Legal

Privacy Policy

Who we are. F*CK LIMITS sells prepaid, data-only travel eSIMs through the F*CK LIMITS app (iPhone and Android) and www.fcklimits.com. This policy explains what personal data we collect, why, who processes it for us and your choices. Questions: privacy@fcklimits.com.

Account and sign-in. Your email address, and your name if you add it. You sign in with Google, with Apple (iPhone) or with a 6-digit code we email you. Google or Apple share your email (and name, if you allow it) with us, never your password.

Purchases. Your purchase history (plan, region, days, amount, currency, date and status), the eSIM identifier (ICCID) and the data usage our network partner eSIM Access reports. Payments are processed by Stripe: card data is entered on Stripe and never stored by us. If you turn on auto-renew, Stripe (not us) saves your card until you turn it off. To prevent fraud we keep a hashed IP address and Stripe’s card fingerprint with each order; neither shows your card number.

Web shop. If you buy at www.fcklimits.com/shop without the app, we collect your email to deliver the eSIM, and Cloudflare Turnstile checks that you are not a bot.

Crew. The Crew name, members’ names and the email or phone number of friends you invite. If you pick friends from your phone’s contacts, the app reads your contacts on your phone; only the friends you choose are sent to us.

Crew Album photos (optional). Photos you add to a Crew Album are stored privately in original quality and are visible only to members of that Crew. They are deleted automatically 30 days after the trip ends. You can report a photo, block a member or ask us to delete any photo at any time.

Profile photo (optional). Stored privately and shown only inside the app. Remove it anytime.

Nationality (optional). Off by default. You can save up to 3 nationalities (only the country, no document) so the in-app Agent and the Stay Calendar can personalize visa answers. Turn it off to delete them.

No passport documents, no Face ID, no microphone. We don’t collect passport numbers, issue or expiry dates, date of birth or passport scans. We don’t store biometric data and the app doesn’t use Face ID. The app doesn’t use your microphone: the Agent is text-only.

Stay Calendar and entry photos (optional). The countries and dates you enter are used only to show your stay history and send reminders. You can attach up to 5 photos to a stay (a passport stamp, visa sticker or e-visa screenshot); they are resized and stripped of location and camera data on your phone before upload, stored privately and visible only to you. We never read, scan or analyze them (no text recognition, no AI). Deleting a photo, the stay or your account deletes them.

Agent chat. We keep your chat history with the in-app Agent so it can help you, and you can clear it in the app. Messages are processed by Anthropic, our AI provider, only to write the Agent’s replies; they are not used to train models. When the Agent opens a support ticket, the recent conversation goes into the ticket. Conversations with the in-app F*CK LIMITS Agent are kept for 90 days, with personal data (emails, phone numbers and card numbers) masked, and are used only for support, safety and abuse prevention, and improving the Agent.

Notifications and email. If you allow notifications we store a device token and send pushes through Apple Push Notification service (iPhone) or Firebase Cloud Messaging (Android). Tips & new features pushes are opt-in, at most 2 per week. Emails (receipts, eSIM delivery, Crew updates, sign-in and security codes) are sent through Resend.

Reviews. After a paid purchase, Trustpilot may email you an invitation to review us; for that we share your name, email and order reference with Trustpilot. Turn review invitations off anytime in the app’s Notifications settings.

Wallet pass (optional). If you add your Passport to Apple Wallet or Google Wallet, the pass shows your name, countries visited, number of eSIMs and member-since date. Google stores Google Wallet passes.

Android install link. If you tap a Drop link before installing the Android app, the app reads it once from Google Play’s Install Referrer so it can open your Drop. It carries no advertising ID.

No ads, no tracking. We don’t show ads, don’t use an advertising ID, don’t use third-party analytics or tracking and never sell your data. This website sets no tracking cookies; the Trustpilot widget on the home page loads from Trustpilot.

Who processes data for us. Supabase (database, sign-in, file storage), Vercel (hosting), Stripe (payments), eSIM Access (eSIM provisioning), Resend (email), Anthropic (Agent replies), Google (Google sign-in, Firebase Cloud Messaging, Google Wallet), Apple (Sign in with Apple, push notifications, Apple Wallet), Cloudflare (Crew Album storage, bot check), Upstash (rate limiting with hashed identifiers) and Trustpilot (review invitations). They use the data only to provide their service to us. Some of them process data outside your country, including in the United States.

Why we use it. To provide what you asked for (your eSIM, Crew, support), to keep the service secure and prevent fraud, to meet tax and accounting law, and, for optional features and tips notifications, with your consent, which you can withdraw anytime.

Retention. Account data: until you delete your account. Agent conversations: 90 days, with personal data masked. Crew Album photos: 30 days after the trip ends. Sign-in, deletion and rate-limit codes: at most 48 hours. Order and payment records: as long as tax and accounting law requires, without your name or email once you delete your account.

Delete your account. In the app: Passport > Settings > Delete account. On the web: www.fcklimits.com/delete-account, where we email you a 6-digit code to confirm. Deletion is immediate and removes your sign-in, profile, photos, nationality, stays, Crew memberships, Agent chat history and device tokens. eSIMs already on your phone keep working until their plan ends.

Your rights (LGPD/GDPR). You can ask to access, correct, delete or export your data, object to its use and withdraw consent, and you can complain to your data protection authority (ANPD in Brazil). Email privacy@fcklimits.com from the address on your account; we answer within 15 days.

Waitlist. If you joined our former website waitlist, we keep your email only to tell you about the launch. Ask us to remove it anytime.

Children. F*CK LIMITS is not intended for children under 16, and we don’t knowingly collect their data.

Changes. When this policy changes we update this page and the date below; important changes are also announced in the app or by email.

Last updated October 19, 2026.