Privacy Policy

QSO One ("we", "us", "our") takes your privacy seriously. This policy explains what information we collect when you use QSO One, why we collect it, and how we handle it. We don't run ads. We don't sell your data. We don't track you across the web.

We collect the minimum information necessary to operate the service:

• Account email address

  Used to authenticate your account and contact you about your account or important service updates.

• Callsign

  Required to verify amateur radio license status and for display within the app.

• Subscription status

  Whether you have an active QSO One Pro subscription (Pro is coming soon), the plan type, and renewal date.

• Connection status (diagnostics)

  While the app is open, it reports which network you're on and which node, talkgroup, reflector, or conference you're connected to, including the sub-mode (such as BrandMeister vs TGIF, or node vs Web Transceiver), along with basic app and device info. This is tied to your account and kept on our servers, visible to the app's administrators, so we can diagnose connection problems and see which networks are in use.

We are explicit about what we do not do:

• ✓We do not log the content of your communications, or your detailed in-app behavior such as which screens you open or what you tap.
• ✓We do not serve ads or use ad tracking of any kind.
• ✓We do not record your audio. The optional QSO Logging (Pro) feature records audio locally on your device only, and it is never uploaded to our servers.
• ✓We do not sell, rent, or share your personal information with third parties for marketing purposes.
• ✓We do not use third-party analytics or tracking scripts on qso1.net.
• ✓We do not collect device identifiers, location data, or IP addresses beyond what Supabase logs for security purposes.

QSO One uses the following third-party services to operate. Each has its own privacy policy:

• Supabase

  Database and authentication

  Your account data (email, callsign, and subscription status) is stored in Supabase. Supabase is SOC 2 compliant and data is stored in the United States.

• Callsign lookup sources

  Callsign lookup (Pro feature)

  Callsign Lookup checks up to four sources in order and stops at the first match: QRZ and HamQTH (only when you connect your own accounts), HamDB, and Callook for US callsigns. Only the callsign being looked up is sent, never your account data.

We retain your account data for as long as your account is active. If you delete your account, all associated data (email, callsign, and subscription status) is permanently deleted from our systems within 30 days.

To delete your account, go to qso1.net/account → Danger zone → Delete account. Deletion is immediate and cannot be undone.

Account passwords are hashed using bcrypt and never stored in plaintext. All data in transit is encrypted using TLS. Supabase provides row-level security on all tables so that users can only access their own data.

QSO One is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.

If we make material changes to this policy, we will update the date at the top of this page and, where appropriate, notify you by email. Continued use of QSO One after changes constitutes acceptance of the updated policy.

Questions about this privacy policy? Email us at [email protected].