Privacy Policy

Ohayoo ("we", "our", or "us") operates the TsunaGo mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

By using TsunaGo, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not use the App.

1. Information We Collect

Personal Information

When you create an account or use our services, we may collect the following personal information:

• Account Information - Your name and email address, provided when you create an account
• Device Information - Device model, operating system version, and unique device identifiers necessary for eSIM provisioning
• Payment Information - Payment details are processed securely through Stripe. We do not store your full credit card number, CVV, or billing address on our servers

Usage Data

We automatically collect certain information when you use the App:

• Data plan purchases and usage statistics
• App interaction data (features used, pages visited)
• Error logs and performance data
• Country and region of eSIM activation

Information We Do NOT Collect

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery - To provision and manage your eSIM data plans
• Payment Processing - To process transactions and send billing confirmations
• Customer Support - To respond to your inquiries and resolve issues
• Service Improvement - To analyze usage patterns and improve App features
• Communications - To send service-related notifications, such as data usage alerts and plan expiration reminders
• Fraud Prevention - To detect and prevent fraudulent transactions

3. Data Sharing and Third Parties

We do not sell your personal data to third parties. We share information only with the following service providers, strictly as needed to operate the service:

• Stripe - Payment processing. Stripe handles all payment data under their own privacy policy
• eSIM Go - eSIM provisioning and carrier network connectivity. Device identifiers and activation data are shared to enable eSIM installation
• Amazon Web Services (AWS) - Cloud hosting and data storage
• Apple Push Notification Service (APNs) - Delivery of push notifications to your device

Each of these providers is contractually obligated to protect your data and use it only for the purposes specified by us.

4. Data Retention

We retain your personal information as follows:

• Account Data - Retained while your account is active. Deleted upon request or 12 months after last activity
• Transaction Records - Retained for 7 years as required by financial regulations
• Usage Analytics - Aggregated and anonymized within 90 days of collection
• Support Tickets - Retained for 2 years after resolution, then deleted

5. Data Security

We implement industry-standard security measures to protect your data, including:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Regular security audits and penetration testing
• Access controls and multi-factor authentication for internal systems

While we take every reasonable precaution, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

6. Your Rights (GDPR and Global Privacy)

Regardless of where you are located, you have the following rights regarding your personal data:

• Right to Access - Request a copy of all personal data we hold about you
• Right to Rectification - Request correction of inaccurate or incomplete data
• Right to Deletion - Request deletion of your personal data ("right to be forgotten")
• Right to Data Portability - Receive your data in a structured, machine-readable format
• Right to Restrict Processing - Request that we limit how we use your data
• Right to Object - Object to processing of your data for certain purposes

To exercise any of these rights, contact us at support@tsunago.app. We will respond within 30 days.

7. Children's Privacy

TsunaGo is not intended for use by children under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page and notify you through the App or via email for significant changes. We encourage you to review this policy periodically.

10. Contact Us