Privacy policy

Information we use

Xplore uses your email address, name and account details to provide your account. Email passwords are stored as hashes. Optional Google or Apple sign-in uses Firebase identity verification. We keep purchase records, payment references, eSIM identifiers, installation details and package usage to deliver and support travel data.

If you enable notifications, we register a device push token. You can turn notifications off in your device settings. Installation codes and QR details are private to your account.

Providers and processing

Convex hosts the backend and account records. Stripe processes payments; Xplore does not store your full card number. AWS SES sends verification and password-reset emails. Firebase provides optional social sign-in and push messaging. Telco-Vision provisions eSIM packages and supplies usage information. The website is delivered through its hosting provider. These providers process the information needed for their services.

Information may be processed outside your country. The current Convex backend is hosted in Europe (Ireland); other providers operate internationally.

Cookies and local storage

The website uses an HttpOnly session cookie to keep you signed in, and stores your appearance choice locally. The app keeps its session in device secure storage. Our current product does not include advertising or marketing tracking. Operational service logs may include request and device information for security and troubleshooting.

Deletion and retention

You can delete your Xplore account online or choose Profile → Delete account in the app. Deletion removes your profile, password, sessions, notification tokens and saved installation codes. Linked Firebase accounts are queued for deletion; Apple-linked accounts are asked to confirm their identity so Apple consent can be revoked.

Minimal transaction and provider records remain for accounting, refunds, fraud prevention and legal obligations. Providers may separately retain records they are legally required to keep. Deletion does not remove an eSIM from your phone, cancel a package or automatically issue a refund. You lose access to usage, installation details and top-ups, and a new account does not inherit past purchases.

Your privacy requests

Contact privacy@xplore.to for access, correction, retention questions or help with a privacy request. Rights available to you depend on applicable law. We may ask you to confirm your identity before providing personal records. Xplore is operated by Strawberry Labs LLC, based in Sharjah Media City, Sharjah, UAE.