Community SIMsYOUR EVIDENCE
Your evidence.
Your privacy.
Roam Star Limited, trading as Kettle Mobile, is responsible for your application information. We use supporting documents to check eligibility, not for marketing.
Documents you upload to Kettle
Only you and authorised Customer service team reviewing your application can access supporting evidence while it is needed. When we approve, decline or confirm that you are eligible but waiting for funding, access to those documents is blocked and automatic deletion is requested from our private storage.
We attempt deletion when the decision is saved. Failed requests stay queued and are retried by our scheduled daily check. Customer service team can see when deletion is pending or has been confirmed. We do not mark evidence as deleted until the storage service confirms removal.
If a draft or an application waiting for further evidence has no activity for 30 days, supporting documents are queued for deletion at the next scheduled check. You may need to provide fresh evidence if you return later.
Please cover unrelated information before uploading. Do not include full bank statements, medical records, bank details, National Insurance numbers or children’s names.
Your ID and selfie check
Didit checks your ID and selfie on our behalf. Kettle does not keep copies of your ID, selfie, document number or face template. We retain limited verification outcomes and the matching references explained below.
When we receive a completed verification outcome, we automatically request deletion of the Didit session and its associated documents, extracted data and stored images, and, where no consented face template is retained, of the separate Didit user profile created for that check. Face-template handling depends on the separate, optional Community SIM face-matching choice described below. Without that consent, we request deletion of the face template too. This happens separately from the eligibility decision.
Our daily check also follows up sessions if you close your browser. Unfinished identity sessions are due for deletion after 24 hours; checks awaiting review are due after 30 days. We check for a completed result before treating a session as unfinished. If the provider is unavailable, the check and deletion remain outstanding rather than being falsely marked complete.
Deletion failures are retried and shown to Customer service team. Didit says its separate API activity logs remain for 365 days. Deleting a session does not automatically remove separately created blocklist records; Kettle’s integration does not create these records.
Optional face matching for Community SIM applications
With your explicit consent, Didit compares your live selfie with earlier Kettle Community SIM identity checks to help prevent one person receiving multiple Community SIMs using different documents, names, emails or codes. We use consent for this optional biometric processing (UK GDPR Article 6(1)(a) and Article 9(2)(a)). A possible match pauses the funding decision for an authorised Customer service team review; it is not an automatic rejection or allegation of fraud.
Your ID images, selfie images and video are still requested for deletion after the verification outcome. Didit may retain an image-free mathematical face template and an opaque user reference for up to 210 days from the check, with the actual expiry shown in your application. This is sensitive biometric personal data, not anonymous data. Kettle does not store the face template itself. We retain the consent version, date, limited match references and Customer service team review outcome. The provider template is used within our Didit application for duplicate checks; we do not add applicants to a face blocklist.
The maximum covers the six-month funded period and a short review allowance. Removal is requested earlier if an application is declined, Community SIM support is confirmed as ended, the customer converts to paid, or consent is withdrawn. Unused checks with no application are queued for removal after 30 days. We do not silently extend the expiry when funding continues; further checks or manual review may be needed.
Face matching is optional. Leave the separate consent box unticked to use manual duplicate checks instead. You can withdraw consent through your Community SIM application or contact support@kettlemobile.com. Withdrawal does not itself cancel existing mobile service or prevent a fair funding review. We record removal as pending until the provider confirms it. Paid family SIMs do not use this funded duplicate check and are unaffected.
The limited record we keep
To prevent someone receiving multiple Community SIMs through different accounts or codes, we retain the verified name and secret-key-protected matching tokens derived from the verified document and name/date of birth. We do not retain the document number or date of birth themselves. These tokens are personal data, are restricted to our server, and remain after the original evidence is deleted. Possible matches are held for Customer service team review, rather than automatically labelled as fraud. This restriction applies to Community SIM support; paid family SIMs are allowed.
Deleting evidence does not delete your application or account. We retain the information needed to manage the application and Community SIM support, the eligibility and verification outcomes, the reviewer and dates, a brief verification reference, and confirmation of deletion. Customer service team must not copy document contents, ID numbers or images into these records.
This notice covers supporting evidence. Account, application and decision records have separate retention needs and are reviewed when they are no longer needed. If you ask us to reconsider a decision after evidence has been deleted, we may need fresh evidence.
Backups and copies
We remove documents through the storage service’s deletion process, rather than merely hiding them or removing a database entry. Supabase’s database backups do not include the uploaded document files, but may contain application records and file metadata. We do not create separate evidence archives.
Service providers may retain restricted security or backup records under their own arrangements. We cannot promise that every technical trace disappears immediately. A deletion receipt confirms removal from the active storage or verification service; it does not certify the destruction of every provider backup or a copy previously downloaded by an authorised reviewer.
Reviewers must not retain downloaded evidence after the decision, copy it into email or notes, or include it in exports. Restoring a database backup must not reintroduce access to evidence recorded as deleted.
Questions or deletion requests
Chat with Kettle (opens in a new tab) through the chat bubble on our support page. Have your application reference handy. Please do not send identity documents or supporting evidence in chat.
You can ask about access, correction, deletion or reconsideration. We will explain any information we still need to keep and why. You can also raise a concern with the Information Commissioner’s Office.