Privacy Policy

1. Who we are

TravelSim is operated by In2uitions FZCO, a company registered in the United Arab Emirates, at IFZA, Dubai Silicon Oasis. We are responsible for your personal data under this policy. Contact us about privacy at [email protected].

We apply the UAE Personal Data Protection Law. Where they apply to you, we also respect the rights given by other laws, such as the EU and UK General Data Protection Regulation.

2. What we collect

• Account details: your email address, and your name if you give it or if Google or Apple share it when you sign in with them. If you sign in with Google or Apple, we keep an identifier from them that links that sign-in to your account. Apple may give us a private relay address instead of your real email.
• Orders: the plans and top-ups you buy, prices, currency, dates, any promo code used, and the status of each order.
• Your eSIMs: the eSIM's ICCID number, its installation details (stored encrypted), its status, and data usage reported by our network partner. We do not store your device's EID.
• Payments: handled by Stripe. We receive a payment reference and the outcome, never your full card number. If you save a card, Stripe stores it, and we keep only your Stripe customer reference.
• Technical data: your IP address and browser information, used briefly to keep the site secure, prevent abuse and limit repeated sign-in attempts.
• Preferences: your language, currency, theme and email alert settings.
• Messages: anything you send us when you contact support.

3. How we use it

• To create and secure your account, and sign you in (to perform our contract with you).
• To take payment, deliver your eSIM, show its usage, process top-ups and refunds, and send receipts and delivery emails (contract).
• To send data and expiry alerts, which you can turn off in your account (legitimate interests, with your choice to opt out).
• To prevent fraud and abuse, keep our services secure, and resolve disputes (legitimate interests).
• To keep financial records and meet legal obligations, such as accounting and tax (legal obligation).

We do not sell your personal data, and we do not use it for advertising.

4. Who we share it with

Only with service providers who process it on our behalf, under contracts that protect it, and only what each one needs:

• Stripe: payments, saved cards and fraud prevention.
• Our eSIM network partner: to issue, manage and report on your eSIMs. We share order details, not your email address.
• Amazon Web Services (Amazon SES): sending our emails.
• Railway: hosting our website and database.
• Cloudflare: delivering the website securely and protecting it from attacks.
• Google and Apple: only if you choose to sign in with them.

We may also disclose data where the law requires it, or to protect our rights and our customers.

5. International transfers

Our providers may process data outside your country, including in the United States and the European Union. Where required, we rely on safeguards such as standard contractual clauses.

6. How long we keep it

• Your account data, until you delete your account.
• When you delete your account, we remove your personal details and your access to eSIM installation details. We keep anonymized order records for as long as accounting and tax laws require.
• Sign-in codes expire after 10 minutes. Security records are kept briefly.

7. Your rights

Depending on where you live, you can ask to access, correct, delete or receive a copy of your personal data, or object to or restrict how we use it. You can delete your account yourself from your account page. For anything else, email [email protected], and we will reply within 30 days. You can also complain to your data protection authority.

8. Cookies and similar storage

We use only what the site needs to work. We do not use advertising or analytics cookies.

• travelsim_session: keeps you signed in. Lasts up to a year, or until you sign out.
• travelsim_csrftoken: protects forms against forgery.
• currency: remembers the currency you chose. Lasts a year.
• Theme: your light or dark choice, kept only in your browser.
• Stripe: on checkout pages, Stripe sets cookies for fraud prevention.
• Cloudflare: may set a cookie to tell people from bots.
• Google and Apple: only if you use their sign-in buttons.

9. Security

We use encrypted connections throughout, encrypt eSIM installation details at rest, and protect staff access with two-factor authentication. No system is perfectly secure, so please keep your email account secure too.

10. Children

Our services are not intended for children under 18 without a parent or guardian, and we do not knowingly collect data from children.

11. Changes

We may update this policy. The date at the top shows the latest version. We will tell account holders about significant changes by email.