Privacy policy

What we collect, what we do with it, and what we never do. Plain-English summary at the top.

The plain-English version

We collect what we need to sell you an eSIM: your email, your order details, and the technical info our network partner needs to provision the eSIM (your device’s EID). We don’t sell your data. We don’t track your browsing. We don’t see your GPS location – the carrier needs to know what country you’re in, but that’s it. You can delete your account and your data any time by emailing us.

Last updated: 20 May 2026

SimKit (“we,” “our,” “us”) is committed to protecting your privacy. This policy explains what we collect, how we use it, and what your rights are.

1. What we collect

Information you give us

  • Account details: name, email, password.
  • Transaction details: the eSIMs you’ve bought and basic payment metadata. We don’t store full card numbers – payments are processed by Stripe/PayPal/Apple Pay.
  • Support conversations: messages, screenshots, and descriptions you send us when you contact support.

Information collected automatically

  • Device information: your phone’s model, OS version, and EID (the SIM identifier needed to install the eSIM). This is the minimum required for our network partner to provision your eSIM.
  • Usage data: crash logs and basic interaction data so we can fix bugs and improve the site.
  • Network data: we don’t track your GPS location. Our network partner does need to know what country you’re currently connected from to route your data — that’s the bare minimum required for international mobile data to work.

2. How we use it

  • To provision your eSIM: we send your device details to our network partner, who creates the eSIM profile.
  • To process orders: we use the data to take payments, send order confirmations, and deliver your QR codes.
  • To support you: when you message us, we look up your order and device state.
  • To send transactional emails: order confirmations, important account changes, security alerts.
  • For marketing (only with your consent): if you opt in, occasional emails about new destinations or offers. One-click unsubscribe in every email.

3. Who we share it with

We don’t sell your personal data. We share specific data only where it’s necessary to deliver the Service:

  • Network partner: our global eSIM aggregator receives the technical data needed to create your eSIM (your device EID, plan type, destination country).
  • Payment processors: Stripe, PayPal, Apple Pay or Google Pay receive payment data directly — we don’t see your card numbers.
  • Cloud and email providers: Supabase (hosting), Postmark/SendGrid (transactional email).
  • Legal requirements: if compelled by law, court order or legitimate government request, we may disclose data to comply.

4. Data retention

We keep your personal data only as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Account data is deleted within 30 days of you closing your account, unless we’re legally required to retain specific records (e.g. invoices for tax purposes).

5. Security

We use SSL encryption for all data in transit. Passwords are hashed. Payment data is handled entirely by certified third-party processors. We work hard to protect your data, but no system on the internet is 100% secure.

6. International transfers

SimKit operates globally. Your data may be transferred to and stored on systems located outside your country, where data protection laws may differ. By using the Service, you consent to this transfer to the extent necessary to deliver the eSIM.

7. Your rights

Depending on your jurisdiction, you may have the right to:

  • Access: request a copy of the data we hold about you.
  • Correct: ask us to fix inaccurate data.
  • Delete: request that we erase your data and close your account. You can do this in account settings or by emailing us.
  • Withdraw consent: opt out of marketing emails at any time.
  • Object or restrict processing: for users in the EU/UK, additional GDPR-aligned rights apply.

To exercise any of these rights: hello@simkit.app.

8. Children

The Service isn’t designed for anyone under 13, and we don’t knowingly collect data from children under 13. If you believe we have, please contact us and we’ll delete it.

9. Changes to this policy

We may update this Privacy Policy occasionally. We’ll update the “Last updated” date and, for any significant changes, email account holders.

10. Contact

Questions about privacy? hello@simkit.app or via the contact page.