Privacy policy
This is a convenience translation. In case of any discrepancy, the Russian version of the document prevails.
1. General provisions
This Policy governs the processing of personal data of users of the baylanys.com website and the Baylanys mobile app (the Service), operated by AlanaTech Group LLP, BIN 160240009011.
Processing is carried out under the Law of the Republic of Kazakhstan “On Personal Data and Their Protection” No. 94-V and other applicable rules.
By using the Service, you agree to the terms of this Policy.
2. What data we collect
| Category | Contents |
|---|---|
| Account data | email address, name (if you provide it) |
| Order data | purchased plans, amounts, dates, order statuses |
| eSIM data | profile identifier (ICCID), data used, plan validity |
| Technical data | IP address, device type and app version, push notification identifier |
| Support requests | the content of the conversation |
We do not collect your location data. The Service does not track your movements and has no access to the content of your internet traffic.
Crash reports. If the app crashes, we receive an automatic report. It contains a technical description of the error, the device model, operating system version, app version, and the date and time of the crash. The report contains no name, email address or order details, and we do not link it to your account.
App usage information. We record which sections you use: opening a destination in the catalog, going to payment, completing a purchase, contacting support, changing the interface language and opening search. A completed purchase is recorded with its amount and order number. Together with this, we store the device model, operating system and app versions, interface language and country. The country is determined approximately from the IP address; the IP address itself is not stored in the reports.
This information is tied to a technical identifier of the app installation, not to your account. The identifier is created at installation and is reset if you reinstall the app or clear its data.
We do not collect the device advertising identifier. The app shows no ads and does not share data with ad networks.
We do not receive or store your bank card details. Card details are entered on the secure page of the FreedomPay payment service and are not passed to the Contractor.
3. Purposes of processing
- placing and fulfilling an order: issuing the eSIM profile and providing the data to install it;
- signing in to the Service with a one-time code sent to your email;
- showing remaining data and the validity of the purchased plan;
- notifications about order status and running out of data;
- handling refunds and support requests;
- meeting tax and accounting requirements;
- keeping the Service secure and preventing fraud;
- finding and fixing app failures;
- understanding which features are used and where people run into difficulties, to improve the Service.
4. Sharing data with third parties
We do not sell personal data or share it for marketing. Data is shared only to the extent needed to provide the service:
| Recipient | What is shared and why |
|---|---|
| Telecom service provider (eSIM aggregator) | the information needed to issue an eSIM profile for your order |
| FreedomPay | the order amount and number to process the payment; you enter card details directly on the payment service side |
| Google Firebase | push notification delivery, crash diagnostics and app usage information. Data is processed on Google servers outside the Republic of Kazakhstan. Terms: policies.google.com/privacy |
| Email service provider | your email address to deliver sign-in codes and notifications |
Data may also be disclosed upon a reasoned request of authorised state bodies in the manner established by the legislation of the Republic of Kazakhstan.
5. Storage and protection
Personal data is stored on servers located in the Republic of Kazakhstan, as required by Article 12 of the Law “On Personal Data and Their Protection”.
| Data | Retention period |
|---|---|
| Account data | while you use the Service |
| Order and payment data | at least 5 years — as accounting records |
| eSIM and data usage | for the profile’s validity and 12 months after |
| Technical logs | up to 12 months |
We use encryption of the connection (TLS), encryption of eSIM activation data at rest, restricted staff access and logging of administrator actions.
6. Your rights
You may request access to your data and its correction, withdraw consent to processing and lodge a complaint with the authorised personal data protection body.
Deleting your account. You can delete your account in the Service. On deletion, the information that identifies you is anonymised and signing in becomes impossible. Order and payment data is kept in anonymised form — it is accounting records and cannot be deleted before the statutory retention period ends. How to delete your account in the app or by email is described on the Delete account page.
You can stop crash reports and app usage information by removing the app from your device.
To exercise your rights, write to alanatech.kz@gmail.com.
7. Minors
The Service is not intended for persons under 16. We do not knowingly collect their data. If you become aware of such a case, let us know and the data will be deleted.
8. Changes to the Policy
The Policy may be updated. A new edition takes effect when it is published in the Service. The edition date is shown at the top of the document.