Privacy Policy

01 Organization Information

Bandlog is published by an organization (company) Google Play developer account.

02 Data Collection

Bandlog collects no data whatsoever. We do not collect, receive, request or infer any personal information, device identifier, usage statistic, crash report, advertising ID or location.

Everything you enter — callsigns, contact times, bands, modes, frequencies, signal reports, grid squares, station details, activation notes and tags — is written directly to storage on your device. It is never sent anywhere.

03 Data Usage

Your log is used on your device, by the app, to do exactly what you asked it to do: display your contacts, compute award progress, streaks and statistics, and produce files when you choose to export.

All calculation — Worked All States, DXCC entities, grid squares, charts, streaks and badges — happens locally on the device. No server is involved at any point.

04 Data Sharing

We share nothing, because we hold nothing. Bandlog has no backend, sells no data, and transmits no data to advertisers, analytics providers, data brokers or any other third party.

The one time your data moves is when you tap Export. Bandlog writes an ADIF, CSV or JSON file into the app's own storage and hands it to the Android share sheet. You choose the destination — email, a notes app, cloud storage, or nowhere at all. That is your action, not ours.

05 Data Security

Your log is protected on-device:

• Contacts, stations and activations are stored in a Hive database encrypted with AES-256.
• The encryption key is generated on first launch and held in flutter_secure_storage, backed by Android's hardware-backed keystore.
• App settings and preferences are stored in the same secure storage.
• Because no data is transmitted, there is no server-side breach surface.

06 Data Retention

Your data stays on your device until you remove it. You can delete individual contacts, or use Settings → Clear all data to erase every contact, station and activation permanently. Uninstalling Bandlog removes all of its data from the device.

07 No User Accounts

Bandlog has no sign-up, no sign-in, no password and no profile. You never provide an email address, phone number or callsign to us. The app is fully functional the moment it is installed.

08 Children's Privacy (COPPA)

Bandlog is not directed at children and is not enrolled in the Designed for Families programme. Because the app collects no data from any user regardless of age, it collects no data from children under 13 (or the equivalent minimum age in your jurisdiction). There is nothing for a parent or guardian to request the deletion of from us.

09 Your Rights

Rights such as access, portability, correction and erasure are exercised directly in the app, because you already hold the only copy of your data:

• Access & portability — Settings → Export ADIF, CSV, or a full JSON backup.
• Correction — open any contact and edit it.
• Erasure — delete a contact, use Settings → Clear all data, or uninstall the app.

We cannot action a data request on your behalf, because we hold no copy of your data.

10 No Third-Party Services

Bandlog integrates no analytics, advertising, crash-reporting, attribution, social or cloud SDK. There is no Firebase, no Google Analytics, no ad network and no callsign lookup service. The reference data the app uses — amateur bands, modes, US states and DXCC entities — is bundled inside the app and works offline.

11 Permissions

Bandlog requests exactly one Android permission:

Bandlog does not request camera, microphone, location, contacts, storage, notification or any other permission.

12 Google Play Data Safety

Bandlog's Data Safety declaration in the Google Play Console states: no data collected and no data shared. No data types are collected, so none are transmitted off the device, and no data is used for tracking, advertising or personalisation.

13 Policy Dates

If this policy changes, the updated version will be published at this URL with a new "last updated" date. Because the app collects nothing, any change will be clarification rather than an expansion of data use.

14 Contact

Questions about this policy or about Bandlog's privacy practices: [DEVELOPER_EMAIL].

15 Legal Compliance

Bandlog is designed to comply with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and Google Play's Developer Programme Policies, including the User Data and Data Safety requirements.

Compliance is straightforward here: Bandlog processes no personal data outside your device, so there is no controller-to-processor transfer, no international data transfer, no sale or sharing of personal information, and no profiling or automated decision-making. This policy is published by an organization Google Play developer account.