Privacy policy

Your email address — so you can sign in and receive the receipt and the profile.

Your Telegram id, name and profile photo if you signed in through Telegram: Telegram itself passes these when the Mini App opens.

Your Apple or Google ID, name and email if you signed in with them in the app: Apple or Google itself passes these. Apple may give a relay address instead of your real email — then that is all we see.

Your order and eSIM history: what was bought, when, for how much, and the profile’s status.

Data usage per profile — these figures come from the connectivity supplier.

Support conversations and the rating you gave them.

Technical request data: the address a request came from and its time. Needed to resist password guessing and to investigate failures.

The country and approximate city derived from that address: the country — to show prices in your currency, the city — to understand where our visitors come from. You can change the currency manually at any time. The country and city are looked up in the IP Geolocation by DB-IP database (db-ip.com, CC BY 4.0), which is stored on our own server — your address is not sent to anyone for this. The address itself is kept in these records for 90 days and then erased; the country and city remain.

Card details. Payment happens on the payment systems’ side; we only receive the payment id, the amount and its status.

The content of your internet traffic. We see only the number of megabytes used, not the sites you opened.

Your precise location. We never request your device’s geolocation, and a request address cannot reveal anything more precise than a city.

The eSIM supplier — to issue the profile. They receive information about the plan, not about you.

Payment systems (Idram, FastSpring) — the amount and the order number to process the payment; for card payments FastSpring also receives your email to send you the receipt.

The email delivery service — the address and the text of the message with a code or a receipt.

We do not sell data and do not share it for advertising.

Account data and purchase history — for as long as the account exists. Both you (access to your profiles) and we (accounting and dispute resolution) need it.

Confirmation codes are deleted a day after they expire.

Support conversations are kept while they may be needed for investigation: they also serve as evidence in disputes.

You can request a copy of your data, correct it, or ask for the account to be deleted — write to support from the address it is registered to.

You can also delete the account yourself: in the mobile app — Account → Delete account; without the app — as described on the “Delete your account” page (aloesim.am/delete-account). Your email, name, Telegram and Apple and Google sign-in are erased at once, your support conversations are deleted, saved cards are unlinked and bonuses are forfeited.

Deleting the account also means losing access to issued profiles: they cannot be restored afterwards.

Individual payment records must be kept longer than the account — accounting rules require it.

Cookies are needed first of all to run the site: to remember that you are signed in and which language you chose.

Two more cookies are analytical: a random visitor number, so that we count people rather than page views, and a mark of the link you came to us through. They are not shared with advertising networks or other sites. For visitors from the European Union, the United Kingdom and Switzerland they are set only after consent in the banner; declining does not restrict anything on the site.