Effective 2026-10-10
Account data: your email address, and your name if you provide one. If you sign in with Apple or Google we receive only the identifier and email address that service gives us — and if you use Apple’s "Hide My Email", that is a relay address.
Order data: the plans you buy, the amount and currency, payment status, and the eSIM identifier (ICCID) and usage figures for that order.
Payment data: handled by Stripe. We keep only the transaction reference and amount; we never see or store your full card number.
Technical and usage data: to provide secure connections, deliver compatible app updates, measure aggregate service usage, and prevent abuse, we and our processors receive IP address, app/operating-system version, and basic request records. An IP address may be used to infer an approximate region.
Device information: the app reports your phone brand, model, operating-system version and app version, linked to your account and orders. We also receive from our carrier provider the model of the phone an eSIM was actually installed on, the install time and its status, and the outcome when you tap "Install eSIM" in the app. We use this for support troubleshooting, confirming installation and improving the app. To prevent payment fraud and account abuse, the app also reports the device identifier the operating system provides for this app only (the iOS identifier for vendor, IDFV, or the Android ID). It cannot be used to track you across other apps; we store it only as a keyed hash and use it to recognise whether a phone was used by a suspended account. On iPhone we also use Apple’s DeviceCheck: the app obtains a one-time token from Apple, which we use to ask Apple to record or look up a “used by a suspended account” flag for that phone. Apple gives us no hardware identifier; the flag survives reinstalling the app and is used only to stop suspended users from signing up again. We do not collect IMEI, serial numbers or advertising identifiers, and do not use device information for advertising or cross-app tracking.
Support data: messages you send to support, images you select and upload, and associated case and order information, to resolve your requests. Do not send passwords or full payment-card numbers.
Reply notifications: when you enable push notifications, we process push tokens, device platform and delivery records. Push notifications announce a new reply without including the support message body or images. You can disable notifications in system settings.
Offer and expiry reminders: before a referral reward coupon expires, we email a reminder to your account address. Only if you turn on “Offers and expiry reminders” in the app do we send push notifications about coupon expiry and offers, and we record when you agreed. You can turn it off in the app at any time.
The app does not request Android location permission. We do not inspect communications carried over your eSIM, your browsing history, or your precise location. This does not exclude content you voluntarily send to FUSION support.
To fulfil your order and provision the eSIM with our supplier; to show your eSIM status and data usage in the app; to handle payments, refunds and support; and to keep transaction records as the law requires.
We do not sell your personal data, and we do not use it for third-party advertising.
Our upstream eSIM supplier: the order details needed to provision your plan.
Stripe: payment processing.
Google Cloud: hosting for our servers and database (Asia East).
Expo Application Services: delivering app updates compatible with the installed native version and providing aggregate usage metrics.
Resend: transactional email, such as password resets.
Support and notification services: Google Cloud stores support messages and private images; Expo, Apple and Google process push delivery. Resend and our business email providers process incoming, outgoing or forwarded support email.
Beyond these processors, and where the law requires it, we do not share your data.
Account data is kept until you request deletion in the app. You have seven days to sign in and cancel. After that, account and eSIM installation identifiers are deleted or anonymized; order and transaction records are retained for accounting, tax, and fraud-prevention requirements, typically seven years.
Account deletion removes associated in-app support cases, messages and push tokens, and queues images for cleanup; image removal is not immediate. Backup and storage recovery copies expire according to their retention cycles. Contact us to request help deleting external email copies or incoming messages not associated with your account.
You can ask to see, correct, or restrict processing of your data. Delete the account from Account & Settings in the app; if you cannot sign in, write to help@fusion.tw.
After deletion, purchased eSIMs can no longer be viewed or managed in the app. An eSIM already installed on a device may work until its plan ends; activated plans are not refunded as a result.
All traffic is encrypted with TLS. Passwords are stored as one-way hashes we cannot reverse. Database access is restricted to authorised systems.
The service is not directed at children under 13, and we do not knowingly collect their data.
If this policy changes, the effective date on this page will change with it.
Data protection contact: help@fusion.tw