Effective 16 August 2026. This covers the Bilby app and bilbymobile.com.
We hold a random ID, the country your handset is in, a record of what you have bought, and the serial number of any eSIM we issue you. We do not know your name and we never see your card number.
We show no advertising and we collect no advertising identifier. Everything else below is detail.
This is the complete list. If something is not here, we do not have it.
A randomly generated identifier stored in a signed cookie on your device. It is not derived from anything about you, not your name, email, phone number or device. It exists so your data balance survives closing the app.
Why: To keep track of your data balance and your eSIM without making you create an account.
Shared with: Nobody · Kept: Until you ask us to delete it, or 24 months after last use.
The two-letter country code our network provider derives from your IP address, for example 'AU' or 'TH'. We store the country code only. We do not store your IP address, and we never request GPS or precise location permission.
Why: So the shop opens on a sensible destination before you have picked one, and so we know which country a plan is being bought from. It is never used to set your price: every plan is the same price for everybody.
Shared with: Nobody · Kept: Until you ask us to delete it, or 24 months after last use.
Which plan, for which destination, what you paid, any discount code you used, and the outcome. Card details are handled by our payment provider and never reach our servers.
Why: To give you what you paid for, to support you when something goes wrong, and because it is our accounting record and we have to be able to show what was sold and for how much.
Shared with: Nobody · Kept: Kept as a financial record for 7 years, as Australian tax law requires. Detached from your account ID when you request deletion.
The serial number of any eSIM profile we issue you, plus its activation details. This identifies the SIM, not you.
Why: To load data onto the right eSIM, show you your remaining balance, and support you if it stops working.
Shared with: Our connectivity supplier, who operates the mobile network · Kept: For the life of the eSIM plus 12 months, so we can support you and meet our supplier's record-keeping obligations.
Worth stating explicitly, because a privacy policy that only lists what it takes tells you nothing about what it leaves alone.
We do not show you ads, and we do not collect an advertising identifier. There is no advertising software development kit in the app.
If that ever changes we will say so here before it ships, not after, and the Google Play Data Safety declaration will be updated in the same release. A privacy policy that disagrees with the store listing is the most common way apps get removed, and it happens because the two are edited months apart.
Under the Australian Privacy Act, and if you are in Europe the GDPR, you can ask us to show you what we hold, correct it, or delete it. Email hello@bilbymobile.com and we will respond within 30 days.
We keep your order records for seven years even after a deletion request, because Australian tax law requires us to retain financial records. They are detached from your ID at that point, so they are no longer about you. They are rows in an accounting ledger.
In a Postgres database operated by Supabase, in Sydney. We chose an Australian region deliberately rather than taking the default, so your account, your orders and your eSIM records stay in the country whose privacy law you can hold us to.
Two things do leave. Your card details go to Stripe, who hold them instead of us and process internationally. The details needed to activate your eSIM go to the network we buy it from, who are overseas, because that is what issuing a profile requires. Both are the minimum the job needs.
We do not sell your data to anyone and there is no version of this business where we would. We are paid for data plans, which means you are the customer rather than the product.
If we change this materially we will say so in the app before the change takes effect, not quietly update the date at the top.
Bilby is the telecommunications division of Nextwave.au, Australia. hello@bilbymobile.com