1. Scope and Role

This Privacy Policy governs the collection, use, disclosure, retention, and protection of personal information in connection with your access to and use of Roamix services, including our website, mobile apps and widgets, account platform, checkout flow, eSIM provisioning features, Roamix Omni, Roamix Wallet, Roamix Rewards, Refer a friend, and support channels. By using the services, you acknowledge that your personal information will be processed as described in this policy and subject to applicable law.

Except where another notice states otherwise, Roamix acts as the controller of personal information processed under this policy. Certain parties, including payment processors and telecommunications partners, may process information as independent controllers under their own legal terms and privacy notices.

2. Definitions

For purposes of this policy, personal information means information that identifies, relates to, describes, or can reasonably be linked to an individual. Processing means any operation performed on personal information, including collection, recording, organization, storage, use, disclosure, transfer, and deletion. Service provider means a vendor that processes personal information on behalf of Roamix for a business purpose. Network partner means a carrier or eSIM fulfillment provider that supports delivery and operation of purchased plans.

3. Information We Collect

We collect information that you provide directly to us, information generated through your use of the services, and information received from authorized third parties. Information you provide includes account registration details such as name, email address, password, and profile data you choose to submit, along with order data such as selected plan, destination, purchase timestamp, order identifiers, and support communications.

Roamix Omni. If you use Roamix Omni, we keep your Omni Balance, top ups, auto top-up settings and the saved card chosen for them, and a record of your data use from our network partner, broken down by day, network, and the country that network operates in. We use the country information to show your usage history and the countries you have visited in the app. We do not use your device's GPS or precise location.

Wallet, rewards, and referrals. We keep your Roamix Wallet balance and its history (cash back, referral rewards, promo credit, refunds, transfers to Omni, and expiry), your lifetime spend and reward tier, the promo and referral codes you redeem, and who referred you or whom you referred. When you refer a friend, you can see your friend's first name and whether their referral is pending, earned, expired, or reversed.

Free trials and device checks. To stop a free trial being claimed more than once, we record the accounts and cards that have claimed one. For trials that require the app, we check your phone with Apple DeviceCheck or Google Play Integrity and store a one way hashed identifier of the device; Apple may also store a flag on its own systems that the device has claimed a trial. For trials that require a card, we receive the card's type, funding type, and a fingerprint from our payment processor so we can refuse prepaid cards and cards already used for another account's trial. We never receive or store full card numbers.

We receive limited information from third parties when needed to deliver the service. This includes your name, email address, and account identifier from Google or Apple when you choose to sign in with them (if you use Apple's Hide My Email, we receive only the relay address), payment confirmation, saved card details such as brand, last four digits, and expiry, and transaction metadata from Stripe, and activation or usage status from network partners so we can provision plans and display service status.

We also collect technical and device information that supports operations, security, and reliability, including IP address, browser type, operating system, device model, application version, push notification tokens if you allow notifications, request logs, and diagnostic data associated with account activity and service performance. When you arrive through an affiliate link, an invite link, or an advertisement, we record the link or campaign that brought you. The Roamix home screen widget uses a read only token stored on your device to fetch your Omni Balance. Roamix does not intentionally request special category personal data through standard customer flows.

4. How We Use Information

We process personal information to administer accounts, process payments, issue receipts, evaluate refund requests, provision and maintain eSIM plans and Roamix Omni, charge auto top-ups you have turned on, run Roamix Wallet, Roamix Rewards, Refer a friend, promo codes and free trials, provide customer support, and communicate required service notices such as low balance, reward expiry, and trial ending reminders. We also process information to protect the security and integrity of our systems, prevent fraud and abuse (including duplicate accounts, self referrals, and repeat free trials), monitor performance, improve product quality, enforce agreements, and satisfy legal and regulatory obligations.

Where permitted by law, we may use contact information to send updates about service changes, features, or offers by email or push notification. You may opt out of marketing emails using the unsubscribe link or your account settings, and turn off push notifications in your device settings.

5. Legal Bases for Processing

Where applicable law requires a legal basis, Roamix processes personal information on the basis of contractual necessity, legitimate interests, consent, and legal obligation. Contractual necessity applies where processing is required to create accounts, process orders, and deliver purchased services. Legitimate interests include service security, fraud prevention (including device and card checks for free trials), support quality, analytics, and product improvement. Consent applies where required for specific activities, such as push notifications and advertising cookies. Legal obligation applies where processing is required by law, court order, or regulatory request.

6. How We Disclose Information

Roamix does not sell personal information for money. We disclose personal information only where reasonably necessary to operate the service, fulfill contractual duties, and comply with legal requirements. Disclosures may be made to:

Stripe, for payments, saved cards, and auto top-up charges
Our network partners, including eSIM Access and Sparks, for plan activation, Roamix Omni balance, and usage data
Google and Apple, for sign in, push notifications (Firebase Cloud Messaging and Apple Push Notification service), and device verification (Play Integrity and DeviceCheck)
Cloud, hosting, and email providers, for running the service and sending messages
Cloudflare Turnstile, to protect sign in and sign up from bots
PostHog and Microsoft Clarity, for product analytics and to understand how our website and apps are used, which can include recordings of how pages are used
Meta and Google, for measuring our advertising, including the Meta Pixel and Conversions API and Google Ads conversion tracking
Affiliate partners, who see that a purchase came through their link and its value, but not your contact details

We may also disclose information to professional advisers such as legal counsel, auditors, and accountants where needed for legitimate business operations or legal defense. We may disclose information to public authorities when required by valid legal process or binding legal obligation. In connection with a merger, financing, acquisition, or asset transfer, information may be transferred subject to applicable confidentiality and legal safeguards.

7. Cookies and Similar Technologies

Roamix uses cookies and similar technologies for authentication, session continuity, fraud prevention, user preference storage, remembering affiliate, invite, and promo links, service analytics, and measuring our advertising. Certain cookies are strictly necessary for core platform functions, including secure login and checkout. You may control cookie settings through your browser or device, but disabling required cookies may limit or prevent use of certain features.

Where applicable law recognizes browser level privacy signals, we process those signals in a manner consistent with legal requirements and technical feasibility.

8. Data Retention

We retain personal information for the period reasonably necessary to fulfill the purposes described in this policy, including account administration, service delivery, dispute resolution, security analysis, and legal compliance. Account records are retained while an account remains active and for a reasonable period thereafter. Order, billing, and refund records, including Roamix Wallet and Omni Balance history, may be retained for up to seven years to satisfy tax, accounting, and legal requirements.

When you delete your account, we remove your name, email address, phone number, password, profile photo, sign in links to Google and Apple, saved cards, push notification tokens, notifications, cart, and tracking identifiers, and turn off auto top-up. Order and payment records stay attached to an anonymous account for the retention period above. Records of claimed free trials (hashed account, card, and device identifiers) are kept so a trial cannot be claimed again.

Security logs, fraud indicators, and support records are retained in accordance with operational needs, legal obligations, and risk controls. When retention is no longer required, we delete, deidentify, or aggregate relevant data in accordance with internal standards and applicable law.

9. Security

We maintain administrative, technical, and organizational safeguards intended to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. Controls include encrypted transmission, role based access management, credential security practices, logging, and monitoring. No data transmission or storage system can be guaranteed fully secure, and users share responsibility for maintaining account credential security.

If we identify a security incident involving personal information, we will investigate, mitigate, and provide notice in accordance with applicable legal obligations.

10. International Transfers

Personal information may be processed in jurisdictions other than your country of residence. Where required by law, we implement appropriate legal and contractual safeguards for cross border transfers and require service providers to maintain suitable data protection controls.

11. Your Privacy Rights

Depending on your jurisdiction, you may have rights to request access to personal information, correction of inaccurate data, deletion, restriction of processing, objection to certain processing activities, and data portability where technically feasible. You may also withdraw consent where consent is the legal basis for processing, without affecting processing conducted before withdrawal.

You can delete your account yourself from your account settings in the app or on the website. Other rights requests may be submitted by contacting support@roamix.app from the email associated with your account. We may require identity verification before taking action and may decline requests where permitted by law, including where an exemption applies. We respond within the period required by applicable law.

12. Region Specific Privacy Notices

Users in California

If California law applies to your data, you may have rights to know, access, correct, and delete personal information, and to request information regarding disclosure practices as provided by law. Roamix does not sell personal information for money. Our use of advertising measurement tools from Meta and Google may count as sharing for cross context behavioral advertising under California law. You can opt out of this sharing by contacting support@roamix.app.

Users in the European Economic Area, United Kingdom, and similar jurisdictions

If EEA, UK, or similar privacy laws apply, you may have rights to object to processing based on legitimate interests, request restriction, and lodge a complaint with a competent supervisory authority. We encourage you to contact us first so we can attempt to resolve your concern directly.

13. Children's Privacy

Roamix services are not directed to children under the age of thirteen and are not intended to solicit personal information from children. We do not knowingly collect personal information from children under thirteen. If you believe a child has provided personal information in violation of this policy, contact us and we will investigate and take appropriate corrective steps.

14. Third Party Sites and Services

Our services may contain links to third party websites or tools that are not operated or controlled by Roamix. We are not responsible for third party privacy or security practices. Your use of third party services is governed by the terms and privacy notices published by those third parties.

15. Changes to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect legal, operational, or product changes. Updated versions become effective on the date posted unless a later date is stated. Where required by law, material changes will be communicated through additional notice methods.

16. Contact Us

For privacy questions, requests, or complaints, please contact support@roamix.app.