SIMPrivacy Policy
Effective 3 November 2026 ยท Equality Software Ltd ("we", "us")
This policy explains what the SIM2eSIM app and website collect, why, and your rights under UK GDPR. Contact: khaled.a@softwareequality.com.
What we collect and why
| Data | Purpose | Lawful basis |
|---|---|---|
| Mobile number (optional, entered by you) | Identify your subscription to your operator and confirm the same number works on eSIM | Contract (performing the conversion you ask for) |
| SIM network code and operator name (MCC/MNC, service provider name), SIM country | Identify your operator automatically | Contract |
| Phone make, model, Android version, whether eSIM is enabled | Check your phone supports eSIM | Contract |
| A random app install ID | Sign you in without an account. It is not a hardware identifier | Contract |
| Conversion history and audit trail | Show progress, resolve problems, prove what was approved | Contract; legitimate interests (fraud prevention, dispute resolution) |
| One-time codes from your operator | Passed straight to your operator to verify you; never stored in readable form | Contract |
| Email address (optional, entered by you) | Send your receipt and conversion updates | Contract; consent for optional updates |
| Payment records (amount, status, Google Play or Stripe reference) | Take the conversion fee or subscription, refund it if a conversion fails, keep accounting records | Contract; legal obligation (tax records) |
| Advertising ID and ad interaction data (Google AdMob) | Show ads that keep the app free | Consent (asked in-app in the UK and EEA) |
We do not read your IMSI, ICCID, EID, contacts, messages or precise location. Card details are entered on Google Play or Stripe's own secure pages and never reach us.
Google AdMob may collect your device's advertising ID, approximate location derived from your IP address, ad interactions and diagnostics to serve and measure ads. See how Google uses information from apps that use its services.
Who we share it with
Your mobile operator or its authorised eSIM provisioning partner, only after you press Approve & Convert, and only what they need to process the switch. Google (AdMob) for advertising and Google Play for in-app payments, under Google's own privacy policy. Stripe for card payments on the web. Oracle Cloud Infrastructure hosts our servers in the UK region. We do not sell your data.
AI processing
The app uses automated agents to run your conversion. Where AI language models are used to explain errors or draft support tickets, your phone number, SIM identifiers, codes and activation details are removed first. AI never decides whether your conversion succeeds - only your operator's confirmed responses do.
Security
Data is encrypted in transit (TLS) and sensitive fields are encrypted at rest. Access is restricted and every conversion step is logged in a tamper-evident audit trail.
How long we keep it
Conversion records are kept for up to 24 months for support and dispute purposes, then deleted. eSIM activation codes are deleted as soon as your conversion is verified. You can delete your data sooner at any time.
Your rights
You can access, export and delete your data inside the app (History → Delete my data) or by emailing us. You can also object, restrict processing, correct data, and withdraw ad consent through the app's privacy options. You may complain to the Information Commissioner's Office (ico.org.uk).
Cookies and local storage
The website stores a sign-in token and your language choice in your browser's local storage, and sets one short-lived cookie during optional sign-in. We do not use advertising or tracking cookies on the website.
Deleting your account
See how to delete your SIM2eSIM account and data.
Children
SIM2eSIM is for adults aged 18 and over who are the account holder or authorised user of the mobile subscription.
Changes
We will update the date above and notify you in the app of any material changes.