Privacy Policy

Last updated April 2026

How OVIO collects, uses and protects your personal information.

1. Introduction

OVIO ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the OVIO mobile application and related services ("Service").

By downloading or using the OVIO app, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the application.

2. Information We Collect

We collect several types of information in connection with the Service:

Personal Information You Provide:

  • Full name and email address
  • Phone number for account verification
  • Password (stored in encrypted form)
  • Profile preferences and settings

Payment Information:

  • Credit and debit card details (processed securely via Stripe)
  • Billing address
  • Transaction history and purchase records
  • We do not store full card numbers on our servers

Device & Technical Information:

  • Device type, model, and manufacturer
  • Operating system and version
  • Unique device identifiers (IMEI, UDID)
  • Mobile network information
  • IP address and approximate location
  • App version and crash reports

eSIM & Usage Data:

  • eSIM ICCID numbers
  • Data consumption and remaining balance
  • Plan activation dates and expiry
  • Connection quality and network performance

Communications:

  • Messages and inquiries sent to our support team
  • Feedback and reviews you submit

3. Special Categories of Personal Data

OVIO does not intentionally collect sensitive categories of personal data, such as health information, religious beliefs, or racial or ethnic origin. If you voluntarily disclose such information — for example, in a support request or accessibility-related communication — we will handle it in accordance with this Privacy Policy and will not use it for any purpose beyond addressing your request.

4. How We Use Your Information

OVIO uses the information we collect for the following purposes:

Service Delivery:

  • Process and fulfill eSIM purchases
  • Generate and deliver QR codes for eSIM activation
  • Manage your eSIM subscriptions and renewals
  • Provide data usage monitoring and alerts
  • Enable top-up and refill functionality

Account Management:

  • Create and maintain your user account
  • Authenticate your identity and prevent fraud
  • Recover your account if you lose access

Communications:

  • Send order confirmations and receipts
  • Notify you of data running low or plan expiry
  • Respond to your customer support requests
  • Send promotional offers and updates (only with your consent)

Improvement & Analytics:

  • Analyze usage patterns to improve our app
  • Debug technical issues and crashes
  • Develop new features and services
  • Conduct market research and analysis

Legal & Compliance:

  • Comply with applicable laws and regulations
  • Enforce our Terms of Use
  • Protect the rights and safety of OVIO and users

For users in the EU/EEA, UK, and other jurisdictions that require this disclosure, we process your personal data under the following legal bases:

  • Contract Performance: to deliver the eSIM plans, activation, and account services you've purchased or requested
  • Legitimate Interests: to improve our app, prevent fraud, and personalize your experience, balanced against your privacy rights
  • Legal Compliance: to meet our obligations under applicable tax, financial, and consumer protection laws
  • Consent: for marketing communications and optional features, which you may withdraw at any time

6. Sharing Your Information

OVIO does not sell, trade, or rent your personal data to third parties. We may share your information in the following circumstances:

eSIM Network Partners:

To deliver connectivity services, we share necessary information (such as ICCID numbers and activation data) with our global carrier and eSIM provider partners. This sharing is strictly limited to what is needed to provision your eSIM.

Payment Processors:

Payments are processed by Stripe, Inc. Your payment information is subject to Stripe's Privacy Policy. OVIO does not store your full card details.

Technology Service Providers:

We work with trusted third-party companies for cloud hosting, analytics, customer support tools, and push notifications. These providers are contractually bound to protect your data.

Business Transfers:

If OVIO is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred.

Legal Requirements:

We may disclose your information if required to do so by law, court order, or government regulation, or to protect the rights, property, or safety of OVIO, our users, or the public.

7. Data Security

The security of your data is critically important to us. We implement the following measures to protect your personal information:

  • 256-bit SSL/TLS encryption for all data in transit
  • AES-256 encryption for sensitive data stored at rest
  • PCI DSS compliant payment processing via Stripe
  • Multi-factor authentication options for your account
  • Regular security audits and penetration testing
  • Strict role-based access controls for our team
  • Automatic session timeouts and secure logout
  • Real-time monitoring for suspicious activity

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee the absolute security of your information. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

8. eSIM Data & Network Usage

When you use an OVIO eSIM, your data traffic is routed through our partner carrier networks. The following applies to your network data:

  • OVIO does not monitor, inspect, or log your internet browsing activity
  • We collect aggregate, anonymous usage statistics to improve network quality
  • Data consumption figures are measured by our carrier partners and reported to us
  • Network performance varies by location and carrier availability
  • We are not responsible for the data practices of the underlying carrier networks

Your eSIM data plans are subject to fair use policies as specified in each plan description. Unlimited plans may be subject to speed throttling after a fair use threshold is reached.

9. Cookies & Tracking Technologies

Our app may use the following tracking technologies:

Analytics Tools:

We use analytics services to understand how users interact with our app, which features are most used, and where technical issues occur. This data is aggregated and anonymized.

Crash Reporting:

We collect crash reports to identify and fix technical issues. These reports may include device information and app state at the time of the crash.

Push Notifications:

With your permission, we send push notifications for data alerts, order updates, and promotional offers. You can disable notifications at any time in your device settings.

You can control tracking preferences through your device settings. Disabling certain tracking may affect the functionality of our services.

10. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

Right of Access:

Request a copy of all personal data we hold about you. We will provide this within 30 days of your request.

Right to Rectification:

Request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure ("Right to be Forgotten"):

Request deletion of your personal data. Note that we may retain certain information as required by law or for legitimate business purposes.

Right to Data Portability:

Request that we transfer your data to another service provider in a machine-readable format.

Right to Restrict Processing:

Request that we limit how we use your personal data in certain circumstances.

Right to Object:

Object to our processing of your personal data for direct marketing purposes.

Right to Withdraw Consent:

Withdraw consent for marketing communications at any time by using the unsubscribe link in emails or contacting us directly.

To exercise any of these rights, contact us at privacy@ovio.app. We will respond within 30 days. We may need to verify your identity before processing your request.

11. Additional Rights in Certain Jurisdictions

If you are located in a jurisdiction with its own data protection framework — including but not limited to the EU/EEA, UK, California, or other US states with comprehensive privacy laws — you may have additional or different rights under those laws beyond what's described in Your Privacy Rights above. Contact privacy@ovio.app and we will address your request in accordance with the law that applies to you.

12. Children's Privacy

OVIO is not intended for children under the age of 13. We do not knowingly collect personal information from children under this age.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at privacy@ovio.app. Upon verification, we will delete such information from our systems within 72 hours.

If we discover that we have collected personal information from a child under the applicable age limit, we will take immediate steps to delete that information.

13. International Data Transfers

OVIO operates globally and your information may be processed in countries other than your country of residence. These countries may have different data protection laws.

When we transfer your data internationally, we ensure appropriate safeguards are in place, including:

  • Standard contractual clauses approved by relevant data protection authorities
  • Adequacy decisions for transfers to countries with equivalent data protection standards
  • Binding corporate rules where applicable

By using OVIO, you consent to the transfer of your information to countries outside your country of residence, including the United States, where our primary servers are located.

14. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

  • Account data: Retained while your account is active
  • Transaction records: Retained for 7 years for financial and tax compliance
  • Support communications: Retained for 3 years
  • Usage analytics: Retained in anonymized form indefinitely

If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are legally required to retain it. You can request account deletion by contacting us at privacy@ovio.app or through Settings in the app.

The OVIO app may contain links to third-party websites, services, or features that are not owned or controlled by OVIO. This Privacy Policy applies only to information collected by OVIO.

We are not responsible for the privacy practices of third-party services, including:

  • Carrier network partners
  • Payment processors
  • Social login providers (Apple, Google, Facebook)
  • Customer support tools

We encourage you to review the privacy policies of any third-party services you access through our app.

16. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

When we make significant changes, we will:

  • Post the updated policy in the app with a new "Last Updated" date
  • Send an email notification to your registered address
  • Display a prominent notice in the app for 30 days

Your continued use of OVIO after changes become effective constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you should stop using the app and delete your account.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Data Protection Officer

Email: privacy@ovio.app

Website: ovio.app/privacy

In-app: Profile → Support → Help Center

We are committed to resolving privacy-related concerns and will respond to all requests within 30 days.

For users in the European Union, you also have the right to lodge a complaint with your local data protection supervisory authority.