Legal

Privacy Policy

Controller. F*CK LIMITS (FCK LIMITS), operated by Gabriel Cypriano Coutinho, individual developer, Brazil. Contact via the form at fcklimits.com/support or in the app (Help > Contact support).

Account. Your email address (to sign in with a one-time code or Sign in with Apple), and optionally your display name and a profile photo you choose. If you use Sign in with Apple you may share a private relay email.

Purchases. Orders, plan, region, days, amounts, refund status and the eSIM identifiers (ICCID) and data usage reported by our network partner. Card and Apple Pay data are entered with Stripe and never reach our servers; Stripe gives us a payment reference and a card fingerprint used to prevent fraud.

Groups and contacts. If you invite friends to a group, the names, emails or phone numbers you choose (typed or picked from your contacts) are stored to show the group and send the invite. We never upload your address book: the contacts picker runs on your iPhone and only the people you select are sent.

Support and AI help. Messages you send to support are stored with your account. Questions you type to the in-app AI assistant are sent to an AI provider (Anthropic or OpenAI) to generate an answer; the assistant does not receive your account, order or eSIM data.

Ride game. Game sessions, scores, earned minutes, rewards and invite claims, to credit rewards and prevent cheating.

Device and security. A push notification token (if you allow notifications), and hashed IP addresses and device signals used for rate limiting and fraud prevention. Errors are logged on our servers; we use no third-party analytics, advertising or crash-reporting SDKs and we do not track you across other apps or websites.

Website. The website contact form stores your name, email and message as a support ticket. If you join the waitlist we store only your email.

Why. To provide and support your eSIM, process payments and refunds, run groups and the game, prevent fraud, and meet legal obligations (legal bases: contract, legitimate interest, legal obligation, consent for notifications and contacts access).

Processors. Supabase (database, auth, storage), Vercel (hosting), Stripe (payments), eSIM Access (eSIM provisioning), Resend (email), Apple (Sign in with Apple, push notifications), Anthropic / OpenAI (AI assistant answers). Data may be processed outside your country under appropriate safeguards.

Retention. Account data until you delete your account. Delete it any time in the app (Account > Delete account): your profile, photo, unreleased groups and tokens are deleted; payment and tax records are kept anonymised as required by law.

Your rights (LGPD / GDPR / CCPA). Access, correction, deletion, portability, objection and withdrawal of consent. Ask via the support form or in the app. You can also complain to your data protection authority (in Brazil, the ANPD).

Children. The service is not directed to children under 13 and we do not knowingly collect their data.

Changes. We will post updates here with a new date.

Last updated October 2026.