Loading
Effective 23 October 2026
This policy explains what personal information TravioGo collects through our website, traviogo.net, and the TravioGo app for Android: why we use it, who we share it with, how long we keep it, and what you can do about it. “TravioGo”, “we” and “us” mean the TravioGo service.
When you create an account we ask for your email address and a password, and your name if you want to give it. Your password is stored only as a secure one-way hash, never in a form anyone can read. You can later add your country, which we use to show you the ways to pay that work where you are.
If you sign in with Google, Google tells us your Google account ID, your email address, whether Google has verified that address, and your name. We never see your Google password.
If you turn on two-step sign-in, we store the secret your authenticator app uses and your recovery codes. We also record when your account was created and when you last signed in.
We use all of this to create your account, keep it secure, and deliver the eSIMs you buy to it.
For each order we keep what you bought, the price and currency (with the exchange rate applied), and how and when it was paid.
When an eSIM is issued to you, our eSIM network partner sends us its details, and we store them with your account: its ICCID (serial number), the activation code and QR code that install it, its status, data usage and expiry, and technical details such as its APN setting, PIN and PUK, and the EID of the phone it is installed on.
We use these to deliver what you paid for, show you how much data is left, let you install or top up an eSIM, and keep the financial records the law requires. Unless you switch offers off, we also use what you have bought to choose which offers to send you — news about plans for a country you have bought a plan for, for example.
Card and online payments. If you pay at checkout by card or mobile wallet, you enter your payment details on a secure page run by our payment provider — Stripe, Safepay or JazzCash, depending on your currency and what is available at the time. Your card number and security code go straight to them and never reach us. We give the provider the amount and your order number, and Stripe also receives your email address. The provider tells us whether the payment succeeded, and we keep its reference for the payment.
Your wallet. We keep your wallet balance and a record of every amount added to it or spent from it.
Topping up by transfer. When you top up your wallet by bank or mobile-wallet transfer, you tell us the amount, which of our accounts you paid into and the payment reference, and you may upload a photo, screenshot or PDF of the payment (up to 10 MB). Our team checks these against our account before crediting your wallet. A proof of payment can show your name and account details, as your bank or wallet displays them.
Topping up with Binance Pay. When you top up with Binance Pay, you tell us the amount, and you may give us the Order ID of your transfer. To find your payment we read our own Binance account’s payment history, which shows us, for each transfer, its Binance transaction ID, the amount and currency, when it was sent, and the sender’s Binance display name. We keep these with your top-up — or, for a payment that matches no top-up, on their own while our team works out whose it is, and after that as a financial record like any other payment. We don’t send Binance anything about you. Binance Pay is run by Binance, under its own privacy policy.
When you raise a support query, we keep your messages, any photos or PDFs you attach (up to 10 MB each), and the order or eSIM you say it is about. Our support team reads them to help you, and we email you when we reply.
If you message us on WhatsApp or email us, we receive what you send. WhatsApp is run by WhatsApp, under its own privacy policy.
The assistant answers questions about eSIMs, our plans and your account.
To write each answer, we send your question and the recent messages in the conversation — with the help articles and plan details that bear on it — to an AI provider we use, such as Google Gemini, Groq or OpenRouter. If one provider cannot answer, the same request may go to another. The providers process it to produce the answer, under their own terms.
If you are signed in, the assistant may also be given basic facts about your eSIMs so it can help with them: each plan’s name, its status, how much data is left and when that was last measured, when it expires, and its APN setting. It is never given anything that installs an eSIM — no activation code or QR code — and never the ICCID, PIN or PUK. We don’t add your name, email address or account ID to what the providers receive.
We keep the conversations, so a chat can pick up where it left off, so our support team has the whole story if you ask for a person, and so we can improve the answers. Our team can read them. Please don’t type passwords or card details into the chat.
If the app asks to send you notifications and you allow it, we store a notification token for your phone, with a random identifier for that installation of the app, the app version and your language setting. We use it to tell you when your eSIM is ready, your data is running low or your plan is about to expire, a wallet top-up or refund has been dealt with, or support has replied, and to send the offers and service notices described below. Notifications are delivered through Google’s Firebase Cloud Messaging. The token is deleted when you sign out, when you delete your account, or when your phone stops accepting notifications.
We may also send you offers and news — new plans, promotions and discounts — as notifications in the app and in your notifications on the website. Which ones you get can depend on what you have bought from us and on whether you use the app. You can switch them off at any time in your account settings, on the website or in the app, and then we stop sending them. On Android you can also silence their pop-ups in your phone’s notification settings, although they still appear in your notifications in the app and on the website. Service notices, such as planned maintenance or an outage, and messages about your own orders and eSIMs are separate, and still reach you with offers switched off.
We email you about your account and your wallet: to confirm your email address, to reset your password, to alert you to security changes such as a new password or two-step sign-in being turned on or off, with updates on your wallet top-ups, with replies to your support queries, and to confirm that your account has been deleted. These are service messages. We don’t send marketing email: offers and news come only as notifications, as described above. Emails go out through our email delivery provider.
When you sign in, we record when the session began and the IP address and browser or app identifier the request reached us from. It helps protect your account — for example, by showing up a stolen session. These records are deleted 30 days after the session expires.
Our servers also keep technical logs so we can run the service and investigate problems. They can include your account ID and, when we send you an email, your email address.
To see how the website is used — how many people visit, which pages they read and how they found us — the website counts its own page views. No cookies are used for this, and no analytics company is involved.
Each time you open a page, we record when, and:
So that one person reading several pages counts as one visitor, your IP address and browser details are turned into an anonymous visitor code, which is stored with each page view. The code is made with a random key that changes every day, so your visits on different days get different codes, and each day’s key is deleted soon after the day ends — after which nobody, us included, can work out whose code it was. Your IP address itself is not stored with your page views.
Page views are kept for about 13 months (400 days). They aren’t linked to your account, and they are used only for overall statistics seen by TravioGo staff.
If your browser sends a Global Privacy Control or Do Not Track signal, the website doesn’t count your visits at all.
You can delete your account at any time. Here is how to delete your account, and exactly what it removes.
No way of storing or sending information is completely secure, so we can’t promise that it is, but these measures are there to protect yours.
TravioGo is not directed to children under 13, and we don’t knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it.
We and the providers above may store and process your information outside Pakistan, and outside the country you live in. We share with each provider only what it needs for the work it does for us.
If we change this policy, we will publish the new version on this page and update the date at the top.