Vero eSIM is a mobile application, operated by COLLE LAB LLC (a Florida limited liability company), that lets travelers buy and install eSIM data plans. This policy explains what data we collect when you use the app, why we collect it, who we share it with, and how you can control it.
In plain terms: we collect the minimum information needed to deliver an eSIM to your device, manage your account, and process payments through Apple. We don't sell your data. We don't run ads.
2. Data we collect
Account information
Email address — when you create an account or sign in with Apple.
First name — optional, used for personalization (e.g. "Welcome back, Alex").
Referral code — a random code we generate for you so friends can refer you and vice versa.
Purchase & eSIM data
Order history — which plans you bought, when, and for which destination.
eSIM profile — activation code, SM-DP+ address, ICCID, QR code, and validity dates. This is what makes the eSIM work on your phone.
Data usage — for active plans, we display remaining MB/GB. This data comes from the upstream eSIM provider; we cache it in the app for fast display.
Payment data
Payments go through Apple's In-App Purchase system. We never see or store your card number. Apple processes the transaction and reports the result to us (success / failure / amount / currency).
We use a third-party receipt-validation service as a layer over Apple's StoreKit to verify receipts and manage entitlements. It receives a transaction identifier and the App Store receipt — not your card details.
Device & technical data
Device locale and language — to show the app in the right language.
App version, OS version — for support and crash diagnostics.
We do not collect IP addresses for tracking, precise location, contacts, photos, microphone, or camera data.
We do not use third-party advertising SDKs or share device identifiers for advertising.
3. How we use it
We use the data we collect to:
Create and manage your account.
Process eSIM purchases and deliver the activation QR code to your device.
Show you your active and past plans, remaining data, and expiry dates.
Detect and prevent fraud, refunds abuse, and account takeover attempts.
Send transactional emails (purchase confirmations, password resets) — never marketing email unless you opt in.
Improve the app: aggregate, non-identifying analytics on which destinations are popular, conversion rates, etc.
4. Who we share it with
We share strictly the minimum needed with the following processors, each acting under contract for us:
Apple — when you pay through In-App Purchase. Apple receives the transaction, charges you, and returns a receipt.
Our cloud hosting & authentication provider — stores your account, orders, and eSIM records (data hosted in the EU).
Our payment receipt-validation provider — verifies App Store receipts and manages entitlements. Receives a transaction identifier and receipt, not your card details.
Our eSIM connectivity provider — we forward the package you select so they can issue the eSIM profile. They receive the package code and a transaction identifier — never your email, name, or payment info.
We do not sell, rent, or otherwise share your personal data with third parties for their own purposes. A current list of the specific providers we use is available on request — just contact us.
5. How long we keep it
Account data: as long as your account exists.
Order & eSIM history: kept for 7 years to meet accounting and tax obligations, then deleted.
Diagnostics: 30 days.
When you delete your account, we permanently erase your profile and personal data within 30 days, except where law requires us to retain transaction records.
6. Your rights
You can:
Access a copy of the data we hold about you.
Correct anything that's wrong.
Request deletion of your account and personal data.
Object to processing or withdraw consent at any time.
Export your data in a machine-readable format.
To exercise any of these rights, email us (see Contact us below). We respond within 30 days.
If you're in the EU/EEA or UK, you also have the right to lodge a complaint with your local data protection authority.
7. Children
Vero eSIM is not directed at children under 13 and we do not knowingly collect data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.
8. Changes to this policy
If we change anything material, we'll show a notice in the app and update the "Last updated" date at the top of this page. For non-material changes (typo fixes, clarifications), we'll just update the date.
9. Contact us
Questions, requests, or complaints — email support@collelab.io and we'll respond within a few business days.