Privacy Policy

xSIM · Last updated 8 September 2026

xSIM is a service of ZEUST LIMITED, a company registered in Cyprus (registration number HE 362856), referred to below as “ZEUST”, “we” or “us”. This policy explains what personal data we collect when you use the xSIM app, the xSIM web dialer at xsim.net and related services (together, the “Service”), why we collect it, how long we keep it and what rights you have.

In short: we collect what is needed to give you a phone number and let you call and text with it — your sign-in identity, your numbers, call records, messages and payment references. We do not sell your data, we do not show ads, and we only share data with the carriers and payment providers needed to deliver the Service, or when the law requires it.

1. Data we collect

Category	What	Why
Account	Name and email address from your Google or Apple sign-in, a unique user ID, account status and balance.	To create and secure your account and show your wallet.
Phone numbers	The virtual numbers assigned to you, their country, renewal dates and caller-ID settings.	To provide the numbers you purchase.
Call records	Numbers called or calling you, date, time, duration, cost and the IP address the call was placed from. Audio is not recorded.	To connect calls, bill them and show your call history; also a legal obligation for telecom services.
Messages	The content, sender, recipient and time of SMS sent or received on your xSIM number.	To deliver messages to you and show your conversations.
Device	Device type, app version, push-notification token, IP address and technical logs.	To ring your phone for incoming calls and messages, keep the Service stable and prevent abuse.
Payments	Payment references and amounts from Google Play, the App Store or Stripe. We never see your full card number.	To credit your wallet and manage subscriptions.
Support	What you write to our support chat or email.	To help you.

Contacts on your phone. If you allow it, the app reads your phone’s contacts so you can dial them by name. This happens on your device only — your contact list is never uploaded to our servers.

Microphone. The app uses the microphone during calls only.

2. How we use data

We use your data to operate the Service (assign numbers, route calls and messages, bill usage), to secure it (detect fraud, spam and abuse, enforce our Terms), to support you, to comply with legal obligations that apply to telecommunications providers, and to send you service notices such as low balance, number expiry or a change to this policy. We do not use your data for advertising and we do not sell it.

Our support chat may be answered by an automated assistant. Your messages to it are processed to generate a reply and may be reviewed by our team to improve support.

3. Legal bases (EU/EEA and UK users)

We process your data to perform our contract with you (Article 6(1)(b) GDPR), to comply with legal obligations (Article 6(1)(c)), and for our legitimate interests in securing and improving the Service (Article 6(1)(f)). Where we ask for consent, for example to access your contacts, you can withdraw it at any time in your phone’s settings.

4. Who we share data with

Telecom carriers and number providers that carry your calls and messages and supply the numbers — they receive the calling and called numbers and the message content needed to deliver it.
Payment providers — Google Play, Apple App Store and Stripe process your payments under their own privacy policies.
Infrastructure providers — hosting, push notifications (Firebase Cloud Messaging) and authentication (Firebase Authentication by Google), acting on our instructions.
Authorities — we disclose data when we are legally required to, for example under a valid court order or a lawful request from law enforcement, and only the data covered by the request.

Our servers are located in the European Union. Some providers (for example Google) may process data outside the EU; where they do, transfers are covered by the European Commission’s Standard Contractual Clauses or an adequacy decision.

5. How long we keep data

Account data — for as long as your account exists, then deleted within 30 days of closure, except where we must keep it longer.
Call and message records — retained for the period required by telecommunications and tax law (up to 12 months for traffic data, 6 years for billing records), then deleted.
Message content — kept until you delete the conversation or close your account, and at most 12 months.
Technical logs — up to 90 days.

6. Your rights

You can access, correct, export or delete your personal data, restrict or object to certain processing, and lodge a complaint with a supervisory authority (for Cyprus, the Commissioner for Personal Data Protection). You can delete conversations and call history in the app at any time. To delete your account and data, sign in and contact us through the app’s support chat or by email; we will confirm deletion within 30 days, subject to the legal retention periods above.

7. Security

Calls and messages are encrypted in transit between your device and our servers. Access to our systems is restricted to authorised staff and protected by strong authentication. No system is perfectly secure; if a breach affects your data we will notify you and the authorities as the law requires.

8. Children

The Service is for adults. We do not knowingly collect data from anyone under 18; if you believe a minor has an account, contact us and we will remove it.

9. Changes

We may update this policy from time to time. The date at the top shows the current version; for material changes we will notify you in the app or by email before they take effect.

10. Contact

ZEUST LIMITED
Cyprus · registration no. HE 362856
Email: privacy@xsim.net
Support: support@xsim.net or the chat inside the xSIM app