In short
- We only collect the data needed to provide the service.
- We never sell your data.
- You can access, correct or delete your data at any time.
This policy explains how your personal data is collected, used and protected when you use the Kiazo Mobile website, app and eSIM services.
Scope
This policy applies to kiazo.mobile, the Kiazo Mobile iOS and Android apps, and all eSIM data plans offered through these channels.
Data we collect
To provide the service we process:
- Identity and contact: name, email address, optional phone number
- Transactions: order history, purchased plans, billing details
- Device: device model, operating system, EID and eSIM ICCID
- Usage: data consumption, country of connection and network used
- Support: your live chat and email conversations
- App and notifications: a random installation ID of the app and, only if you allow notifications, the device’s push notification token
- Security and diagnostics: your IP address and the country derived from it, used to prevent fraud and abuse; app error reports without personal data, which you can turn off in the app’s settings
- Sign-in with Apple or Google, if you choose it: the email address, name and account identifier the provider shares with us
- Ad measurement, only if you allow marketing cookies: the Google Ads click ID (gclid, gbraid, wbraid), the order's number, amount and currency, and for enhanced conversions your email address, hashed with SHA-256 in your browser
IP geolocation by DB-IP (CC BY 4.0).
How we use your data
- To process your order and create your eSIM profile
- To notify you about remaining data, validity and low-data alerts
- To secure payments and prevent fraud
- To respond to support requests
- With your consent, to tell you about offers and discounts
- Only with your consent, measuring whether our Google Ads ads lead to purchases
Retention
Account data is kept while your account is open. Invoices and transaction records are retained for 10 years to meet legal obligations. When you delete your account, other data is deleted or anonymised within 30 days.
The Google Ads click ID is kept in your browser and on our servers for at most 90 days, then deleted. The lifetimes of Google's cookies are listed in the cookie policy. When you withdraw marketing consent through “Cookie preferences” at the bottom of any page, these cookies are deleted from your browser.
Security
Data is encrypted in transit with TLS and at rest with AES-256. Card details never touch our servers; payments are processed by PCI DSS Level 1 certified Stripe or by Lava.
Your rights
You have the right to access, rectify, erase, restrict, object to processing and to data portability. Submit requests from Account settings or via the address below.
Deleting your account: in the Kiazo Mobile app, open Account and tap “Delete account” at the bottom of the screen; on the website, open Account settings. You can also ask on the account deletion page of this site or by email. Sign-in stops at once, and your data is deleted or anonymised within 30 days, except the invoices and transaction records the law requires us to keep.
You can unsubscribe from marketing emails at any time and turn app notifications off in your phone’s settings.
Contact
The data controller is the company shown under Company details on this page. Privacy questions: privacy@kiazo.mobile
Have a question?
Send us any questions about our legal documents and we’ll reply within 3 business days.