HAMORA Privacy Policy

The short version

• Your logbook stays on your phone unless you turn on a service that needs to send it somewhere.
• No ads and no tracking. We don’t sell personal data or use advertising identifiers.
• An account is optional. You need one only for HAMORA Cloud and callsign verification.
• Usage statistics and crash reports are off unless you turn them on.
• You can export your logbook (ADIF) and delete your account in the app at any time.

1. Data on your phone

• What HAMORA keeps on your phone: your logbook (QSOs, operations, station profiles and equipment), your settings, and a short local diagnostics log of recent warnings and errors, with personal details removed. The diagnostics log never leaves the phone unless you share it.
• Passwords and tokens for services you connect (LoTW, Club Log, QRZ.com, HamQTH, HAMORA Bridge) are kept in your phone’s secure storage.
• Location is read only when you ask, for example to work out your grid locator, and only while HAMORA is open. HAMORA never tracks your location in the background.
• Phone backups. Your phone’s own backup (iCloud, or Android backup) may include the logbook. Your Apple or Google settings control those backups.

2. HAMORA account and Cloud (optional)

• Account. You can create one with a one-time email code, Sign in with Apple or Sign in with Google. We store your email address and an account id. Sign-in code emails are sent for us by Resend.
• HAMORA Cloud sync and backup (Lifetime). It stores a copy of your logbook so your devices stay in step, including station coordinates and grid locators.
• Where it’s kept. HAMORA Cloud is hosted by Supabase in Singapore. Each record is private to your account, and connections are encrypted.

3. Callsign verification (optional)

If you verify a callsign, we keep the callsigns you add, and how each one was verified.

• With LoTW: your certificate’s serial number, validity dates, issuer and DXCC entity, so we can check that LoTW hasn’t revoked it. We never keep the name, email or address in the certificate.
• With a licence document: the document usually shows your name and address. Only HAMORA reviewers see it. It is deleted automatically 30 days after the reviewer’s decision, and with your account if you delete it sooner. A document waiting for review is kept until it’s decided.
• For US callsigns, a licence check sends the callsign to callook.info, which publishes FCC licence records. It never verifies a callsign on its own.
• The verification record. Each step (claim, review, decision, phone key and licence attestation) is recorded with the callsign, so verification stays trustworthy. If you delete your account, these entries are kept without your account id. We’ll add a retention period to this policy when automatic removal is in place.

4. Purchases

HAMORA Lifetime is bought through the App Store or Google Play, and managed for us by RevenueCat.

• We receive the purchase status and dates, never your payment details.
• Until you sign in, purchases belong to an anonymous id. After you sign in, they are linked to your account so they follow you to your other devices.
• RevenueCat keeps the purchase record so Lifetime can be restored. Deleting your HAMORA account doesn’t delete it, and doesn’t affect Lifetime, which belongs to your App Store or Google Play account. Apple and Google keep their own billing records. For questions about these records, contact privacy@hamora.app.

5. Notifications (optional)

HAMORA asks once, after setup, whether it may send you notifications. You can turn notifications, or just HAMORA Cloud push, off at any time in Settings. If you allow notifications and you’re signed in:

• your device’s push token is stored with your account until you turn HAMORA Cloud push off, sign out or delete the account;
• messages are delivered by Expo, through Apple’s or Google’s push service (Firebase Cloud Messaging on Android).

6. Services you choose to connect

When you use these features, HAMORA sends that service what it needs, under its own privacy policy:

HAMORA Bridge runs on your own network. Pairing and its data stay between your phones and your Bridge.

7. Usage statistics and crash reports (opt-in)

These are off until you turn them on in Settings → Privacy & diagnostics. They are two separate choices, and you can turn either off at any time.

Usage statistics (Google Analytics for Firebase)

• which features are used, counted, with fixed values only;
• screen names, without ids;
• an app-instance id;
• device model, operating system and app version, and language;
• an approximate location (country, region or city) that Google derives from your IP address; the IP address itself isn’t stored;
• store purchases (product and price), measured by the analytics software.

Kept for 2 months.

Crash reports (Firebase Crashlytics)

• technical details when the app crashes or hits an error: the stack trace, device state and app version;
• recent warning lines, with personal details removed.

Kept for 90 days.

These never include your callsign, QSOs, precise location, email, account id or passwords, or advertising identifiers. Turning one off stops it at once and deletes data not yet sent.

8. Diagnostics you share

Share diagnostics sends the local diagnostics text through your phone’s share menu, to the recipient you choose, for example HAMORA support. Personal details are removed first.

9. Who processes data for us

• Supabase: database, sign-in and storage for HAMORA Cloud (Singapore).
• Vercel: hosting of this website.
• Resend: sign-in code emails.
• RevenueCat: purchases.
• Expo: push notification delivery.
• Google: Firebase (Android push, and the app’s opt-in usage statistics and crash reports), and Google Analytics for this website, with your consent (section 15).
• Apple and Google: the app stores, sign-in and push.
• Callsign verification checks: ARRL’s LoTW receives your certificate’s serial number to check it hasn’t been revoked; callook.info receives US callsigns you ask to look up.
• Map tiles: the APRS map loads its tiles from OpenFreeMap, which sees the map area you view and your device’s IP address.

They process data only to provide their service. We don’t sell or rent personal data, and we disclose it only when the law requires.

International transfers. HAMORA Cloud is hosted in Singapore. Some of the providers above handle data in other countries, including the United States. We transfer personal data outside Malaysia only to provide HAMORA, and only as the Personal Data Protection Act 2010 allows.

10. How long we keep data

11. Your choices and rights

• Export your logbook at any time: More → Export ADIF.
• Delete your account in the app: More → Profile → Manage account → Delete HAMORA Account. Without the app, see Delete your HAMORA account.
• Statistics, crash reports and notifications: on or off, in Settings.
• Access, correction and other requests under Malaysia’s Personal Data Protection Act 2010 and other laws that apply to you: contact privacy@hamora.app. We’ll confirm it’s you before acting on a request.

12. Children

HAMORA is meant for adults aged 18 and over, and isn’t directed to children. We don’t knowingly collect personal data from children. If you think a child has given us personal data, contact privacy@hamora.app and we’ll delete it.

13. Security

• Connections to HAMORA Cloud are encrypted. APRS-IS, a community network, uses unencrypted connections: HAMORA sends it only your callsign and an approximate area.
• Passwords and tokens are kept in your phone’s secure storage.
• Each HAMORA Cloud record is private to its account.

No system is perfectly secure. If you find a problem, tell us at security@hamora.app.

14. Changes

If this policy changes, we’ll update the effective date above, and tell you in the app when a change matters to you.

15. This website (hamora.app)

• Hosting. hamora.app is hosted by Vercel. Like any website host, its servers receive your IP address and browser details to deliver the pages.
• Analytics only with your consent. A banner asks first, and nothing is loaded or stored until you choose Accept. If you accept, Google Analytics records the pages you visit, how you arrived (for example from a search), scrolling, clicks on outbound links and downloads, your device, browser and language, and an approximate location that Google derives from your IP address. Google Analytics doesn’t store the IP address itself.
• Cookies. With your consent, Google Analytics sets the first-party cookies _ga and _ga_L41LJJM2YJ on hamora.app. They expire after up to 2 years, or when you withdraw consent. Your choice itself is remembered in your browser’s local storage, not in a cookie.
• No advertising. Google signals and ad personalisation are off, and the data isn’t used for advertising. Google Analytics keeps it for 2 months.
• Change your mind at any time with “Analytics settings” at the bottom of every page. Withdrawing deletes the analytics cookies.
• Search. We use Google Search Console, which gives us aggregated statistics about how hamora.app appears in Google Search. It adds nothing to the pages you visit.

16. Contact

Litesoc Sdn. Bhd. · Unit 17.2, Level 17, Wisma Sunway, No.1 Jalan Tengku Ampuan Zabedah C9/C, Seksyen 9, 40100 Shah Alam, Selangor, Malaysia · privacy@hamora.app