standard Contractual Clauses or an adequacy decision.
How long we keep it
We keep your account data while you have an account. Order and invoice records are kept for [10] years because tax law requires it. Support messages are deleted after [24] months. When you delete your account, we delete or anonymise everything else within 30 days.
Your rights
You can ask to see, correct, export or delete your data, and you can object to or limit how we use it. You can delete your account at any time in the app under Account › Delete account. For anything else, email myesimsupport@gmail.com. You can also complain to your data protection authority. In Austria that is the Datenschutzbehörde (dsb.gv.at).
Children
MyeSIm is not meant for children under 16, and we do not knowingly collect their data.
Changes
If we change this policy in a way that matters, we’ll tell you in the app before the change applies.