Last updated: 4 October 2026
This notice supplements our Privacy Policy and explains what information the PuraSIM customer app (app.purasim.com) processes. The Privacy Policy applies to everything else.
If you use our customer app to view your eSIMs, install them, add data or receive alerts, we also process the following information:
Sign-in. You sign in with your customer account from our shop, using Shopify's sign-in system. We do not create our own passwords. When you sign in, Shopify provides us with your customer identifier, your name and your email address, which we use to show you only your own orders and eSIMs.
App cookies. We use two strictly necessary cookies, with no advertising or analytics purposes: a temporary sign-in cookie that is used only during the sign-in process (10 minutes at most) and a session cookie that keeps you signed in. The session expires after 30 days without using the app and, in any case, after 90 days. We do not store the session itself, only an encrypted fingerprint of it.
Information about your eSIMs. To show you the status of your eSIMs (for example, whether it is installed or active, the data used and remaining, the expiry date and the available networks), we query our eSIM provider. To calculate how many days of data you have left at your rate of use, we keep for 45 days a history of the volume of data consumed by each eSIM (date, time and amount of data). This history does not include your location, the pages you visit or the content of your browsing, which we do not know.
Installation code. The eSIM activation code is shown only when you request it and only if the eSIM is not yet installed on a device. The app does not store it on the server or on your device. For security reasons, we record how many times it has been shown each day (5 at most) and keep that count for 60 days.
Top-ups. When you add data to an eSIM from the app, payment is made through our shop's checkout process and the order is governed by the rest of this policy. To avoid duplicate charges, we keep for 120 days a reference of each top-up initiated (eSIM, package, amount and status).
Alerts on your device (notifications). Only if you enable them. We store the technical address that your browser or phone assigns to us for receiving alerts, your language and your time zone (so as not to send you alerts at night), as well as a record of the alerts sent for 120 days (so as not to repeat them). Alerts are sent encrypted through your device's notification service (Apple, Google, Mozilla or Microsoft, as applicable), which cannot read their content. You can disable them at any time in the app or in your device settings. Legal basis: your consent.
Data stored on your device. The app stores in your browser a summary of your eSIMs (without installation codes) so that it can show it to you offline for a maximum of 7 days, and some preferences, such as language or whether you have dismissed a suggestion. This summary is deleted when you sign out.
Service improvement and security. We count app usage in aggregate form (for example, how many people open the top-up screen each day), without associating it with any person, and we record technical errors without personal data for 90 days. To prevent abuse, for 2 days we note which app functions each customer has used that day (only the name of the function, without content) and how many times they have signed in during the last hour. In your customer profile on our email platform we note that you use the app, whether you have installed it or enabled alerts, the date of last use and whether you have viewed or started a top-up. This does not subscribe you to marketing communications.
PuraPuntos. If you use the points programme, we calculate your points from your paid orders of the last 12 months. In your customer record in our shop we store the coupons you have redeemed (code, points, amount and dates) and the achievements earned in the app (signing in, enabling alerts, installing the app). Each coupon is a single-use discount code linked to your account. Points expire after 12 months; the redemption history is kept for as long as your customer account exists. Legal basis: performance of the contract (the programme terms).
Providers. For the app we use, in addition to Shopify: Cloudflare (hosting of the app and its database), Supabase (usage history), our eSIM provider (status and usage of the eSIMs) and Klaviyo (email profile).
Legal basis. We process this data to provide you with the service you have contracted (performance of the contract), to protect your account and prevent abuse (legitimate interest) and, in the case of alerts, with your consent.
Retention and deletion. While you use the app we keep your name, your email address, your language and your preferences, and we delete them automatically if you do not use the app for 13 months. You can delete your app data at any time from Account › Delete my app data: your sessions, your alerts and your preferences are deleted. Your orders are kept in our shop in accordance with the rest of this policy.
