Privacy Policy

1. Introduction

Welcome to HamLink, a professional VoIP push-to-talk (PTT) application for licensed amateur radio operators. This Privacy Policy describes how YO3TCO ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you use the HamLink mobile application ("App" or "Service").

By using HamLink, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the App.

2. Information We Collect

We collect only the minimum information necessary to provide and improve HamLink's functionality. We categorize the data we collect as follows:

2.1 Information You Provide Directly

Data Type	Purpose	Required?
Email Address	License activation and validation for PRO/ADVANCED tiers	Required for paid licenses
Connection Profiles	Server addresses, ports, callsigns, and passwords for SVXLink connections	Required for functionality
App Settings	Audio preferences, PTT mode, microphone gains, and UI preferences	Optional (defaults provided)

2.2 Automatically Collected Information

Data Type	Purpose	Storage
Device Identifier	Device limit enforcement for license tiers (Android ID hash)	Server-side only
App Version	Compatibility checks and bug tracking	Local device
Android Version	OS compatibility and feature enablement	Local device
Crash Reports	Bug diagnosis and app stability improvements (optional, anonymized)	Third-party (Google Play)

2.3 Network Communication Data

When you connect to SVXLink networks, the following technical data is transmitted:

• IP Address: Required for UDP/TCP network connectivity
• Callsign: Amateur radio station identifier (transmitted as part of SVXLink protocol)
• Audio Packets: Opus-encoded voice data (real-time only, not stored by us)
• Connection Metadata: Timestamps, connection duration, selected talkgroups

Important: This data is sent directly to third-party SVXLink network operators, not to us. We do not control or have access to these networks.

3. What We DO NOT Collect

4. How We Use Your Information

We use the collected information for the following purposes:

4.1 Core Functionality

• Network Connectivity: Establishing and maintaining VoIP connections to SVXLink servers
• Audio Processing: Real-time encoding/decoding of voice data (processed locally, not stored)
• Profile Management: Storing connection settings and user preferences locally on your device
• License Validation: Verifying active PRO/ADVANCED licenses via email and device ID

4.2 App Improvement

• Bug Diagnosis: Analyzing crash reports to fix app stability issues
• Feature Development: Understanding usage patterns to prioritize new features
• Performance Optimization: Monitoring audio quality metrics (latency, jitter, packet loss)

4.3 Customer Support

• Technical Assistance: Helping troubleshoot connection or audio issues
• License Support: Resolving activation or device limit questions
• Feature Requests: Collecting and implementing user suggestions

5. Data Storage and Security

5.1 Local Storage (On Your Device)

The following data is stored locally on your Android device using encrypted Android DataStore:

• Connection profiles (server addresses, callsigns, passwords)
• App settings and preferences
• License activation status

Security: This data is protected by Android's app sandboxing and encryption mechanisms. Only HamLink can access this data.

5.2 Server-Side Storage

We store the following data on secure servers for license management:

Data	Retention Period	Purpose
Email address	Duration of license + 1 year	License validation
Device ID hash	Duration of license	Device limit enforcement
Purchase transaction ID	7 years (legal requirement)	Accounting and refund processing
License tier and activation date	Duration of license + 1 year	License management

5.3 Security Measures

We implement industry-standard security practices to protect your data:

• Encryption in Transit: All server communications use HTTPS/TLS 1.3
• Encryption at Rest: Server databases are encrypted (AES-256)
• Minimal Data Retention: We delete data as soon as it's no longer needed
• Access Controls: Only authorized personnel can access user data
• Password Security: Connection passwords are hashed before storage (HMAC-SHA1)
• No Plain Text Secrets: API keys and secrets are stored in secure environment variables

6. Third-Party Services

HamLink integrates with the following third-party services:

6.1 SVXLink Networks (Third-Party Reflectors)

When you connect to SVXLink networks, your data is subject to the network operator's privacy policies:

• Data Shared: Callsign, IP address, audio packets, connection metadata
• Purpose: Voice communication and network management
• Our Role: We are a data processor; network operators are data controllers
• Your Responsibility: Review the privacy policy of each network you connect to

6.2 Payment Processors

License purchases are processed through third-party platforms:

• Buy Me a Coffee: For direct license purchases (see their privacy policy)
• Google Play Billing: For in-app purchases (see Google's privacy policy)

Data Shared: We receive only your email address and transaction confirmation. Payment details (credit card, etc.) are handled exclusively by the payment processor.

6.3 Vercel (Hosting Provider)

Our license validation backend is hosted on Vercel:

• Data Processed: Email, device ID hash, license status
• Purpose: License validation API endpoint
• Privacy Policy: Vercel Privacy Policy

6.4 Google Play Services (Optional)

If you opt in to crash reporting:

• Service: Firebase Crashlytics (Google)
• Data Shared: Anonymized crash logs, device model, Android version
• Opt-Out: Disable in app settings or Android system settings

7. Data Sharing and Disclosure

7.1 We Do NOT Sell Your Data

We will never sell, rent, or trade your personal information to third parties for marketing purposes.

7.2 When We May Share Data

We may disclose your information only in the following limited circumstances:

• With Your Consent: When you explicitly authorize us to share specific data
• Legal Compliance: If required by law, court order, or government request
• Safety and Security: To prevent fraud, abuse, or illegal activities
• Business Transfers: In the event of a merger, acquisition, or sale (users will be notified)
• Service Providers: With third parties who help us operate the App (under strict confidentiality agreements)

8. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights:

8.1 Data Access and Portability

• Access: Request a copy of the personal data we hold about you
• Portability: Receive your data in a structured, machine-readable format

8.2 Data Correction and Deletion

• Correction: Update or correct inaccurate personal information
• Deletion: Request deletion of your personal data (right to be forgotten)
• Note: Some data may be retained for legal or accounting purposes (e.g., transaction records)

8.3 Opt-Out Rights

• Marketing Communications: We do not send marketing emails (no opt-out needed)
• Crash Reporting: Disable in app settings under "Advanced" → "Share crash reports"
• License Validation: Required for PRO/ADVANCED features (cannot opt out while using paid tier)

8.4 How to Exercise Your Rights

To exercise any of these rights, contact us at yo3tco@gmail.com with:

• Subject line: "Privacy Rights Request"
• Your email address associated with HamLink
• Specific request (access, deletion, correction, etc.)
• Verification: We may request additional information to verify your identity

Response Time: We will respond within 30 days of receiving your request.

9. Children's Privacy

HamLink is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at yo3tco@gmail.com, and we will delete such information.

Note: Amateur radio licenses in most jurisdictions have no minimum age, but parental supervision is recommended for minors.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own:

• Server Locations: EU (primary), USA (backup)
• SVXLink Networks: Worldwide (depends on network operator location)
• Protections: We ensure adequate data protection through contractual safeguards and encryption

By using HamLink, you consent to the transfer of your data to these locations.

11. Data Retention

We retain your data only as long as necessary for the purposes outlined in this Privacy Policy:

Data Category	Retention Period
Active license data (email, device ID)	Duration of license + 1 year
Connection profiles (local)	Until you delete the app or clear data
Transaction records	7 years (legal requirement)
Crash reports	90 days
Support emails	2 years after last contact

After the retention period, data is securely deleted or anonymized.

12. Cookies and Tracking

HamLink does not use cookies or third-party tracking technologies. The website (hamlink.app) may use minimal analytics cookies to improve the user experience. These do not track personally identifiable information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

• Posting the updated policy on our website (hamlink.app/privacy)
• Displaying an in-app notification
• Sending an email to registered PRO/ADVANCED users

Effective Date: Changes take effect 7 days after notification. Your continued use of HamLink after this period constitutes acceptance of the updated policy.

14. Regional Privacy Rights

14.1 GDPR (European Union)

If you are in the EU/EEA, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: Legitimate interest (app functionality), contract (license activation), consent (crash reports)
• Data Protection Officer: Contact yo3tco@gmail.com for GDPR inquiries
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority

14.2 CCPA (California)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Categories of Data Collected: Email, device ID, app settings (see Section 2)
• Business Purpose: License management, app functionality
• No Sale of Data: We do not sell personal information
• Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: yo3tco@gmail.com
• Subject Line: "Privacy Inquiry - HamLink"
• Website: https://hamlink.app
• Developer: YO3TCO

Response Time: We aim to respond to all privacy inquiries within 48 hours.

16. Acknowledgment

BY USING HAMLINK, YOU ACKNOWLEDGE THAT YOU HAVE READ THIS PRIVACY POLICY, UNDERSTAND IT, AND AGREE TO ITS TERMS. IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, PLEASE DO NOT USE HAMLINK.