Privacy Policy

01Who we are

Simbird is a travel eSIM store operated by ODBS LLC (“ODBS”, “we”, “us”), a company organised in Wyoming, United States. This policy covers the Simbird app, the servers that run the Simbird service and this website. ODBS LLC is the data controller responsible for the processing described here. You can reach us at info@odbs.tech.

02Browsing and your account

You can look at destinations and plans without an account. When you first open the app, it creates a guest session with random identifiers so that it can talk to our servers; a guest has no name or email address.

To buy a plan you sign in with Apple, with Google or with a 6-digit code we send to your email address. We then store your email address, your name if your sign-in provider shares it or you enter it, the identifier Apple or Google gives us for your account, your language and when you last signed in. With Sign in with Apple you can hide your email address; Apple then gives us a private relay address. Email codes are stored only as a one-way hash and stop working after 10 minutes.

03Orders and payments

For each order we keep the plan and the destination you chose, the price, the tax and the currency, the billing country you give and the country of your IP address (two pieces of evidence that tax law asks us to keep), the order and payment status, your receipt and any refund or withdrawal request. For customers in the EU and the UK we also keep your request to deliver the eSIM at once, with the version of the text you accepted and when.

Payments by card or Apple Pay are processed by our payment provider. Your card details go directly to it; we never receive or store your full card number. The provider tells us the result of the payment and limited details such as the card brand, the last four digits, the card’s country and the outcome of its fraud checks. If you choose to save a card for later purchases, the payment provider keeps it.

04Your eSIMs

To deliver and support your eSIM we keep its identifiers, such as the ICCID (the number that identifies an eSIM), its installation details (the activation code is stored encrypted), its status (for example ready, installed or active), its validity dates and the data used and left, as reported by the network supplier.

We do not see the websites you visit, the apps you use or the content of your traffic. Your data traffic is carried by the mobile networks at your destination, which handle it under their own rules and the law of their country.

05Connection checks and support

If you run the connection check, the app looks on your phone at whether it supports eSIM plans, which mobile network technology is in use, whether a mobile data connection is available and whether a test request to our server gets through over mobile data, and records the answers you give about your settings. It sends these results to our server, which adds the eSIM’s status from the network supplier and returns a result. We keep the results with your eSIM so that our support team and the refund rules can use them.

When you write to us in Help or by email, we keep your messages, the order or eSIM they are about and technical details that help us solve the problem, such as the app version, the phone model and the iOS version.

06Location

Simbird does not ask for your phone’s location. We use the country of your IP address and the billing country you give to calculate taxes, to keep the evidence tax law requires and to prevent fraud. The destination you choose tells us where you plan to use the eSIM.

07Notifications and emails

If you allow notifications, the app registers your device’s push token with our server. We use it to tell you when your eSIM is ready, when 80% and 95% of your data has been used, 24 hours before a plan expires and when a delivered eSIM has not been installed yet. You can turn notifications off in your phone’s settings; signing out or deleting your account removes the token.

We send the emails that belong to the service: sign-in codes, receipts with the install details (QR code and manual codes), refund updates, replies from support and, when you ask for it, your data export.

08Security and fraud prevention

To protect your account and prevent fraud, the app uses Apple App Attest, which confirms that requests come from the genuine Simbird app on a genuine device, and our servers limit how often requests can be made. Our servers use your IP address while handling a request and may record it in security logs that are kept for a limited time.

Before an eSIM is delivered, automated checks look at the order, for example how many orders an account, a card or a device placed in a short time, the spending of a new account and the payment provider’s fraud assessment. An order can then be held for review by a person, need additional card authentication or be declined. If you think an order was declined wrongly, write to us and a person will review it.

09Crash reports

The app and our servers send crash and error reports to a crash reporting provider, in its EU region, so that we can fix problems. Reports contain technical information and a pseudonymous account identifier, but no card details, email addresses or eSIM installation codes.

10This website

This website has no accounts and no forms. It sets one cookie, NEXT_LOCALE, to remember your language. Our content delivery network serves the site, protects it and processes technical request data, such as your IP address, to do so; it may also count visits with cookieless, aggregated web analytics. Contact links open your email app; nothing is sent until you send it.

11Service providers

We use these kinds of providers, each only for the purpose stated and under contracts that limit how they may use your data:

• Payment provider: card and Apple Pay payments, cards you choose to save, tax calculation and fraud screening.
• eSIM suppliers and the mobile networks they work with: issuing your eSIM, carrying your data and reporting the eSIM’s status and usage.
• Cloud hosting provider: our servers, database and encrypted backups in Frankfurt, Germany (EU).
• Content delivery and network security provider: protection for our servers and delivery of this website.
• Email delivery provider: sign-in codes, receipts, refund updates and data exports.
• Email provider: the mailbox for messages you send to info@odbs.tech.
• Apple: Sign in with Apple, Apple Pay, App Attest and push notifications.
• Google: Google sign-in, if you choose it.
• Crash reporting provider (EU region): crash and error reports.

Some of these providers process data outside the European Economic Area, the United Kingdom or Türkiye, for example in the United States. Where the law requires it, we rely on safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

12No selling, no advertising

We do not sell your personal data and do not share it for advertising. The app shows no ads and does not track you across other companies’ apps or websites. We disclose data to authorities only when the law requires it, and to a buyer or successor if the Simbird business is transferred, who must then follow this policy.

13How long we keep data

We keep data only as long as it is needed:

• Account data: until you delete your account.
• Email sign-in codes: 10 minutes, stored only as a one-way hash.
• Orders, payments, refunds and tax evidence: 10 years from the purchase, because tax law requires it. After you delete your account they are kept without your name or email; a keyed one-way fingerprint of your email address stays with them so that the records can still be matched for tax and fraud prevention.
• eSIM identifiers, status and usage: together with the order they belong to.
• Support conversations in the app: until you delete your account, when their content is removed. Emails to our support address: as long as needed to handle your request and any follow-up.
• Push tokens: until you sign out, delete your account or the token stops working.
• Data exports: sent to your email address and not stored on our servers.
• Security logs and crash reports: for a limited time, after which they are deleted automatically.
• Database backups: up to 30 days, after which deleted data is gone from them as well.

14Your choices and rights

In the app you can export a copy of your data (Account › Export my data), which we send to your email address, and delete your account (Account › Delete account).

Deleting your account removes your personal data: your email address, name, sign-in identities, sessions, push tokens, the content of your support conversations and any card saved with our payment provider. Order and tax records we must keep by law stay without your name or email. Installed eSIMs stay on your phone and keep working until they expire, but you will no longer see them in the app or get help with them there.

Depending on where you live (for example under the GDPR, the UK GDPR, Türkiye’s KVKK or US state privacy laws), you may also have the right to access, correct, delete or port your data, to restrict or object to processing and to withdraw consent. Write to info@odbs.tech; we reply within 30 days. You may also complain to your data protection authority.

15Legal bases

Where the GDPR or similar laws apply, we process data to provide the service you asked for: your account, orders, delivery, support and refunds (contract); to keep order and tax records (legal obligation); to prevent fraud, keep the service secure and fix errors (our legitimate interests); and to send the notifications you allowed (consent, which you can withdraw in your phone’s settings).

16Children

Simbird is for adults: you must be 18 or older to buy a plan. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

17Changes to this policy

We update this policy when the service or our providers change; the date above shows the latest version. If a change matters for how we use your data, we let you know in the app or by email before it applies.