Privacy Policy

1. Data we collect

• Email — to deliver your eSIM, sign-in codes and order messages.
• Order data: destination, plan, price, date, status, eSIM identifiers (ICCID) and data usage provided by our eSIM supplier.
• Payment data is processed by Stripe; we only receive the payment status and a technical payment ID, never your card number.
• Technical data: IP address and browser details in server logs — to prevent abuse.
• In the app: device model and operating system version, to check eSIM support and help with installation; a push notification token, if you enable notifications.
• Support requests: your messages and any screenshots you attach.
• Sign in with Apple or Google: if you choose it, we receive only your email address (with “Hide My Email” — an Apple relay address) and a technical sign-in identifier. We never receive passwords for these accounts.
• App crash reports: device model, OS and app version and a technical error log — without your email or IP address.
• Invite a friend: your invite code, who used it and the bonuses credited.
• Statistics: how many times the website and app were opened, plans were viewed and checkout was started — daily counters. The app also creates a random installation ID (not linked to your name or email and not Apple’s or Google’s advertising identifier) and stores with it which destinations you viewed and whether you started checkout, so that we can send relevant notifications.

2. Why

• To fulfil orders and support customers; to let you sign in to your account; for accounting and fraud prevention; to comply with the law; push notifications about your orders and about nomia discounts and offers (you can turn them off in your phone’s notification settings). We do not sell personal data or use it for third-party advertising.
• Legal bases: performance of a contract (orders and support), legitimate interests (security and fraud prevention), legal obligations (accounting and tax) and your consent (marketing emails and push notifications, which you can withdraw at any time).

3. Who we share it with

• Stripe (payments), Resend (email delivery), eSIM Access (eSIM profile supplier) and our server hosting provider. Each processes data only to provide its service to us. Data may be processed outside your country.
• Push notifications are delivered through Apple and Google services. We disclose data to public authorities only when legally required. If our business is reorganised or sold, data may pass to a successor that must honour this policy.
• Apple and Google — for signing in with their accounts; Expo (Expo Push) — to deliver push notifications; Sentry — for app crash reports.
• Google (Google Ads) — to measure how our ads perform on the website (see section 7).

4. International transfers

Nomia is a US company, so data may be processed in the United States and other countries where our providers operate. We use providers that ensure an adequate level of data protection, including standard contractual clauses where required.

5. Retention

Order data is kept as long as accounting and tax rules require (usually up to 5 years); server logs up to 90 days. Sign-in codes expire in 15 minutes, account sessions in up to 90 days.

6. Security

Data is transmitted over encrypted connections (HTTPS), and access is limited to staff and providers who need it for their work. We do not store card details. No system is completely secure; if a breach affects your data, we will notify you and the authorities as required by law.

7. Cookies and browser storage

• To measure our ads, the website uses the Google Ads tag: if you arrive via one of our ads, a Google cookie helps attribute your purchase — only the order number and amount are sent, never your email or payment details. Visitors from the EEA, the UK and Switzerland do not get advertising cookies. You can block them in your browser settings or with an ad blocker.
• To keep you signed in, your browser stores a session token in local storage; it is removed when you sign out.
• We do not track your location: you choose your destination yourself. The app does not use advertising identifiers.

8. Your rights

• You can request a copy, correction or deletion of your data, or withdraw consent, by writing to support@nomia.live. Deletion may be limited by mandatory record-keeping periods. You may also complain to the data protection authority in your country.
• You can delete your account in the profile section of the app or by emailing support.

9. Children

The service is not intended for children. We do not knowingly collect data from children under 13; if you believe a child has provided us with data, contact us and we will delete it.

10. Changes

• We may update this policy; the current version is always published on this page.
• We will notify you of material changes by email or in the app.

11. Contact

The data controller is Nomia Global LLC (State of Wyoming, USA, reg. no. 2026-002094582, address: 30 N Gould St Ste N, Sheridan, WY 82801, USA), email support@nomia.live. For privacy questions, email support@nomia.live.