Privacy Policy — Travel Super App

Effective: 4 August 2026 · Last updated: 4 August 2026 · Version: 1.0

Controller: Awecode Solutions Pvt. Ltd. · Privacy contact:[email protected]

1. Scope

This policy covers the Travel Super App mobile application (Android package com.awecode.travelapp, iOS bundle com.awecode.travel.app) and related services operated by Awecode Solutions Pvt. Ltd. (together, “Travel Super App”, “TSA”, or the “Service”). Other Awecode apps have separate policies — for example, see the Nidra Privacy Policy.

2. Summary

What we collectWhyShared withKept forOptional?
Name, email, phone, countryAccount, support, eSIM fulfilmentAiralo (as needed for eSIM)Until deletion + 30 daysEmail required; phone/country optional
Profile photo URLDisplayUntil deletionYes
Precise location (while in use)Weather, compass/elevation toolsWeatherAPI (coordinates for forecast)Not stored on our serversYes — tools degrade without it
eSIM order & device detailsPurchase, activation, supportAiralo; Apple/Google; RevenueCatOrder record for legal/accounting needsOnly when you buy an eSIM
PaymentIn-app purchaseApple / Google / RevenueCatWe never store card numbersNo, to pay
IP address, user-agent, crash logsSessions, security, stabilityFirebase CrashlyticsSession life / Crashlytics defaultsCrash reporting: product reliability
Support messagesCustomer supportUntil deletion + 30 days (or open dispute)Yes

3. Collection detail

3.1 Information you give us

Account details (email via magic-link sign-in; optional name, phone and country), optional profile image URL, and support messages you send through Contact Us. We do not currently collect date of birth, passport numbers or nationality documents.

3.2 Information generated by your use

Session data (including IP address and user-agent), eSIM order and fulfilment records (package, ICCID, activation details, payment status and store product IDs), and crash/diagnostic events.

3.3 Information from partners

eSIM package catalogues, activation QR codes and usage status from Airalo; purchase confirmation events from RevenueCat and the Apple App Store / Google Play; exchange rates from Nepal Rastra Bank when you use the converter (fetched on-device).

3.4 Location

While the App is in use. Precise location is used for weather and on-device tools (for example elevation). Coordinates for weather are sent to WeatherAPI and are not stored as a location history on our servers. We do not operate background location tracking for ride-hailing. Opening Pathao launches Pathao’s own app; Pathao’s privacy policy applies to any location data that app collects. You can deny location permission; related tools will degrade or become unavailable.

4. How we use it

  • Provide the Service (contract): create and manage your account, fulfil eSIM orders, show local content and tools, and deliver customer support.
  • Communicate with you (contract / legitimate interests): magic-link sign-in emails, order status, and replies to support requests.
  • Improve and secure the Service (legitimate interests): crash diagnostics, debugging, and preventing abuse of accounts and orders.
  • Legal compliance (legal obligation): accounting records for purchases, law-enforcement requests where required, and enforcing our Terms.

5. Payments

eSIM purchases are processed as in-app purchases through the Apple App Store or Google Play, mediated by RevenueCat. We do not receive, process or store your full card number, CVV or bank credentials. We store order metadata such as amount, currency (typically USD), payment status and store/RevenueCat identifiers needed to fulfil the eSIM.

6. Age requirement

Travel Super App is intended for users aged 18 and over. By creating an account or using the Service, you confirm that you meet this requirement. If we learn that an account belongs to a user under 18, we will close it and delete associated personal data within 30 days, except where we must retain purchase records.

7. Sharing

We share personal data only as needed to operate the Service:

  • Airalo — eSIM catalogue, purchase fulfilment and SIM/activation data
  • RevenueCat, Apple and Google — in-app purchase processing and entitlement verification
  • Cloudflare — hosting of the API and database (Workers, D1, KV)
  • Amazon Web Services (SES) — transactional email (for example magic links)
  • Firebase Crashlytics — crash and stability reports
  • WeatherAPI — current weather based on coordinates you allow
  • Professional advisers and authorities where required by law or to protect our rights

Pathao and other third-party apps you open from the Service are independent; their own terms and privacy policies apply. We do not sell your personal data and we do not share it for cross-context behavioural advertising.

8. Retention

DataRetentionBasis
Account profileUntil account deletion + 30 daysService delivery
Completed eSIM / payment records7 yearsAccounting / tax records in Nepal
Support historyUntil deletion + 30 days (unless open dispute)Support / disputes
Crash diagnosticsPer Firebase Crashlytics retentionReliability

9. Your rights

Depending on where you live, you may have rights to:

  • access your personal data
  • correct inaccurate data
  • delete your data
  • restrict or object to certain processing
  • data portability
  • withdraw consent where processing is based on consent

How to exercise them: email [email protected] from the address on your account. We respond within 30 days.

Complaints: you may lodge a complaint with your local supervisory authority, and for Nepal under the Individual Privacy Act 2075 (2018).

9.1 California residents (CCPA/CPRA)

If you are a California resident, you have rights to know, delete, and correct personal information; to opt out of sale or sharing; and to non-discrimination for exercising these rights. Categories collected correspond to the summary table in section 2 (identifiers, commercial information, internet/electronic activity, and geolocation when you enable location). We do not sell personal information. To submit a request, email [email protected].

10. Account and data deletion

On the web: awecode.com/legal/travel-super-app/delete-account — submit a deletion request using the email address on your account. No login is required to access this page.

By email: you may also write from your account email to [email protected]. We will verify ownership before completing deletion.

Deletion removes your profile, sessions and support history held in our systems. Completed eSIM and payment records may be retained for up to 7 years in a restricted-access archive where required for accounting or tax. Copies held by Apple, Google, RevenueCat or Airalo are subject to those providers’ retention rules. Deletion on our side completes within 30 days.

11. Security

We transmit data over HTTPS/TLS. Access to production systems is limited to authorised staff. Secrets are stored as environment configuration on our hosting platform. No method of transmission or storage is completely secure; please use a device passcode and keep your email account secure (it is used for magic-link sign-in).

12. International transfers

Your data may be processed in Nepal and in other countries where our service providers operate, including infrastructure and partners in the United States and other regions used by Cloudflare, AWS, Firebase, RevenueCat, Apple, Google and Airalo. Where required by applicable law, we rely on appropriate safeguards such as standard contractual clauses or the provider’s published transfer mechanisms.

13. Automated decision-making

We do not make decisions producing legal or similarly significant effects about you by automated means alone.

14. Changes

We will update the version number and date at the top of this policy when we make changes. Material changes will be announced in-app or by email where practicable.

VersionDateSummary
1.04 August 2026Initial public policy aligned to shipped features

15. Contact

[email protected] · Awecode Solutions Pvt. Ltd., Mahadevsthan-32, Koteshwar, Kathmandu 44600, Nepal · +977 9709140027

Related: Terms of Service — Travel Super App