Política de Privacidade

Last updated: October 25, 2026 · Effective date: October 25, 2026

This Privacy Policy explains how Onesim LLC ("Onesim", "we", "our", "us") collects, uses, shares and protects personal information when you use the website at onesim.co, the Onesim web app at app.onesim.co (including when it is opened inside another app), the Onesim mobile apps for iOS and Android, our customer support and related services (together, the "Services"). It is a single Policy for all platforms; where something applies only to one platform, we say so.

Summary

• We collect what we need to sell and deliver eSIMs, take payments, provide support, keep the Services secure and understand how they are used.
• We use Google Analytics to understand how the Services are used and to measure our marketing. These tools may use cookies and device advertising identifiers, and Google may link this data with data from other apps and websites to measure advertising. See Section 4 for details and how to opt out.
• We do not show ads in the Services and do not sell your personal information for money.
• Card details are handled by our payment processor, Stripe; we never see your full card number.
• You can access, correct or delete your data, and delete your account, at any time.

1. Who Is Responsible for Your Data

Onesim LLC, 1209 Mountain Rd Pl NE, Suite R, Albuquerque, New Mexico 87110, USA, is the controller of your personal information. Contact us at hello [at] onesim [dot] co with any privacy question or request.

2. Information We Collect

2.1. Information you give us

• Account information. Your email address and, if you provide it, your name. Sign-in is handled by our authentication provider; passwords are stored only in hashed form. If you use Sign in with Apple or Google Sign-In, we receive the email address and name that the provider shares with us (with Apple, this may be a private relay address). If you open the Onesim web app inside another app that supports mini apps, that app passes us your account ID on that platform, name, username, language and other basic profile details it makes available, so that we can sign you in.
• Orders. The plans you buy, destination, price, currency, promo codes, order history and the email address for delivery.
• Payments. Payments are processed by Stripe. Stripe collects your card or wallet details directly; we receive a payment reference, card brand, last four digits, billing country, payment status and fraud-risk signals. If you pay with a mobile wallet such as Apple Pay or Google Pay, the wallet provider tokenizes your card. Where other payment methods are offered (for example, digital-currency wallet payments in the web app), we receive the details needed to confirm the payment, such as the transaction ID and the public wallet address.
• Support. Messages you send through the support chat or by email, screenshots you choose to attach, and your ratings, feedback, issue reports and price-match requests.
• eSIM sharing. If you share an eSIM, we record the share link, who created it and which account accepted it.

2.2. Information created when you use the Services

• eSIM data. eSIM identifiers (such as the ICCID), installation details, activation status, data usage, validity and expiry, which we receive from our connectivity providers.
• Device and log data. IP address, device type and model, operating system and version, browser or app version, language, time zone, session information, and records of requests and errors.
• Approximate location. Country, region and city derived from your IP address, used for security, fraud prevention, showing relevant plans and supporting you. We do not collect precise (GPS) location.
• Analytics data. Pages and screens you view and the steps of the purchase flow (viewing a plan, adding it to the cart, starting checkout, choosing a payment method and completing a purchase, including the order ID, amount, currency and promo code). See Section 4.
• Integrity signals. To block card testing and automated abuse of payments, the Services check that requests come from a genuine website or app, using bot-protection and app-integrity services, including those provided by Apple and Google for their platforms. These checks return an integrity verdict about the app or browser, not information about your identity.

2.3. Mobile app permissions

The mobile apps ask only for the following, and each is optional unless you use the related feature:

• Notifications - to send you order and eSIM updates (for example, eSIM ready, plan running low, plan expiring). We store the push token issued by your device platform's notification service with your account. You can turn notifications off in your device settings.
• Camera - only if you choose to scan a payment card in the payment form. The scan is processed on your device by the payment form to fill in the card number; we do not receive or store camera images.
• Photos - only to let you pick screenshots to attach to a support request. We receive only the images you select.
• Device information - device model, manufacturer, operating system version and eSIM support, used to check compatibility and to diagnose issues.

The apps store your sign-in session and preferences on the device, using the device's secure storage for sensitive values. The apps do not access your contacts, messages, microphone, precise location or list of installed apps, and do not collect IMEI or other hardware identifiers. Advertising identifiers are described in Section 4.

3. How We Use Information

Where the EU or UK GDPR applies, the legal basis for each purpose is shown in brackets.

• Providing the Services - creating your account, selling and delivering eSIMs, processing payments and refunds, showing your orders, eSIMs and usage, checking device compatibility, and enabling eSIM sharing [performance of a contract].
• Service messages - order confirmations, eSIM delivery, usage and expiry alerts, account-deletion codes and notices about changes to our terms [contract; legal obligation].
• Customer support - answering questions, diagnosing eSIM issues, restoring eligible orders and handling refunds [contract; legitimate interests].
• Security and fraud prevention - verifying requests, preventing card testing, payment fraud and abuse of promotions, and protecting accounts [legitimate interests; legal obligation].
• Measurement and improvement - understanding how the Services are used, measuring the purchase flow, fixing errors and improving features [legitimate interests or consent, where required by law].
• Advertising measurement - measuring which of our ads and campaigns on other websites and apps lead people to install the apps or buy a plan [consent, where required by law, or legitimate interests].
• Marketing - occasional news and offers by email, which you can unsubscribe from at any time [consent or legitimate interests, depending on where you live].
• Legal compliance - keeping tax and accounting records and responding to lawful requests [legal obligation].

We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

4. Analytics, Advertising Measurement and Tracking

We use Google Analytics, provided by Google LLC: on the website, in the web app and in the mobile apps. Google receives the analytics data described in Section 2.2 together with identifiers such as cookies on the web, an app-instance ID in the mobile apps and, where available, the device advertising identifier, as well as device and browser information and an approximate location derived from your IP address. When the web app is opened inside another app, that app's own analytics service may also receive basic launch and usage events.

We use this data to measure and improve the Services and to measure the effectiveness of our advertising on other websites and apps. For this purpose:

• on Android, the apps may collect the Android advertising ID;
• on iOS, the apps can access the advertising identifier (IDFA) only if you allow tracking in iOS settings; the iOS app also includes Google's on-device conversion measurement component, which helps attribute app installs and purchases to our ads;
• Google may combine this data with information it holds from other apps and websites, including data linked to your Google account if you have enabled ads personalization, to provide cross-device reports and advertising measurement to us.

This may qualify as "tracking" under Apple's App Tracking Transparency framework and as "sharing" for cross-context behavioral advertising under California law. We do not show ads in the Services, do not sell personal information for money, and do not provide your data to data brokers. The App Store privacy label and the Google Play Data safety section for our apps describe this data use.

You can limit this at any time:

• iOS: turn off Allow Apps to Request to Track in Settings → Privacy & Security → Tracking.
• Android: delete or reset your advertising ID in your device settings (Settings → Privacy → Ads, or Settings → Google → Ads, depending on the device).
• Web: block or delete cookies in your browser, or install the Google Analytics opt-out browser add-on.
• Google account: manage ads personalization at myadcenter.google.com.
• Any platform: email hello [at] onesim [dot] co to opt out of sharing or to ask us to delete analytics data associated with you. Reinstalling a mobile app also resets its app-instance ID.

5. Cookies and Local Storage

On the website and web app we use cookies, local storage and similar technologies that are:

• strictly necessary - to keep you signed in, secure checkout and protect forms and payments from bots;
• functional - to remember your language, currency and other preferences;
• analytics and advertising measurement - Google Analytics cookies, as described in Section 4.

You can delete or block cookies in your browser settings; blocking strictly necessary cookies may prevent sign-in or checkout from working.

6. AI-Powered Support

Our support chat uses an AI assistant powered by a third-party AI model. To answer your request, we send the provider the conversation text, screenshots you choose to upload, and the account, eSIM, order and payment status the assistant needs. Under our agreement, the provider does not use these inputs and outputs to train or improve its models. The assistant does not receive payment card details, credentials or direct database access. You can ask for a human operator at any time; when a conversation is escalated, the relevant messages, screenshots and diagnostic results are shared with authorized support staff in our internal support tools. Your support history is shown across platforms only within the same linked Onesim account.

7. How We Share Information

We share personal information only as needed for the purposes above, with:

• Service providers who process data on our behalf under contracts that limit its use:
  • Stripe - payment processing, refunds and fraud prevention;
  • Google - Google Sign-In, Google Pay, Google Analytics (analytics and advertising measurement) and services for the Android app;
  • Apple - Sign in with Apple, Apple Pay and services for the iOS app, such as push notifications;
  • providers of authentication, databases, cloud hosting and infrastructure that run our website, apps and servers;
  • an AI model provider for the support assistant (see Section 6);
  • providers of email delivery, push notifications, bot protection and network security;
  • communication tools used by our support team.
• Connectivity providers and network operators - to issue, activate and operate your eSIM. We share only what is needed, such as an order reference, the plan and the eSIM identifiers.
• Platforms you choose to use - if you use the web app inside another app, order updates and support replies may be delivered to you through that app, which processes them under its own privacy policy.
• People you share an eSIM with - the recipient can see the shared eSIM and its plans.
• Legal and safety - when required by law or legal process, or to protect the rights, property or safety of Onesim, our users or others.
• Business transfers - in connection with a merger, acquisition, financing or sale of assets, subject to this Policy; we will notify you of any change in control of your data.

We do not sell personal information for money. Our use of Google Analytics and advertising identifiers for advertising measurement, described in Section 4, may be considered "sharing" for cross-context behavioral advertising under California law; you can opt out as described in Section 4.

8. International Transfers

We are based in the United States, and our providers may process data in the United States and other countries. When we transfer personal data from the European Economic Area, the United Kingdom or Switzerland, we rely on safeguards such as the European Commission's Standard Contractual Clauses (and the UK addendum) or the provider's certification under the EU-U.S. Data Privacy Framework. You can ask us for details of these safeguards.

9. How Long We Keep Information

• Account data - while your account is active and up to 30 days after you delete it (for backups and fraud prevention).
• Orders, payments and refunds - up to 7 years, as required for tax and accounting.
• Support conversations and AI interaction records - up to 3 years after your last interaction; screenshots are deleted after 90 days.
• Device, log and session data - up to 12 months.
• Google Analytics event data - up to 14 months.

When we no longer need information, we delete or anonymize it.

10. Security

We protect personal information with measures such as encryption in transit (TLS), hashed passwords, encrypted storage of sensitive values on your device, verification of sign-in requests, role-based access controls, logging and backups. No system is perfectly secure; please use a strong, unique password and protect access to your email and devices. If a security incident affects your personal information, we will notify you and the authorities as required by law.

11. Your Rights and Choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy in a portable format;
• correct inaccurate information;
• delete your information and your account;
• object to or restrict certain processing, including processing based on legitimate interests and direct marketing;
• withdraw consent at any time, without affecting earlier processing;
• lodge a complaint with your local data protection authority.

California residents have the right to know, delete and correct their personal information, to opt out of the "sharing" of personal information for cross-context behavioral advertising, and not to be discriminated against for exercising these rights. We do not sell personal information for money.

You can delete your account in the account settings of the website or mobile app. For any other request, email hello [at] onesim [dot] co. We respond within the time required by law (usually 30 days) and may ask you to confirm your identity. Some information may be kept after deletion where the law requires it (see Section 9).

Marketing: use the unsubscribe link in any marketing email. We will still send service messages needed to operate the Services. Notifications: turn push notifications off in your device settings.

12. Children

The Services are not directed to children under 13, or under 16 in the European Economic Area and the United Kingdom, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact hello [at] onesim [dot] co and we will delete it.

13. Third-Party Services

The Services link to or run on third-party services, such as app stores, sign-in providers, payment providers and other apps that can open the Onesim web app. Their privacy practices are governed by their own policies, and we encourage you to read them.

14. Changes to This Policy

We may update this Policy. The "Last updated" date above shows when it last changed. If a change is material, we will tell you in the Services or by email before it takes effect.

15. Contact Us

Onesim LLC
1209 Mountain Rd Pl NE, Suite R
Albuquerque, New Mexico 87110, USA
Email: hello [at] onesim [dot] co