Privacy Policy

Effective date:

This policy explains what Wavera does with your information. It is written to be read, not to be survived: if a section is missing below, it is because that kind of data is not involved at all.

Who we are

Wavera is developed and published by BEK Service Ltd, a private limited company registered in England and Wales. BEK Service Ltd is responsible for the app and is the controller of any personal data described in this policy.

What we collect

Wavera sells travel eSIMs, so it needs an account on our servers. You sign in either with your email address, using a one-time code we email to you, or with Apple or Google. We store your email address and, if you sign in with Apple or Google, the name that service shares with us, if any. Apple or Google confirms who you are; we never see your Apple or Google password. The one-time codes are stored only in scrambled (hashed) form and expire after a few minutes. You do not need to give us your phone number.

Your orders: you pay by card on a secure payment page run by Stripe, our payment processor. Your card details, and anything else you type on that page, go to Stripe, never to us or to the app. We tell Stripe only the amount, the plan's name and our own order reference. For each order we keep the plan you bought, the price and currency, Stripe's payment reference, the order's status, and when it was placed, paid, delivered or refunded.

Your eSIMs: we buy each eSIM from a wholesale eSIM supplier. The supplier receives only the plan and our own order reference — never your name, email address or phone number. We keep what the supplier returns: the eSIM's serial number (ICCID), its activation code (the code in the QR you scan to install it), its status, and its data allowance, data used and validity dates, which we check with the supplier from time to time so the app can show how much data you have left. We use the ICCID with the supplier to check that usage, and to switch the eSIM off if its order is refunded or you delete your account.

On your device, the app keeps your sign-in in the device's secure storage. Wavera does not ask for your location, your contacts, your camera or your photos, and it contains no advertising and no analytics or tracking tools.

Our servers are reached through Cloudflare, which carries and protects the connection and sees your IP address. Our servers use your IP address only briefly, to limit repeated requests and protect the service from abuse; we do not store it with your account. We do not sell any of this, and we share it only as needed to provide the service: with Stripe for payments, with Apple or Google when you sign in with them, with the wholesale supplier that issues your eSIM (which never learns who you are), with Cloudflare to carry the connection, and with the email service that delivers our sign-in codes.

What we never do

We do not see or record the websites you visit or anything else you do over your eSIM's data connection — that traffic goes over the mobile networks your eSIM connects to, not through our servers. We never see your card number, we do not track your location, and we do not sell your personal data.

Deleting your account

You can ask us to delete your account at any time by emailing us from the address on your account. When we delete it, we sign you out on every device, switch off any eSIM that is still active (it stops working, and any data left on it is lost), and remove your email address, name and phone number from the account. Your order and payment records and the records of the eSIMs you bought are kept, no longer linked to your contact details, because tax and accounting law requires us to keep them.

Keeping your data safe

Your account, orders and eSIM details travel between the app and our servers over encrypted (HTTPS) connections, and you enter your card details only on Stripe's secure payment page. In the app, your sign-in is kept in your device's secure storage.

Your rights

Under the UK GDPR and similar laws you have the right to access, correct, or delete the personal data we hold about you — the account, orders and eSIM records described above — to receive a copy of it, and to object to its processing. Contact us and we will answer. Records we must keep by law are kept even after your account is deleted, as described above.

Changes to this policy

If this policy changes, the updated version appears on this page with a new effective date.

Contact

Questions about this policy or your data: [email protected]