LEGAL

Privacy <b>policy</b>

Last updated 26 October 2026. What we collect, why, and who we share it with.

Who's responsible

GMA LLC, a New Mexico (USA) limited liability company trading as kimsim, is the controller of your personal data. Contact: privacy@kimsim.co.

What we collect

Account: your email address, and your name if Apple or Google shares it when you sign in. If you sign in with Apple or Google we also store that provider's account ID for you. If you choose Apple's “Hide My Email”, we only get the relay address.
Orders: what you bought, when, the price, and the payment status. Card details go straight to Stripe; we never see the full number.
eSIM data: the eSIM's identifiers (ICCID and activation code), its status, and the data used and remaining, which our eSIM network partner reports to us.
Sign-in and security: one-time sign-in codes and session records (stored only as hashes), and basic server logs.

We don't track your location or browsing, and we don't see what you do online over the eSIM.

Why we use it

To issue, deliver and support your eSIM, and to take payment (performing our contract with you).
To let you sign in and see your eSIMs.
To prevent fraud and keep the service secure (legitimate interests).
To meet legal, tax and accounting duties.

We send service emails only (your eSIM, sign-in codes, top-up and refund receipts). No marketing without your consent.

Our eSIM network partner (issues and activates your eSIM): order and eSIM identifiers needed to issue and run the eSIM. We don't send them your email.
Stripe (payments): your payment and the email you enter at checkout.
Apple / Google, only if you choose to sign in with them.
Email provider: Resend, to send service emails.
Hosting: DigitalOcean (servers in Singapore). Data may be processed outside your country, including in the USA and Singapore, under the safeguards our providers offer (such as standard contractual clauses).

Cookies

We use only essential cookies: one to keep you signed in, one that lets the browser you paid in see your install screen, and a short-lived one during Apple or Google sign-in. No advertising or analytics cookies.

How long we keep it

Account and order records for as long as your account is open and then kept for up to 6 years for tax and accounting records. Sign-in codes expire within 20 minutes (72 hours for the link in your eSIM email).

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it, by emailing privacy@kimsim.co. You can also complain to your local data protection authority.