Lempart Flex Privacy Notice Who is responsible Lempart Communications (a business operated by Vasyl Banuliak), New York, NY, United States. Privacy contact: support@lempart.app. What we collect and why • Email address — to send your receipt and eSIM details and to answer support requests. • Order details — the plan, price, payment status and the eSIM issued (activation code, ICCID) — to deliver and support what you bought and to keep accounting records. • Sign-in identity — when you sign in with Apple or Google: the identifier they give us and, if you share it, your name and email. We never see your Apple or Google password. • Support messages and, if you send them, your phone model and system version — to solve your problem. • Data usage of your eSIM, as reported by the network — shown to you in the app. • Technical logs (IP address, app version, request times) — for security and to keep the service running. Kept briefly. We do not collect your card number (our payment provider handles it), your location, your contacts or the content of your communications. We do not sell personal data and we do not use it for advertising. Who receives data • The wholesale connectivity partner that issues your eSIM: your order and the eSIM profile. They do not receive your name or email. • Our payment provider (Stripe): payment details and your email for receipts. • Our hosting and database providers (Cloudflare, Supabase), which process data on our behalf under contract. • Apple, when you sign in with Apple or install through their services. • Authorities, only where the law requires. How long we keep it Order and payment records: 7 years, for tax and dispute rules. Support messages: 2 years. Technical logs: up to 90 days. An account you delete is removed within 30 days, except the records above. Your rights You can ask to see, correct or delete your personal data, or to receive a copy, by writing to support@lempart.app. We answer within 30 days. If you live in the European Economic Area or the United Kingdom you also have the right to object and to complain to your data-protection authority; if you live in California you have the rights of the CCPA, including to know and to delete, and we do not sell or share your data for cross-context advertising. Children The service is not directed at children under 13 and we do not knowingly collect their data. Security Data travels encrypted (TLS) and is stored with access limited to the service itself. Sign-in uses Apple or Google, so we hold no passwords. Changes We will post updates here and in the app; material changes are announced before they take effect. Effective: on publication.