Abroad · A Clavis Collective product

Privacy Policy

Effective 2026-07-07 · Applies to the Abroad iOS app and storefront (clavis-collective.com/abroad)

Abroad, operated by Clavis Collective ("we", "us"), sells travel eSIM data plans. We collect the minimum needed to sell you a plan, deliver it, and support you — nothing for advertising, and we never sell your data. This policy explains what we collect, why, who processes it, and the rights you have. Plain language, no dark patterns.

Information we collect

Email address	Your account identity (we use passwordless 6-digit codes), order delivery, receipts, and support replies.
Order & eSIM data	Destination, plan size, price, order reference, and the eSIM activation details (ICCID/QR) needed to deliver and support your plan.
Payment	Processed by Stripe. We receive a confirmation and the last digits/brand for your records — we never see or store your full card number.
Device compatibility	Your device model (e.g. "iPhone 14"), read on-device to tell you if your phone supports eSIM. Not tied to your identity.
Support messages	What you send us via in-app chat or email, so we can help.
Referral & credit	Your referral code and store-credit balance, if you use the referral program.

What we do NOT collect

No location tracking — the app never requests your location.
No contacts, photos, files, or microphone.
No advertising identifiers (IDFA), no ad SDKs, no data brokers, no cross-app tracking.
No record of what you browse on your eSIM — connectivity is carried by network partners; we see plan status (activated, data remaining), not your traffic.

Why we use it (legal bases)

To perform our contract — create your account, sell and deliver eSIMs, process payments, provide support.
Legitimate interests — fraud prevention, keeping the service secure and working, and improving it.
Legal obligations — tax and accounting records.

Who processes your data

We share only what each partner needs to run the service. We do not sell or rent personal data to anyone, ever.

Stripe	Payment processing.
eSIMAccess (Redtea Mobile)	Provisions the actual eSIM plan on carrier networks.
Supabase	Database, authentication, and app backend (hosted in the US).
Crisp	In-app support chat (only when you open it).
Resend	Sends your login codes and transactional email.

Where it lives & how long we keep it

Records are stored with Supabase (US). We keep order and account data while your account is active and as long as needed for support, accounting, and legal obligations, then delete or anonymize it. Because our providers may process data in the US, appropriate transfer safeguards apply for users in other regions.

Your rights

Delete your account and data — in the app: Account → Delete my account. This permanently removes your account, orders, and credit. You can also email us.
Access, correct, or export the data we hold about you — just ask.
Object or withdraw consent where processing relies on it.
Quebec residents have rights under Law 25; the EU/UK under GDPR; California under CCPA/CPRA — same email, same answer.

Security

Data is encrypted in transit (HTTPS) and at rest. Access is restricted to what's needed to run the service. Passwordless login means there's no password to be stolen.

Children

Abroad isn't directed to children under 16 and we don't knowingly collect their data.

Changes

If we materially change this policy we'll update the date above and, where appropriate, notify you. Continued use after a change means you accept it.

Contact

Privacy requests or anything at all: hello@clavis-collective.com. A human reads it.