Privacy Policy

PodSDR is made for operating your own radio, not for collecting data about you. The short version: the apps keep everything on your device, contain no advertising and no third-party analytics, and the only personal data we hold is the cloud account you may choose to create. Data controller: Michał Zabielski – Afterwhite Technologies, Warsaw, Poland — podsdr.sp5tls@gmail.com.

The applications

• Settings, radio profiles, band memories, voice-keyer messages and recordings are stored locally on your device. They are not sent to us.
• The microphone is used only to transmit and to record voice-keyer messages, and only after you grant the permission. Audio goes to your radio (directly or through your proxy), not to us.
• Android asks for notification permission for the background-session notification, and per-device USB permission when you plug in a paddle or serial adapter. iOS may show Now Playing controls on the lock screen. None of this involves our servers.
• The apps contain no advertising, no trackers and no third-party analytics.

The cloud account (optional)

Everything works on your LAN with no account. If you use the cloud broker for remote access, we store what is needed to run it:

• your callsign and e-mail address, and a password (stored hashed, never in plain text);
• the proxies you have claimed (their public keys and names) and the session tokens that connect your clients to them;
• ordinary technical server logs (such as IP addresses and timestamps), kept briefly for operating and securing the service.

This data is used only to authenticate you and connect your clients to your stations. We do not sell it, share it or use it for marketing.

Relayed radio traffic

When you operate remotely, audio, spectrum and control data flow over an encrypted WebRTC connection between your client and your proxy. When a direct connection is not possible, the traffic is relayed through the broker's TURN servers. Relayed traffic is passed through, not recorded. On the LAN, traffic stays between your devices and does not touch our servers at all.

Where it runs

The broker is hosted on Fly.io, and TURN relaying uses Cloudflare. These providers process traffic on our behalf as ordinary hosting infrastructure.

Your rights

You can ask us at any time to show or delete the data attached to your account, or to delete the account entirely — write to podsdr.sp5tls@gmail.com. Deleting the apps removes all locally stored data. Under the GDPR you also have the right to correction, restriction and complaint to a supervisory authority (in Poland: the President of the Personal Data Protection Office, UODO).

Changes

If this policy changes, the new version will be published here with an updated date.