Privacy Policy

Personal Information You Provide:

• Account details: name, email address, phone number
• Payment information: credit/debit card details, billing address (processed securely by Stripe and PayPal — we do not store full card numbers)
• Identity verification data when required by law

Information Collected Automatically:

• Device information: device model, operating system version, unique device identifiers, EID (eSIM identifier)
• Usage data: pages viewed, features used, session duration, crash logs
• Network information: carrier name, connection type, IP address
• Analytics data via Firebase Analytics and Crashlytics

Information from Third Parties:

• Authentication data from Google Sign-In (if you choose this sign-in method)
• Payment confirmation from Stripe and PayPal

• To create and manage your account
• To process eSIM purchases and activate your data plans
• To provide customer support and respond to inquiries
• To send order confirmations, activation details, and service notifications
• To process payments and prevent fraud
• To monitor and improve app performance and reliability
• To send marketing communications (only with your consent; you may opt out at any time)
• To comply with legal obligations and enforce our terms

We share information with trusted third parties solely to provide our services:

• Firebase (Google LLC) — authentication, database, analytics, crash reporting, push notifications
• Stripe, Inc. — payment processing
• PayPal Holdings, Inc. — payment processing
• eSIM providers — order fulfillment (we share only the minimum data required to provision your eSIM, such as order ID and plan details)

These providers are contractually obligated to protect your data and use it only for the services they provide to us.

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we retain transaction records for up to 5 years as required for tax and legal compliance. Crash logs and analytics data are retained for 90 days.

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.2+) and at rest
• Secure payment processing via PCI DSS-compliant providers
• Firebase security rules restricting data access to authorized users
• Regular security audits

No system is perfectly secure. While we take reasonable precautions, we cannot guarantee absolute security of your data.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict processing of your data
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent for marketing communications at any time

To exercise these rights, contact us at support@mesotechapp.com. We will respond within 30 days.

For EU/EEA residents (GDPR): Our legal bases for processing are contract performance, legitimate interests, legal obligation, and consent. You may lodge a complaint with your local data protection authority.

For California residents (CCPA): You have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. We do not sell personal information.

The App is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected such data, we will delete it promptly.

Your data may be processed in countries outside your country of residence, including the United States. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required.

The App uses Firebase Analytics and Crashlytics for app performance monitoring. These tools use device identifiers to collect usage data. You can limit data collection through your device settings.

We may update this Privacy Policy from time to time. We will notify you of material changes through the App or via email. Continued use of the App after changes constitutes acceptance of the updated policy.