1. Who We Are

1.1. Data controller: "EasySim Data Provider" LLC, Khan-Uul district, 15th khoroo, Ulaanbaatar, Mongolia.

1.2. Contact: info@easysim.mn / +976 8895 2208

2. What Data We Process

2.1. Account data. If you sign in with Google or Facebook, we receive your name, email address and profile picture from that provider. We never receive or see your Google/Facebook password.

2.2. Order data. When you purchase an eSIM plan we collect your email address, your phone number where required, the purchased plan, the amount paid, any promo code and the order number (UUID).

2.3. Payment data. Payments are processed through QPay. We do not collect or store your card number or banking credentials. We only receive the payment status (paid / pending) and the invoice number.

2.4. eSIM and usage data. We receive the activation status, validity period and data usage volume of your eSIM from the eSIM network provider and display it to you. We cannot and do not collect your browsing history, visited websites, messages or call content.

2.5. Device compatibility check. The application reads your device model name and manufacturer solely to check whether the device supports eSIM. This check runs locally on your device.

2.6. Technical and analytics data. On the website we use Google Analytics and Sentry (error logging), and in the application Expo performance measurement (Expo Observe), to collect page views, app launch time and error reports. This is used to improve the service.

3. Purposes For Which We Process Data

• To deliver the eSIM plan and send the QR code and installation instructions by email.
• To confirm orders and payments and to handle refund/replacement requests.
• To create your user account, authenticate your sign-in and calculate Easy points.
• To respond to user questions, feedback and complaints.
• To detect service errors and failures and to maintain security.
• To comply with legal obligations (accounting and tax records).

4. Data Sharing

4.1. We never sell your personal data. We share data with third parties only in the following cases and only to the extent necessary:

• eSIM network providers — to create and activate the eSIM profile and to account for data usage.
• QPay and banks — to process payments.
• Google, Meta (Facebook) — to authenticate the sign-in method you chose.
• Google Analytics, Sentry, Expo — for analytics and error logging.
• Competent authorities — upon an official request made on the grounds set out in the laws of Mongolia.

5. Data Security

5.1. All connections between the website/application and our servers are encrypted with HTTPS/TLS.

5.2. In the application your authentication token is stored in the secure storage of your device (iOS Keychain, Android Keystore).

5.3. Only employees who need it for their duties have access to personal data.

6. Data Retention

6.1. Account data is retained for as long as your account is active.

6.2. Order and payment records are retained for the period required by the accounting and tax laws of Mongolia (generally 5 years).

6.3. After those periods expire, the data is deleted or anonymized.

7. Your Rights, Including Data Deletion

7.1. You have the right to access the data we hold about you and to request correction of inaccurate data.

7.2. You have the right to request deletion of your account and the associated personal data at any time. To request deletion, either follow the instructions on our Account and Data Deletion Request page, or send a deletion request by email to info@easysim.mn stating the email address registered with your account (Google/Facebook), your phone number and your name.

7.3. Upon a confirmed deletion request we delete your account data (name, email address, phone number, profile picture) and all session/token data associated with the account. We process deletion requests within 5–7 business days of receipt and send you a confirmation email.

7.4. Financial and order-history records that we are required by law to retain cannot be deleted and are kept for the statutory retention period.

8. Children's Privacy

8.1. Our service is not intended for children under 18. If we discover that we have inadvertently collected data from such a user, we delete it immediately.

9. Cookies

9.1. The website uses cookies to maintain your sign-in session and to collect analytics. You can restrict cookies in your browser settings, in which case some features may be limited.

9.2. The mobile application does not use an advertising identifier and does not display behaviourally targeted advertising.