Privacy Policy

QSO One ("we", "us", "our") takes your privacy seriously. This policy explains what information we collect when you use QSO One, why we collect it, and how we handle it. We don't run ads. We don't sell your data. We don't track you across the web.

We collect the minimum information necessary to operate the service:

• Account email address

  Used to authenticate your account, send receipts, and contact you about your purchase.

• Callsign

  Required to verify amateur radio license status and for display within the app.

• License purchase record

  A record of your purchase (amount, date, transaction ID) used to validate your license and process refunds.

• Subscription status

  Whether you have an active Pro subscription, the plan type, and renewal date.

We are explicit about what we do not do:

• ✓We do not track your usage, sessions, or in-app behavior.
• ✓We do not serve ads or use ad tracking of any kind.
• ✓We do not record your audio. The optional QSO Logging (Pro) feature records audio locally on your device only — it is never uploaded to our servers.
• ✓We do not sell, rent, or share your personal information with third parties for marketing purposes.
• ✓We do not use third-party analytics or tracking scripts on qso1.net.
• ✓We do not collect device identifiers, location data, or IP addresses beyond what Supabase logs for security purposes.

QSO One uses the following third-party services to operate. Each has its own privacy policy:

• Stripe

  Payment processing

  All payment information (card numbers, billing address) is handled by Stripe. QSO One never sees or stores your full payment details. Stripe is PCI-DSS compliant.

• Supabase

  Database and authentication

  Your account data (email, callsign, license record, subscription status) is stored in Supabase. Supabase is SOC 2 compliant and data is stored in the United States.

• callook.info

  Callsign lookup (Pro feature)

  The Callsign Lookup Pro feature queries callook.info with your requested callsign. No account data is sent — only the callsign being looked up.

We retain your account data for as long as your account is active. If you delete your account, all associated data — email, callsign, license record, and subscription status — is permanently deleted from our systems within 30 days.

To delete your account, go to qso1.net/account → Danger zone → Delete account. Deletion is immediate and cannot be undone.

Note: Stripe retains transaction records as required by financial regulations. These records are held by Stripe, not by QSO One, and are subject to Stripe's data retention policies.

Account passwords are hashed using bcrypt and never stored in plaintext. All data in transit is encrypted using TLS. Supabase provides row-level security on all tables so that users can only access their own data.

QSO One is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.

If we make material changes to this policy, we will update the date at the top of this page and, where appropriate, notify you by email. Continued use of QSO One after changes constitutes acceptance of the updated policy.

Questions about this privacy policy? Email us at [email protected].