1. Data controller
Blitz eSIM (blitzesim.com) is a brand of AHIS, registered with the Dutch Chamber of Commerce under number 42036182, located at Saendelverlaan 144, 1567 JE Assendelft, the Netherlands. AHIS is the data controller for personal data processed through our website and our mobile application.
2. Data we process
We process data you provide yourself, such as contact details, order details and payment details.
We also process technical data such as IP address, browser or device information and security logs.
If you start a conversation with our customer support (on the website or in the app), we process the contents of that conversation, including any order details you share, in order to help you.
When you order an eSIM we process the technical identifiers needed to activate the plan and to show your data usage.
3. Data processing in the mobile application
In addition to the data above, our mobile application processes a number of app-specific items:
- Login data: your email address and a session token, stored securely on your device (in the iOS/Android system keychain) to keep you signed in
- Push notifications: a device-bound notification token, only when you grant permission, used to inform you about e.g. nearly depleted data plans or replies from customer support
- Your eSIM usage data: plan status and data usage, cached locally on your device so the app can show something while offline
- Pseudonymised usage statistics of the app itself (which screens are used, whether a purchase succeeded), linked to a pseudonymous app ID rather than your name or email address, to improve the app and detect technical problems
- Advertising measurement, only with your permission: an advertising identifier (the IDFA on iOS, the advertising ID on Android) and your in-app purchases are shared with our attribution partner AppsFlyer and advertising partners such as Meta, to measure which ad or partner link brought you to Blitz. You can withdraw your permission at any time in the app's settings or, on iOS, in the system settings.
- We do not use your device's location; to prevent fraud we only derive the country from your IP address
4. Help from Blitzy
Blitzy is an AI assistant. If you agree, we share your chat messages and relevant eSIM details, such as plan status and usage, with an AI service provider (processor) in the United States to help you. Do not share passwords or activation codes. You can withdraw permission in chat options. The guide and customer support remain available without AI.
We will send your conversation and this summary to our support team, which uses Telegram. Check the information before continuing.
5. Purposes and legal bases
We process personal data for order handling, delivery of eSIM plans, fraud prevention, customer support, sending push notifications you have consented to, and compliance with legal obligations.
Depending on the purpose, this is based on performance of the contract, your consent, legitimate interest or a legal obligation.
6. Sharing with third parties
We only share data with parties that are necessary to deliver our service. The specific party may change over time; below we describe the categories:
- Payment processors, to process your payment securely
- Email service providers, to send order- and account-related emails
- Hosting partners, for the operation of our website, app backend and database
- Delivery partners, to actually activate and deliver eSIM plans
- A customer support platform, when a support conversation is handed over to an agent
- An AI chat assistant provider, for automated first-line answers to common questions in our chat
- Providers for push notifications, app analytics and error reporting, to keep the app reliable and to detect technical problems
- Advertising and attribution partners (such as AppsFlyer and Meta), only after your permission in the app, to measure which ads and partner links bring people to Blitz
- We have agreements with all of these parties covering security and confidential processing of data. You can request an up-to-date overview of the parties we work with via [email protected].
7. Transfers outside the EU/EEA
Some of the parties mentioned under 'Sharing with third parties' may process data outside the European Economic Area (EEA).
In that case we ensure appropriate safeguards, such as standard contractual clauses or an adequacy decision of the European Commission.
8. Retention periods
We do not keep personal data longer than necessary for contractual, operational and legal purposes.
We keep order data for as long as the statutory fiscal retention obligation requires for our administration (in the Netherlands, generally 7 years).
We keep chat conversations and app usage data no longer than needed to support you and improve the service.
After the relevant retention periods we delete or anonymise data.
9. Security
We take appropriate technical and organisational measures to protect personal data against loss or unauthorised access.
Sensitive data such as login tokens are stored in your device's secure system storage, not in regular app storage.
10. Your rights
You can request access, correction, deletion, restriction, portability or object to processing of your data, whether it was collected via the website or the app.
- Send your request to [email protected]
- We may ask for identification for verification purposes
- You can have your app account and the associated data deleted by contacting us via [email protected]
- You can also lodge a complaint with the competent supervisory authority (in the Netherlands: the Autoriteit Persoonsgegevens)
11. Changes to this privacy policy
This privacy policy may be updated when legislation, processes or services change — for example when we add new functionality to the app.
The most recent version is always available on this page.