eSIM Vault

1. What Information Does the App Access?

Because eSIM Vault requires no internet connection, the only permissions you may grant are for local functionality only:

• Camera & Photo Library (optional): Used exclusively to scan an eSIM QR code or import a QR image from your photo library. The extracted activation information (SM-DP+ address, activation code, confirmation code) is stored only within the eSIM card record you create. No images or metadata leave your device.
• Notifications (optional): Allows the app to schedule expiration reminders locally on your device. Apple’s Notification framework handles the delivery; we do not receive any receipt or usage data.
• Local File System (CSV Export/Import): When you choose to export your eSIM data as a CSV file, you decide where to save it (iCloud Drive, local storage, etc.). The import function reads the file you select and merges cards locally. No file content is transmitted elsewhere.

⚠️ The app requests no network permissions in its entitlements. Even if you are online, eSIM Vault cannot and will not send any data.

2. How We Handle Your eSIM Data (EID, Phone Number, Activation Codes)

Your eSIM information is sensitive, and we treat it with the utmost respect:

• Local-only storage: All fields (carrier, plan name, price, phone number, EID, SM-DP+, activation code, confirmation code) are stored using Swift’s UserDefaults and JSONEncoder within the app’s sandbox. No data is backed up to iCloud unless you enable iCloud Drive and manually place the CSV backup there.
• No analytics or crash reporting: The app contains no third-party analytics SDKs (Firebase, Amplitude, etc.) and no crash reporters that send logs externally. We cannot see how you use the app.
• CSV backups are user-controlled: When you export your cards, the resulting CSV file includes all fields (including EID and activation codes). You are responsible for storing that file securely. The app does not have access to the file after export unless you later choose to import it.
• No remote configuration or ads: The app does not fetch any remote scripts or configurations. All features are built-in and offline.

3. Backup & Restore (CSV Feature)

The backup/restore functionality is entirely manual and offline:

• Export: Tapping “Export Backup” writes a CSV file to a temporary directory and presents the iOS share sheet. You choose where to save (local device, iCloud Drive, email, etc.). The app never sends this file to any server.
• Import: You select a CSV file from your device. The app parses it locally and adds cards that are not already present (matched by UUID). The import process stays on-device.
• Data format: The CSV contains all eSIM fields (ID, carrier, plan, price, phone number, country code, EID, start date, duration, auto-renew, SM-DP+, activation code, confirmation code, etc.). Treat this file as confidential because it includes your eSIM credentials.

4. Notifications & Reminder Logic

eSIM Vault uses the UserNotifications framework to remind you before an eSIM expires:

• Local only: Reminder dates are calculated on your device based on each card’s expiry date and your preference (days before & time). The notification trigger is scheduled directly with iOS; no data passes through any external server.
• No tracking of notification interactions: We do not receive analytics about whether you viewed or dismissed a notification. Apple does not provide such data to developers.
• Permission requested once: The first time you enable reminders, iOS asks for permission. You can revoke anytime in Settings → Notifications → eSIM Vault.

5. Data Retention & Deletion

• App deletion: When you delete eSIM Vault from your iPhone, all locally stored eSIM cards, settings, and reminder schedules are automatically removed by iOS. No residual data remains.
• Manual deletion: You can delete individual cards via swipe-to-delete or delete all cards by uninstalling the app.
• CSV backups remain under your control: Any exported CSV file stays wherever you saved it. The app does not maintain copies after export.
• No cloud backups: The app does not utilize CloudKit or any other cloud database. iCloud backup of your entire iPhone may include the app’s sandbox data (as part of standard iOS backup) but this is beyond the app’s control. Even then, Apple encrypts iCloud backups.

6. Third-Party Services & Links

eSIM Vault does not integrate any third-party frameworks that collect data. Specifically:

• No social media SDKs (Facebook, Twitter, etc.)
• No ad networks
• No crash reporting services (like Crashlytics, Sentry)
• No external web views that could load remote content

The only external link is “Privacy Policy” in the app settings, which opens this webpage. That link is opened via SFSafariViewController or the default browser, which is subject to your browser’s own privacy practices. No user data is sent to us when you view the policy.

7. Children’s Privacy

eSIM Vault is not directed to children under the age of 13. We do not knowingly collect any personal information from children. Since the app operates completely offline and requires no account, we have no means to identify age, but we strongly encourage parents to supervise app usage. If you believe a child has provided personal data via a CSV file stored outside the app, please contact us.

8. Your Rights & Control

Because the app holds no personal data on any external server, most traditional data subject rights (access, rectification, erasure) are directly achievable by managing the app on your device:

• View all data: Open the app and browse your eSIM cards.
• Correct data: Tap any card and edit its fields.
• Delete data: Swipe to delete cards, or uninstall the app to erase everything.
• Export portability: Use the CSV export feature to obtain a machine-readable copy.
• Revoke permissions: Go to iOS Settings → Privacy → Camera / Photos / Notifications and toggle off for eSIM Vault.

If you have further privacy inquiries, you can contact us via the email address below.

9. Changes to This Privacy Policy

We may update this policy to reflect functional improvements or legal clarifications. Any changes will be posted on this page with an updated “Last Updated” date. Since the app does not have remote update notifications, we encourage you to occasionally review this policy. Continued use of eSIM Vault after changes constitutes acceptance of the revised policy.