Privacy policy

About this service

BXR DIGITAL operates the ES1M Partners website and mobile apps and is responsible for the personal data processed through this service. BXR DIGITAL also develops and publishes the applications. For privacy questions and data requests, contact admin@s1m.io.

Who the app is for

The ES1M Partners mobile app is exclusively for existing, approved business partners of Es1m Network who already have a partner account and use our eSIM packages. Partners sign in with their existing credentials to manage their accounts, issue eSIMs from their available balance, and access orders and installation documents. The app is not a public consumer storefront and does not offer public self-registration. Es1m Network administrators also use it to manage the partner service.

App distribution and account access

The iOS app is intended for unlisted distribution on the App Store, subject to Apple’s approval. With this distribution method, anyone with the direct link can download the app, but downloading it does not grant access to the service. On both iOS and Android, use of the service requires an existing approved partner account or an authorized administrator account.

Data we use

We process company and contact details, account email and password hashes, partnership applications, orders, eSIM identifiers and activation details, usage information, wallet and transaction records, customer notes you enter, brand logos and support details. Security records include session identifiers, API access logs and abuse-prevention information. If push notifications are enabled, we process a device push token.

Why we use it

We use this information to approve and operate partner accounts, authenticate access, issue and support eSIMs, maintain balances and accounting records, deliver requested communications, and prevent fraud and misuse. Do not add unnecessary personal information to customer notes.

Service providers

Cloudflare hosts the platform and database. eSIM provisioning providers process the information needed to deliver connectivity. Stripe processes website card payments; the app does not collect card numbers. Resend delivers account emails. Expo and Apple or Google deliver push notifications when enabled. These providers may process data in countries other than yours. We do not sell personal data or use it for cross-app advertising tracking.

Device permissions

Photo access is used to select a company logo. Biometric authentication is performed by the operating system; we do not receive face or fingerprint templates. The app stores session credentials in protected device storage and temporarily saves files you choose to export. Export files are removed from the app cache after sharing, but copies you save or send remain under your control.

Retention and deletion

Account data is kept while needed to operate your account. You can initiate permanent account deletion in the app under More → Delete account. We process requests within 30 days and contact your account email to resolve any remaining balance or active services. We remove account credentials, branding, device tokens and other unnecessary personal data. Transaction records that must be retained for accounting, legal obligations or disputes are restricted to those purposes and kept only for the applicable required period. Service-provider records and backups follow their deletion and retention processes.

Your choices

Contact admin@s1m.io to request access, correction or deletion, or to ask about retention. You can disable push notifications in device settings. Keep QR codes and installation links private: anyone holding them may access installation information. Data you export or send to customers is outside the app’s access controls.

Updates

Last updated: 3 November 2026. We publish changes to this policy on this page.