PRIVACY POLICY.

Kili is operated by Yenetta Ventures LLC (Wyoming filing number 2026-002069761), 30 N Gould St Ste R, Sheridan, WY 82801, United States. For anything on this page, write to privacy@usekili.com.

What we collect

Your contact details. An email address, and a phone number if you give one. A name, if you give one. That is what an account consists of.

Your orders. Which plan, what you paid, in which currency, when, and whether a partner code was used. We keep a record of each payment — the amount, the provider, and their reference for it.

Your eSIM. The identifiers and activation details for the profile issued to you. These are stored encrypted, and each time one is shown we record that it was shown.

Not your card. Card numbers are entered on the payment provider's own page and never reach our servers. We could not show you your own card number if you asked.

Partners who use our API. When a partner business sells eSIMs through our API, we keep a log of its requests: when, which key, the IP address it came from, the answer, and for orders the request and response, with activation codes masked. The partner is the seller to its own customers; we ask partners not to send us their customers' personal data, and our API has no place for it.

Analytics and cookies

We use two analytics services to understand how the site is used: which pages people visit, where they came from, and where they leave.

• Google Analytics records the pages you view, your browser and device type, and your approximate location. We ask Google to anonymise your IP address.
• HubSpot records the pages you view and, once you sign in or fill in a form on the site, links those visits to your email address.

Both set cookies in your browser to recognise a returning visitor (Google's start with _ga; HubSpot's include hubspotutk and __hstc). We send them the page's path, never the full address, and we remove order numbers, payment references and gift and redemption codes from it first. Nothing is loaded until you start using the page.

You can block or delete these cookies in your browser settings, and the site works the same without them. Google also offers a browser add-on that turns off Google Analytics everywhere.

Separately, we set one cookie of our own to keep you signed in. It cannot be read by scripts in your browser.

What we do not do

We do not sell personal data, and we do not share it for anyone else's marketing.

Who else processes it

• Supabase — our database and sign-in system. Holds your account and order records.
• Vercel — hosts the site and runs the server code.
• Chapa and Stripe — take payments. They receive your name and email to process the transaction, and they hold the card details we never see.
• Resend — sends your sign-in codes and order emails. Receives your email address.
• eSIM Go — supplies the eSIM profiles. Notably, they receive no personal data from us: we ask for a bundle by name and get a profile back. Your identity is not part of that exchange.
• Google (Google Analytics) and HubSpot — measure how the site is used, as described above.
• HubSpot is also where we keep track of customers and partners. It receives your name and email when you create an account, sign up for the newsletter or apply to be a partner (with the details on the application), and, when you buy, how many orders you have placed, the destination and price of the latest one, and any partner code used. It never receives your card details or your eSIM's activation details. It also runs our live chat and support email, and holds the messages and contact details of anyone who writes to us.

Some of these operate outside Ethiopia, so your data may be processed abroad under those providers' own protections.

How long we keep it

Order and payment records are kept for as long as we are required to keep financial records, and are not deleted on request — accounting law outlives account deletion. Account details and eSIM credentials are deleted when you close your account. Sign-in codes expire within the hour. API request logs are deleted after 30 days.

Your choices

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to close your account and delete what we are not obliged to keep. Write to privacy@usekili.com from the address on the account, and we will respond within 30 days.

Security

eSIM activation details are encrypted before they are stored, so they are not readable to anyone who obtains a copy of the database. Access to a credential is logged. Our support staff can look up your order and reissue an eSIM, but the tools they use deliberately do not show them your activation code.

No system is perfectly secure. If a breach affects you, we will tell you rather than wait to be asked.

Children

Kili is not intended for children under 18, and we do not knowingly collect their data.

Changes

If this policy changes materially we will update the date above and say what changed rather than quietly reissue it.

11 October 2026: added the analytics and cookies section, and Google and HubSpot to the list of processors. An earlier version said we ran no analytics; that was no longer true.

12 October 2026: HubSpot now also receives account, newsletter, partner application and purchase details, as listed under "Who else processes it", and links your visits to your email address once you sign in.

19 October 2026: added the log we keep of partners' API requests, and that it is deleted after 30 days.