Privacy Policy

1. Who We Are

lamasim ("we", "us", "our") operates lamasim.com and the lamasim mobile app. We provide travel eSIM data plans for international travelers. For privacy inquiries, contact us at [email protected].

2. Data We Collect

Account data: Email address, password (hashed), and optionally a display name when you register.

Purchase data: Payment details are processed by Stripe and never stored on our servers. We retain order records (plan, country, amount, date) for billing and support purposes.

eSIM data: Your device EID, eSIM profile identifier, and activation status. Required to deliver your eSIM.

Usage data: Data consumption on active plans, sourced from our eSIM provider (Airalo). Used to show your usage in-app and to send threshold alerts.

Technical data: IP address, device model, OS version, and app version. Used for security, fraud prevention, and improving compatibility.

Communications: Emails you send us, and transactional emails we send you (receipts, installation instructions, support replies).

3. How We Use Your Data

• Deliver eSIM plans you purchase
• Send receipts, installation instructions, and activation confirmations
• Provide customer support
• Send usage alerts (80% and 100% data consumed) when you opt in
• Prevent fraud and abuse
• Comply with legal obligations
• Send promotional emails if you opt in (you can unsubscribe at any time)

4. Data Sharing

We do not sell your personal data. We share data only with:

• Airalo: Our eSIM provider. Receives your device EID and plan details to provision your eSIM. Their privacy policy applies.
• Stripe: Payment processor. Handles payment card data under PCI-DSS compliance. Their privacy policy applies.
• AWS: Our infrastructure provider (email via SES, cloud hosting). Data is stored in the EU (Frankfurt region).
• Firebase: Push notification delivery. Only a device token is shared; no personal data.

5. Your Rights (GDPR / UK GDPR)

If you are in the EU or UK, you have the right to: access your data, correct inaccurate data, delete your account and data, export your data in a portable format, and object to certain processing. To exercise these rights, email [email protected]. We will respond within 30 days.

6. Data Retention

Account data is retained until you request deletion. Order records are retained for 7 years for tax and accounting compliance. Usage data is retained for 12 months.

7. Cookies

lamasim.com uses minimal cookies: a session cookie for authenticated users, and analytics cookies if you consent. No third-party advertising cookies are used.

8. Children

Our services are not directed to children under 16. We do not knowingly collect data from children.

9. Changes

We will notify registered users by email of material changes to this policy at least 14 days before they take effect.

10. Contact

Privacy questions: [email protected]
General support: Contact page