Privacy Policy

1. Data controller

1.1. Your personal data is processed by self-employed individual Saydaliyev Oybek Odil oʻgʻli (address: 120700, Sirdaryo viloyati, Xovos tumani) — “we”.

1.2. For questions and requests: saydaliyev0710@gmail.com, +998 99 401 76 42.

1.3. This policy follows the Law of the Republic of Uzbekistan “On Personal Data” (ZRU-547).

2. What data we collect

• Support chat — your messages and, optionally, a phone number or Telegram handle.
• Website visits — IP address, browser and device type, the page opened and where you came from (to protect the site and count visits).
• If you sign in with Google — the name, email and profile photo Google provides.
• Email — to sign in and for order emails.
• Name and phone number — optional, if you enter them in your profile.
• Device data — device identifier, model, operating system and App version.
• Push notification token — to notify you about order status.
• Language — to show the App and emails in your language.
• Order history — which Plan, when, how much was paid and the status.
• eSIM data — Activation code (QR), SM-DP+ address, APN.

We do not collect passport, biometric or genetic data. We do not store bank card data — it is processed only by the payment system.

3. Legal basis and purposes

3.1. Data is processed on the basis of your consent (ZRU-547, Article 21) and to perform the contract with you (the Public Offer). You give consent by accepting the terms when signing in to the App.

• signing in to your account and protecting it;
• placing orders, accepting payment and delivering the eSIM;
• push notifications and emails about order status;
• refunds and handling requests;
• finding and fixing errors in the App;
• meeting legal obligations.

4. Who we share data with

We do not sell data or share it for advertising. We share only what is needed to provide the service:

• Payment systems — CHECKOUT.UZ and Payme (Paycom), Uzbekistan: order number and amount for payment and refunds. You enter your card number on the payment system's own page — it is not passed to us and we do not store it.
• eSIM provider — Airhub (abroad): the Plan and order number to issue the eSIM. Your name, email and other personal data are not shared.
• Google LLC (USA): if you choose “Sign in with Google”, Google gives us your name, email and profile photo; in the mobile app, a device token for push notifications (Firebase).
• Resend (Resend, Inc., USA): your email address to deliver sign-in codes and eSIM emails.
• Telegram (Telegram Messenger, abroad): service notifications to IdealTrip staff's private work group about new orders, payments and support requests (name, email, phone, order details). Only staff are in this group.
• Public authorities — only in the cases and manner prescribed by law.

5. Where data is stored and cross-border transfer

5.1. App data is stored on servers in a data center in the European Union (Contabo GmbH). For sign-in, email, push notifications, eSIM and internal service notifications, data is also transferred to the foreign partners listed in section 4.

5.2. We do not collect biometric or genetic data — by law such data may be stored only in Uzbekistan (ZRU-547, Article 27¹). Other data is stored abroad under the conditions set by law.

5.3. By accepting the terms, you consent to the cross-border transfer of your data to the foreign countries listed in this section (ZRU-547, Article 15).

6. How long data is kept

Data is kept while your account is active. After the account is deleted, all data except order data that accounting and tax law requires us to keep is deleted or anonymized.

7. Data protection

Communication with the server is encrypted (HTTPS). Sign-in uses one-time codes. Only authorized persons can access the data. The Activation code (QR) is confidential — do not show it to others.

8. Your rights

Under ZRU-547 (Article 30) you have the right to:

• know whether we hold your data and receive information about it;
• correct inaccurate data (in your profile or by request);
• request suspension of processing or deletion of data;
• withdraw consent — in the form it was given or in writing (Article 21);
• delete your account — in the “Profile” section of the App;
• opt out of push notifications — in the App or phone settings.

Send requests to saydaliyev0710@gmail.com; we reply within 10 days. If you withdraw consent, order-related features of the App may become unavailable.

9. Minors

Consent to process a minor’s data is given by their parents (guardians, custodians) (ZRU-547, Article 21). If we learn that data was collected without such consent, we will delete it.

10. Changes to this policy

If the policy changes, the new version is published on this page and takes effect on the day of publication. We will notify you of important changes in the App.